SCRELI — PRIVACY POLICY ======================= Effective August 29, 2026 · Last updated September 22, 2026 Screli ("Screli", "we", "us", or "our") is operated by Bairat Labs, LLC. This Privacy Policy explains what information Screli collects, how we use it, and the choices and rights you have. It applies to the Screli mobile apps and related services (together, the "Service"). Screli is a parental digital-wellbeing app. It is set up and operated by a parent or guardian ("you") to understand and guide a child's device use. A child does not create a Screli account. If you do not agree with this Policy, please do not use the Service. 1. WHO IS RESPONSIBLE FOR YOUR DATA ----------------------------------- Bairat Labs, LLC is the controller of the personal information processed through Screli. For any privacy question or to exercise your rights, contact us at bairatlabs@gmail.com. 2. THE INFORMATION WE COLLECT ----------------------------- We collect only what we need to provide the Service. Account information. When you create an account we collect your email address and authentication credentials, and we assign a user ID. We use a third-party authentication provider (see Section 6). Child profile information. When you add a child, you provide information such as the child's name (or nickname) and age or date of birth. You choose what to enter. Device and pairing information. When you pair a child's device we generate and store device identifiers and a per-device pairing secret so the device can securely sync. Screen-time and app-usage data. To provide the core Service, we collect usage information for the managed child device, such as total daily screen time, hourly usage, and per-app or per-category usage totals. On iOS, app usage is read through Apple's Family Controls / DeviceActivity framework and is handled as opaque, on-device data where the platform requires; on Android it is read through system usage APIs. These totals are synced to your account so you can see them across your own devices. On Android this includes the identifier of each app used (its package name) together with its display name and category, because that is what lets us show you which apps the time was spent in. Android Accessibility service (child device only). To enforce the limits you set, Screli Kids uses Android's Accessibility API on the child's device, after a prominent disclosure and your affirmative consent, and only while you have enforcement switched on. It reads only the package name of the app currently in the foreground, so it can tell whether a rule applies right now. It does not capture screen contents, text your child types, messages, passwords, or keystrokes. The Accessibility service itself sends nothing off the device: the package name is compared against your rules locally and then discarded. App identifiers do reach our servers, but through the separate usage sync described immediately above, not through this service. Turning enforcement off, or disabling the service in Android settings, stops it immediately. Controls and settings. The limits, bedtime/downtime/school schedules, blocked and always-allowed apps, PIN (stored only as a secure hash), and notification preferences you configure. Requests, rewards, and engagement. Extra-time requests and their outcomes, and any rewards you define and confirm. Subscription information. Whether your account is on the Free or Pro tier and your subscription status. Payments are processed by Apple or Google; we do not receive or store your full payment card details. We use a third-party subscription provider to validate purchases (see Section 6). Consent and activity records. Versioned records of the consents you provide and an audit log of sensitive account actions, which exist to protect your account and meet legal obligations. Technical and log data. Standard information needed to operate and secure the Service, such as app version, device type, and event logs. We do not collect location data, contacts, photos, or browsing history, and we do not use advertising identifiers. 3. HOW WE USE INFORMATION ------------------------- We use the information above to: - provide and operate the Service — show usage insights, apply the limits and schedules you set, and handle extra-time requests and rewards; - create and secure your account and pair devices; - process and validate your subscription and manage entitlements; - respond to your requests and provide support; - keep the Service safe, detect and prevent abuse, and meet legal obligations; - maintain the consent and audit records described above. We do not sell your data or your child's data. We do not use your data or your child's data for advertising, ad measurement, or to build advertising profiles, and we do not share it with data brokers. We do not use screen-time or usage data for any purpose other than providing the Service to you. 4. CHILDREN'S PRIVACY --------------------- Screli is designed to be operated by a parent or guardian to supervise their own child. Children do not create accounts or provide information to us directly. The parent or guardian sets up the child profile and provides any information about the child. By adding a child and pairing a device, you confirm that you are the child's parent or legal guardian (or are otherwise authorized) and that you consent to Screli processing the child's information as described in this Policy, solely to provide the Service to you. We collect the minimum child information needed to provide the Service, we do not condition the child's use of the Service on disclosing more than is reasonably necessary, and we do not use the child's information for advertising or to build profiles for any purpose other than the Service. You can review, export, or delete the child's information at any time (see Section 7). 5. LEGAL BASES FOR PROCESSING (EEA/UK) -------------------------------------- Where the GDPR or UK GDPR applies, we rely on the following legal bases: - Performance of a contract — to provide the Service you sign up for. - Consent — for processing a child's information and any optional features; you may withdraw consent at any time. - Legitimate interests — to secure the Service, prevent abuse, and maintain audit records, balanced against your and the child's rights. - Legal obligation — where we must retain or disclose information to comply with law. 6. HOW WE SHARE INFORMATION --------------------------- We share information only with service providers that help us run the Service, under contracts that require them to protect it and use it only on our instructions. These currently include: - Supabase — cloud database, authentication, and backend hosting (data hosted in the United States). - RevenueCat — subscription validation and entitlement management. - Apple and Google — app distribution and in-app purchase processing. - Google Firebase Cloud Messaging and Apple Push Notification service — push notifications. Each install has a push token stored with your account or with the paired child device. A parent's notification names the child who asked for more time and nothing else; a child device receives only silent messages telling it to fetch its updated rules. We may also disclose information if required by law, to protect the rights, safety, or property of Screli, our users, or others, or as part of a merger, acquisition, or sale of assets (with notice as required by law). We do not sell personal information, and we do not share it for cross-context behavioral advertising. 7. YOUR RIGHTS AND CHOICES -------------------------- Screli gives you controls in the app's Privacy Centre, and these controls are always free — never limited to paid plans: - Access and export your data and your child's data; - Delete a child, disconnect a device, delete your family, or delete your account; - Manage consent, including withdrawing consent you previously gave; - Configure notifications and other preferences. Depending on where you live, you may also have rights to access, correct, delete, restrict, or object to processing, to data portability, and to lodge a complaint with your data-protection authority. To exercise any right, use the in-app controls or contact bairatlabs@gmail.com. We will respond within the time required by applicable law. Deletion or export that is required by law is never withheld or paywalled. 8. DATA RETENTION ----------------- We keep information for as long as your account is active and as needed to provide the Service: - On the Free tier, detailed usage history is retained for 7 days; on Pro, retained history is longer as described in the app. - When you delete a child, device, family, or account, we delete or de-identify the associated personal information, except where we must retain limited records to comply with law, resolve disputes, or enforce our agreements. 9. SECURITY ----------- We protect information with encryption in transit (HTTPS/TLS), cryptographically signed enforcement policies (Ed25519) that devices verify before applying, database-level access controls that scope data to your family, and a parent PIN protecting sensitive settings. No method of transmission or storage is completely secure, but we work to protect your information and continually improve our safeguards. 10. INTERNATIONAL DATA TRANSFERS -------------------------------- We host and process data in the United States. If you use Screli from outside the United States, your information will be transferred to and processed there. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for these transfers. 11. CHANGES TO THIS POLICY -------------------------- We may update this Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app or by email. Your continued use of the Service after changes take effect means you accept the updated Policy. 12. CONTACT US -------------- Bairat Labs, LLC Email: bairatlabs@gmail.com (c) 2026 Bairat Labs, LLC. Screli and the Screli logo are trademarks of Bairat Labs, LLC.