CurfewPrivacy policy.
Curfew is two iPhone apps and a small service that connects them. This page says what each part collects, why, and how to remove it.
The short version. The kid's phone works without an account, and everything it enforces stays on that phone until a parent links it. We never see what is on a screen, inside an app, or where anyone is. We do not sell information, show ads, run analytics or advertising trackers, or train AI models on your family's data.
Who we are
Curfew is made by the team behind curfewfamily.com ("Curfew", "we"). You can reach us about anything in this policy at support@curfewfamily.com.
The app on the kid's phone
The Curfew app on a child's iPhone needs no account and no connection. Schedules, allowances, protections and the parent PIN are stored on that phone.
To enforce a schedule, Curfew uses the Screen Time tools Apple provides to apps. Apple designed them so an app never learns which apps a child uses by name or what happens inside them. Curfew learns only that a window you scheduled started or ended, or that a limit you set was reached, and iOS does the blocking.
If a parent sets up a place, such as school, the kid's phone checks whether it is inside that place using the phone's own location services. The location never leaves the phone. Only "arrived at School" or "left School" is shared, and only with a linked parent account.
The web filter is Apple's. Sites you choose to always allow or always block are stored on the phone, and synced to the parent's account if the phone is linked.
The kid's app does not read messages, see the screen, record browsing history, collect analytics, show ads or include any third-party code.
What is shared when a parent links the phone
When a parent links the kid's phone to their own account, the kid's phone sends the following to our servers so the parent can see and change it from their phone:
- The schedule and settings the parent set, so they can be edited remotely.
- The phone's current status: which window is active, how much of each allowance is used, whether Curfew is applying the schedule, and any problem iOS reported.
- Usage summaries for the groups the parent named, such as Games or Social, in fifteen-minute steps. Never app names, never content.
- Requests for more time the child makes, including which window and group they relate to.
- Arrivals at and departures from places the parent created.
- The child's first name or nickname as the parent typed it, an identifier Curfew generates for the phone so the right phone gets the right schedule, and a push token so changes arrive quickly.
We do not ask for and do not collect the child's email address, birth date, Apple Account, location coordinates, contacts, photos, messages or browsing history.
The parent app
- Your account. Your email address. There is no password: you sign in with a code we email you, handled by Amazon Cognito.
- Notifications. A push token for your phone so requests, alerts and the Sunday digest arrive, and tokens for the Live Activity that shows a request on your Lock Screen.
- Subscription. Your plan, when it renews or ends, and an anonymous transaction identifier from Apple. Apple handles payment, so we never see your card.
- People you invite. The email address and role of each co-parent or approver.
- Activity log. What changed, when, and which parent changed it, so a household can see who did what.
- Email. We send account mail, such as verification codes and invitations, from curfewfamily.com. We do not send marketing email to account holders.
- Crash reports. If you chose to share analytics with app developers in your iPhone settings, Apple may send us crash reports. They contain no personal information.
This website
curfewfamily.com is served by Cloudflare, which keeps standard server logs, including IP address, pages requested and browser type, for a short time to run and protect the site. The site sets no cookies, runs no analytics or advertising trackers, and loads nothing from third parties. Even the fonts are served from this site.
If you join the early-access list, we store your email address, the time you joined and the country Cloudflare derived from your connection. We use it only to tell you when Curfew is available. Email us to be removed at any time.
How we use information
To run the features you set up, to deliver account email and notifications, to answer support requests, to detect abuse of the service, and to meet legal obligations. That is the whole list.
Who we share it with
- Apple, for the App Store, push notifications, Family Sharing and Screen Time. Apple's own privacy policy covers what Apple does.
- Amazon Web Services, which hosts our service in the United States.
- Cloudflare, which hosts this website, our DNS and our email routing.
No one else sees your information unless the law requires it. If Curfew is ever acquired, this policy keeps applying to your information and we will tell you before anything changes.
Where it is stored and for how long
Our service runs in the United States. If you use Curfew from outside the United States, your information is transferred there. We keep account information for as long as your account exists. Usage summaries are deleted automatically after 400 days, about thirteen months, so Insights can compare this school year with the last one. The activity log and everything else are deleted with your account.
Deleting your information
Unlinking the kid's phone from your account removes that phone's status and history from your account. Deleting the Curfew app from the kid's phone removes the schedule from that phone right away. To delete your account, open the parent app, tap your account picture and choose Delete account. Your account, and the kids' information if nobody else is left in the family, is removed from our servers right away. If you no longer have the app, email support@curfewfamily.com from the address you signed in with and we delete it within 30 days.
Children's privacy
Curfew is made for parents. The child's app does not create an account and collects no personal information from the child directly. Information about the child's phone reaches our servers only after a parent links the phone to their own account, which is how the parent consents. Parents can review and delete that information at any time, and can stop it by unlinking the phone. We never show ads to children or use their information for anything beyond the features the parent set up. If we learn we have collected personal information from a child without a parent's consent, we delete it.
Security
Information is encrypted in transit and at rest. Access inside Curfew is limited to what is needed to run the service and answer your requests. If you believe you have found a security problem, email security@curfewfamily.com.
Your rights
You can ask for a copy of your information, correct it, or delete it by emailing us. If you live in California, note that we do not sell or share personal information as those words are defined in California law. If you live in the European Union or the United Kingdom, we process your information to perform our contract with you, to pursue our legitimate interest in running a safe service, with your consent when you join the early-access list, and to meet legal obligations. You can complain to your local data protection authority.
Changes
When this policy changes, we post the new version here with a new date. If a change matters to how your information is used, we tell you in the app or by email first.