Privacy Policy
Effective Date: March 19, 2026
Last Updated: March 19, 2026
Summary of Key Points
Who we are: Knowphone Technology Solutions Private Limited, an Indian company registered under the Companies Act 2013. We are the maker of SkiePhone and the parent company of Phonout.
What personal information do we process? We collect information provided by parents or guardians when setting up and using SkiePhone. We also collect device-level data from the child's managed phone to power parental control features.
Do we process sensitive personal information? We collect location data and device identifiers such as IMEI, which are treated as sensitive. We never collect financial payment data directly.
Do we sell your data? Never. We do not sell, rent, or trade any personal information to any third party for any purpose.
Do we use child data for advertising? Never. Child device data is used solely to provide the parental control service.
Your rights: You may access, correct, or delete your data at any time. Contact us at contact@knowphone.in.
Questions? Email our Data Protection Officer and Grievance Officer at contact@knowphone.in.
1. Who We Are
Knowphone Technology Solutions Private Limited ("Knowphone", "we", "our", or "us") is a company incorporated in India under the Companies Act 2013, with its registered office at 3rd Floor, AVR Arcade, 3rd Cross, Ramamurthy Nagar, Bengaluru, Karnataka 560016.
We are the makers of SkiePhone, a managed Android smartphone designed for children aged 8 to 18, and the parent company of Phonout, a screen time management application for families.
For the purposes of India's Digital Personal Data Protection Act 2023 ("DPDP Act"), Knowphone Technology Solutions Private Limited is the Data Fiduciary in respect of personal data processed through our website and services.
This Privacy Policy applies to the SkiePhone service, the Skiephone caregiver dashboard at skiephone.com, the Knowphone website at knowphone.in, and all related services offered by Knowphone.
2. Data We Collect from Caregivers
A caregiver is the parent or legal guardian who purchases a SkiePhone and manages it through the caregiver dashboard. All data we collect is collected from the caregiver, not from the child directly.
Account and Identity Data
- Name and email address (collected at account registration via Firebase Authentication)
- Child name and age (entered by caregiver during device setup)
- SOS emergency contact number (entered by caregiver in dashboard settings)
Purchase and Billing Data
- Order details including device model, order ID, and delivery address (processed via Shopify)
- Subscription status (active or inactive)
- Payment method type and last four digits (held by Shopify and our payment processor; we never store full card details)
Dashboard Usage Data
- Parental control settings you configure (app permissions, contact lists, focus mode, school mode)
- Commands sent from the dashboard to the device (app suspensions, policy changes, Play Store tunnel sessions)
- Login timestamps and session activity
3. Data We Collect from Child Devices
All data collected from the child's SkiePhone is collected through the parent-managed caregiver account. The child does not create an account or interact with our servers directly. This data is used solely to provide parental control features.
When a SkiePhone device is active and connected to the internet, the following data is automatically collected and sent to our secure Firebase infrastructure:
Device Identity
- IMEI number: collected on first boot to enable device identity verification and factory reset restore functionality
- Android ID: used as the primary device identifier throughout the system
- Device model and Android version: used for compatibility and OTA update management
Device Status
- Online or offline status: whether the device is currently connected
- Battery level: displayed on the caregiver dashboard
- Last seen timestamp: when the device last connected
App Management Data
- Installed applications list: list of apps installed on the device, used to enforce app permissions set by the caregiver
- App suspension status: which apps are currently allowed or blocked
- Blocked install attempts: when the child attempts to install an app that has not been approved by the caregiver, the package name and timestamp are recorded and reported to the caregiver
Policy and Restriction Status
- Camera status (enabled or disabled by caregiver)
- Screen lock status
- Focus mode and kiosk mode status
- DNS filtering status (whether NextDNS content filtering is active)
- Hardening steps applied (which Device Owner restrictions are active)
Location Data
GPS coordinates (latitude and longitude) when location tracking is enabled by the caregiver. See Section 9 for full details on location data handling.
What We Do Not Collect
- Personal messages, SMS content, or call recordings
- Photos, videos, or media files stored on the device
- Browsing history or individual website visits
- Keystrokes or screen content
- Any data from third-party apps installed on the device
4. How We Use This Data
Providing the SkiePhone service: Enforcing parental controls, managing app permissions, applying device policies, and keeping the device in a managed state as configured by the caregiver.
Device management and OTA updates: Delivering software updates to the SkieOS Device Policy Controller application silently and securely.
Caregiver dashboard: Displaying device status, battery level, online status, app lists, and location to the caregiver.
Safety features: Enabling the SOS function which uses GPS and the emergency contact number provided by the caregiver.
Account management: Processing your subscription, sending transactional emails (order confirmations, renewal reminders), and providing customer support.
Security and fraud prevention: Detecting and preventing unauthorised access to caregiver accounts and device claims.
Service improvement: Aggregated, anonymised analytics to understand how caregivers use the dashboard and improve the product.
We never use any data for advertising, behavioural profiling, or any commercial purpose beyond providing the SkiePhone service.
5. Sub-processors and Data Sharing
We share data only with the following named service providers, solely as necessary to deliver the SkiePhone service. All sub-processors are contractually bound to process data only for the stated purpose.
Google Firebase (Firebase Auth, Firestore, Realtime Database, Cloud Functions, Firebase Hosting)
Google LLC, USA
Authentication, real-time device state, caregiver dashboard data, cloud functions, and website hosting. Firebase is the core infrastructure of the SkiePhone backend.
NextDNS
NextDNS Inc., USA
DNS-level content filtering for child devices. When DNS filtering is enabled by the caregiver, DNS queries from the device are resolved through NextDNS servers using the profile assigned to your device. NextDNS does not receive personally identifiable information.
Samsung Knox
Samsung Electronics Co. Ltd., South Korea and USA
For devices enrolled via Samsung Knox Mobile Enrollment (KME), device serial numbers and IMEI data are submitted to Samsung Knox servers for provisioning. This applies only to Knox-enrolled devices.
Shopify
Shopify Inc., Canada
Order processing, payment handling, and fulfilment for SkiePhone hardware purchases. Shopify processes your name, delivery address, and payment method.
Payment Processor
As displayed at checkout
Handles payment transactions. Knowphone never stores or accesses full card details.
We do not share data with advertisers, data brokers, analytics platforms for commercial purposes, or any party not listed above. We will update this list if we add new sub-processors and notify you as described in Section 14.
6. Device Owner Mode
SkieOS operates as an Android Device Owner application on your child's phone. This is the same Android Enterprise standard used by schools and businesses worldwide to manage company-owned devices. By activating SkiePhone, the caregiver explicitly consents to this mode of operation.
Device Owner mode gives SkieOS the following technical capabilities on the managed device:
App suspension
Block any app from being opened without uninstalling it
Policy enforcement
Apply restrictions such as disabling the camera, enabling kiosk mode, or locking the screen
Silent app installation
Install approved apps without user interaction
DNS configuration
Lock the device to a specific DNS provider for content filtering
Remote device lock
Lock the screen remotely from the caregiver dashboard
Remote factory reset
Erase all data on the device remotely (requires explicit caregiver confirmation each time)
OTA software updates
Update the SkieOS application silently in the background
Un-enrollment prevention
Prevent the child from removing SkieOS from the device
What Knowphone Cannot Do
- We cannot read your child's messages, emails, or personal communications
- We cannot access photos, videos, or files on the device
- We cannot listen to calls or activate the microphone remotely
- We cannot execute a remote factory reset without an explicit confirmation action from the caregiver on the dashboard
- We cannot transfer or sell Device Owner access to any third party
7. Children's Privacy
SkiePhone is designed specifically for children aged 8 to 18. We are deeply committed to protecting the privacy of children and comply with applicable children's privacy laws including the United States Children's Online Privacy Protection Act ("COPPA") and India's Digital Personal Data Protection Act 2023 ("DPDP Act") which defines a child as any person under the age of 18.
The Parent-as-Operator Model
SkiePhone uses a parent-as-operator model. This means:
- The caregiver (parent or legal guardian) is the account holder and the data subject for legal purposes
- The child does not create an account, enter a contract, or provide personal information to Knowphone directly
- All data collected from the child's device is collected through the caregiver account, with the explicit informed consent of the caregiver
- The caregiver controls all data collection features and can turn them off at any time
Consent Mechanism
Verifiable parental consent is obtained at multiple explicit points:
- At the point of purchase via a mandatory checkbox at checkout confirming the purchaser is 18 or older and is the parent or legal guardian of the child
- At first login to the caregiver dashboard via a mandatory three-part consent confirmation covering guardian status, data collection acknowledgment, and explicit processing consent
- At the point of enabling location tracking via a dedicated in-app consent prompt
- At the point of enabling Device Owner restrictions via a dedicated in-app consent prompt
Caregiver Rights Regarding Child Data
- You may review all data collected from your child's device through the caregiver dashboard at any time
- You may request deletion of your account and all associated child device data by emailing contact@knowphone.in
- You may cancel the SkiePhone subscription at any time, after which the device will be unmanaged and no further data will be collected
- You may turn off individual data collection features such as location tracking from within the dashboard
8. India Digital Personal Data Protection Act 2023
Knowphone Technology Solutions Private Limited is an Indian company and fully complies with the Digital Personal Data Protection Act 2023 ("DPDP Act"). This section describes your rights and our obligations specifically under Indian law.
Data Fiduciary
Knowphone Technology Solutions Private Limited is the Data Fiduciary as defined under the DPDP Act. We determine the purpose and means of processing your personal data.
Children Under 18
Under the DPDP Act, a "child" means any person below 18 years of age. SkiePhone devices are used exclusively by persons under 18. Processing of personal data of a child under the DPDP Act requires verifiable parental consent. We obtain this consent as described in Section 7. We do not process child data in a manner that is detrimental to the well-being of the child, and we do not track, monitor, or profile children for any commercial purpose.
Your Rights as a Data Principal
- Right to access: You may request a summary of the personal data we hold about you and your child's device
- Right to correction: You may request correction of inaccurate or incomplete personal data
- Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations
- Right to grievance redressal: You have the right to have your grievance addressed by our Grievance Officer within the timelines stated in Section 13
- Right to nominate: You may nominate another individual to exercise your data rights in the event of your death or incapacity
Consent Language
All consent requests are presented in clear, plain English. Consent is obtained before data processing begins, is specific to the purpose stated, and can be withdrawn at any time by cancelling your subscription or contacting us at contact@knowphone.in.
9. Location Data
Location data is among the most sensitive categories of personal data. We treat it with the highest level of care.
What We Collect
GPS coordinates (latitude and longitude) from the child's device, along with a timestamp of when the location was last recorded.
When We Collect It
Only when location tracking is explicitly enabled by the caregiver. Location is not collected if this feature is turned off.
How It Is Stored
We store only the most recent location of the device. We do not maintain a location history or movement log. When the device sends a new location update, it replaces the previous one.
Who Can See It
Only the caregiver account associated with that device. Knowphone employees do not access individual location data except where required to provide technical support, and only with your explicit permission.
Specific Consent
Location tracking requires a separate explicit consent confirmation within the caregiver dashboard the first time it is enabled. You may disable it at any time and location data will immediately stop being collected.
10. Data Retention Schedule
We retain personal data only for as long as necessary to provide the service or meet legal obligations.
| Data Type | Retention Period |
|---|---|
| Caregiver account data (name, email) | Duration of active subscription plus 60 days after cancellation |
| Child device data (app lists, policy state, hardening logs) | Duration of active subscription plus 60 days after cancellation |
| Location data | Live only. Replaced with each new update. Deleted immediately on subscription cancellation. |
| IMEI and device identifiers | Duration of active device registration. Deleted on permanent device removal. |
| Blocked install attempt logs | 12 months rolling, then automatically deleted |
| Purchase and order data | 7 years as required by Indian accounting and tax law |
| Subscription billing records | 7 years as required by Indian accounting and tax law |
| Grievance and support communications | 3 years from the date of resolution |
| Website analytics (anonymised) | 12 months |
11. Cross-Border Data Transfers
Our services rely on sub-processors whose servers are located outside India. By using SkiePhone, you consent to the transfer of your data to the following locations:
Google Firebase
United States
Google's standard contractual clauses and data processing addendum apply.
NextDNS
United States
DNS query data only. No personally identifiable information is transferred.
Samsung Knox
South Korea and United States
Applicable to Knox-enrolled devices only. Samsung's Knox data processing terms apply.
Shopify
Canada and United States
Shopify's standard data processing addendum applies.
We will update this section as Indian cross-border data transfer regulations under the DPDP Act are finalised and implemented by the Government of India.
12. Your Rights as a Caregiver
You have the following rights regarding your personal data and your child's device data. To exercise any of these rights, email contact@knowphone.in.
Access
Request a copy of all personal data we hold about you and your child's device.
Correction
Request correction of any inaccurate information.
Deletion
Request deletion of your account and all associated data. Some data may be retained for legal obligations as described in Section 10.
Withdrawal of consent
Withdraw consent for any specific processing activity at any time. You can do this by cancelling your subscription or adjusting settings in the caregiver dashboard.
Portability
Request a structured, machine-readable copy of your data.
Grievance redressal
Raise a complaint with our Grievance Officer. See Section 13 for contact details and timelines.
13. Data Protection Officer and Grievance Officer
As required under India's Information Technology Act 2000, the DPDP Act 2023, and applicable rules, Knowphone has appointed a Data Protection Officer who also serves as our Grievance Officer.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes we will notify you by email at the address associated with your caregiver account at least 15 days before the changes take effect. For minor changes, we will update the "Last Updated" date at the top of this page.
Your continued use of the SkiePhone service after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree to the updated policy you may cancel your subscription and request data deletion at any time.
15. Contact Us
Knowphone Technology Solutions Private Limited is committed to protecting the privacy of children and families. If you have any concerns, we are here to help.