Privacy Policy

Last updated: June 11, 2026

ReDirect ("we", "us") is an iOS app that lets parents gate apps on a child's iPhone behind short learning sessions. This policy explains what information we collect, why we collect it, and how it is used.

Information we collect

• Parent account. Either an email address and a hashed password, or — for accounts created during in-app onboarding — no email at all: the account is tied to the parent's device and authenticated by a credential stored securely on it.
• Child profile. A display name and grade level, entered either by the parent or on the child's device during setup that the parent authorizes with a one-time pairing code. No child email, phone number, or real-world identifier is required.
• Learning activity. Which passages a child has read, quiz attempts and scores, earned breaks, and screen-time balance.
• Device tokens. An Apple Push Notification Service (APNs) token per device, used to deliver background pings and parent alerts.

Information we do not collect

• Location, contacts, photos, microphone, or camera data.
• Browsing history or data from inside the apps a child unlocks.
• Advertising identifiers. We do not track users across other apps or websites.
• Health, fitness, or financial data.

Apple Screen Time data

ReDirect uses Apple's Family Controls, Managed Settings, and Device Activity frameworks to shield and unshield selected apps. The set of shielded apps is chosen by the parent through Apple's own FamilyActivityPicker and is stored only on the device. We never receive the identities of the apps the parent selected or any data from inside those apps.

Third parties

• Google Gemini API. Passage text is sent to Google's Gemini API to generate fresh comprehension questions. No parent email, child name, or other identifying information is included in these requests.
• Apple Push Notification Service. Receives standard device tokens for the limited purpose of delivering notifications.
• Book sources. Public-domain books are fetched from Project Gutenberg and a third-party Gutendex mirror. These requests contain no user information.

How information is stored

Account, child, and learning-activity data is stored in our backend database, accessed only over HTTPS. Authentication uses JSON Web Tokens. Passwords are stored only as hashes — we cannot recover a forgotten password and can only reset it.

Data retention and deletion

Data is retained while the account is active. A parent can delete the account and all associated child profiles, learning activity, and device tokens at any time from inside the app, or by emailing support@redirectscreentime.org from the email address on the parent account. We will delete the account within 30 days of receiving a verified request.

Children's privacy

ReDirect is intended to be set up under the direction of a parent or legal guardian. A child's device can only be connected with a one-time pairing code generated in the parent's app — sharing that code is the parent's verifiable consent for the child profile created during setup. We collect only the minimum information needed to run the learning loop (display name, grade level, learning activity). Children cannot create accounts on their own, and we do not sell or share children's data.

Changes to this policy

If this policy materially changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify parents in the app.

Contact

Questions about this policy: support@redirectscreentime.org.