Privacy policy

Plain-language summary

Data BuddyPlay accesses and why

Camera and visual estimates

When you start gesture control, the Gesture Tutor, Away Pause-Resume, Eye Guard, Fatigue Monitor, or Posture Check, BuddyPlay accesses the selected camera to analyze frames in real time. Depending on the feature, that analysis can produce a gesture label, approximate viewing distance, presence state, eye-closure estimate, or baseline-relative head orientation.

Processing happens on the Android device. BuddyPlay does not save or upload camera frames, face images, or face landmarks. Camera features may use additional battery and stop when their related controls are disabled.

Using Watch Well? Read how its viewing observations, reminders, and limits are framed as supportive guidance - not medical diagnosis or safety advice. View Watch Well guidance →

Microphone and voice control

Voice control is optional. BuddyPlay’s “Hey Buddy” wake-word detection runs locally. After a wake word, the Android system speech recognizer listens briefly for “Start” or “Stop” and asks the recognizer to work offline when available. The device’s speech provider controls whether recognition is processed locally or by that provider. BuddyPlay does not save voice recordings.

Screen Time and app activity

If you enable Screen Time tools, BuddyPlay reads Android foreground-use events to calculate daily viewing totals, longest session, supported video/social app time, break reminders, and a selected daily limit. BuddyPlay stores daily aggregate totals, not browsing history, message content, media content, or camera data.

Accessibility and notification access

BuddyPlay can use Android Accessibility solely to perform visible video controls in supported apps after you make a recognized gesture. Notification access allows BuddyPlay to find active media sessions and issue familiar playback commands. BuddyPlay does not use either capability to read messages, passwords, typed text, or private page content.

Email reports and verification

If you choose Screen Time email reports, BuddyPlay processes the email address you enter, a random installation identifier, verification status, delivery state, and the aggregate details needed for a selected limit alert. A report can include watched minutes, limit minutes, a device nickname, and enabled Watch Well aggregate levels. It never includes camera frames, face landmarks, raw usage events, or a list of viewed content.

Linked-device alerts

If you pair devices, BuddyPlay processes a random single-use pairing token, installation identifiers, optional device nicknames, a Firebase Cloud Messaging token for the receiving device, link status, and aggregate limit-alert details. Pairing offers expire after seven days and can be revoked.

Purchases

Google Play handles payment details. RevenueCat receives purchase and entitlement information needed to unlock Video Control, Watch Well, Smart Pause, or All Access. BuddyPlay does not receive or store full payment-card details.

Support messages

When you email BuddyPlay, the message, address, attachments, and technical details you choose to provide are used to answer the request and improve support. Do not send passwords, payment-card information, or verification codes.

Android permissions

Permissions are requested in context. Core local features remain available when unrelated optional permissions are declined.

Service providers

BuddyPlay uses the following providers only for the described functions:

• Google Play for app distribution, billing, and Android platform services.
• RevenueCat for purchase validation and feature entitlements.
• Firebase Cloud Messaging and Cloud Functions for linked-device push delivery and related technical identifiers.
• Cloudflare Workers and D1 for the optional email-report and device-link service.
• Resend for sending verification messages and optional reports.
• Your Android speech-recognition provider for brief Start/Stop recognition after the local wake word.

Providers may process technical information such as IP address, app/package identifiers, device or installation identifiers, and delivery logs as part of operating their services. Their own terms and privacy notices apply. BuddyPlay does not authorize providers to use this information for targeted advertising on BuddyPlay’s behalf.

Retention and deletion

• Local Screen Time daily aggregates are kept for up to 90 days and can be cleared from Watch Well.
• Local preferences and calibration remain until reset, app data is cleared, or BuddyPlay is uninstalled.
• Email verification codes expire after 15 minutes. Expired and used verification requests are removed by service cleanup.
• Pairing offers expire after seven days. Device links remain until revoked or deletion is requested.
• Email recipient, installation, alert-delivery, and link records are retained while needed to provide the selected service, prevent duplicate delivery, maintain security, and resolve support issues.
• Purchase records are retained by Google Play and RevenueCat under their policies and applicable financial requirements.
• Support correspondence is retained while needed to resolve the request and maintain reasonable records.

BuddyPlay does not currently require an app account. To request deletion of server-side email or linked-alert data, use the contact form and select “Privacy or deletion.” We may ask for information needed to locate and verify the installation-linked record.

Your choices

• Start and stop gesture or voice control at any time.
• Enable Watch Well tools individually and pause monitoring.
• Decline or revoke camera, microphone, notifications, usage access, accessibility, and notification-listener access in Android settings.
• Reset Screen Time history, wellness calibration, and selected limits in the app.
• Disable email reports, change the verified address, or revoke a linked device.
• Uninstall BuddyPlay to remove local app data, subject to Android backup settings controlled by your device.

Children

BuddyPlay is a general-audience video utility and is not directed to children under 13. A parent or guardian should review permission prompts, wellness settings, email reports, linked-device alerts, and purchases for a child’s device. Do not submit a child’s email address without appropriate authority.

Security and international processing

BuddyPlay uses HTTPS for online features, signed installation requests for the optional report service, Android Keystore protection for the local installation credential, and encryption for stored push tokens. No system is perfectly secure. Service providers may process information in countries other than yours, subject to their terms and applicable safeguards.

Changes to this policy

This page will be updated when BuddyPlay changes its data practices or service providers. Material changes will be identified by a new effective date and, where appropriate, an in-app notice.

Privacy contact

For privacy questions, access or deletion requests, or concerns about this policy, use the BuddyPlay contact form.