KRotSummary. KRot is a league between friends over who uses their phone the least. To make it work, your league sees how much time you spend on your phone, rounded down to 5-minute steps, how much you spend in the apps you choose to flag, and how many times you try to get past the lock. We never see what you do inside apps, what you write or who you talk to. We don’t sell your data or use it for advertising. You can delete your account from the app whenever you like.
This is a translation of the Spanish privacy policy. If the two versions differ, the Spanish version prevails.
1. Who is responsible
The controller of your data is Lancelot-Project (“we”). For any privacy question, write to privacidad@lancelot-project.com. We have not appointed a data protection officer.
2. What data we process and why
2.1. Your account
When you sign in with Apple or Google, we receive a user identifier and, if the provider shares them, your email address and your name. With Apple you can hide your email: KRot doesn’t need it. We also store the name your league will see you by, how the standings refer to you (the Spanish masculine or feminine ordinal, 1.º or 1.ª), the tone K uses with you, and whether notifications are on.
Why: to identify you, let your league know who you are and keep your preferences. Legal basis: performance of the contract (the service you ask for by using KRot).
2.2. Your league
We store the league you belong to, its code, the group agreement (daily limit and punishment, which you write), proposals and votes, time requests with their message and the replies to them, feed posts and reactions, and the result of each closed week.
Why: so the league works: standings, votes, pleas, the feed and the Sunday close. Legal basis: performance of the contract.
Members write the league name, the punishment and the messages in their pleas. Please don’t include anyone’s personal data or sensitive information in them.
2.3. Screen Time (Apple’s permission)
KRot uses Apple’s Screen Time permission (the FamilyControls, DeviceActivity and ManagedSettings frameworks). During sign-up you select “all apps”, choose your essentials (up to five apps that neither count nor lock) and flag, one by one, the apps whose time you want broken down (for example, Instagram or TikTok). You can also name an app that isn’t on the list.
Leaves your phone and your league sees it
- Your minutes on the phone each day, excluding essentials, rounded down to the last step crossed: 5-minute steps for the first hours of the day and 15-minute steps after that.
- Your minutes each day in the apps you flagged, rounded the same way.
- The generic name of those apps (“tiktok”) or the name you gave them.
- How many times you tapped the shield of a locked app (“attempts to get past the lock”).
- Whether you have removed the permission or stopped sending data.
Never leaves your phone
- What you do, see or write inside any app.
- Who you talk to.
- Which apps are your essentials and what other apps you have.
- The internal identifiers Apple assigns to each app.
- Your minute-by-minute time, your hourly curve and how many times you open each app: these are calculated and shown only on your “Today” screen, inside an Apple component that cannot send anything off the phone.
Why: to calculate your league’s standings, lock the phone when you hit the group limit and unlock it when someone gives you time. Legal basis: your consent, which you give by granting the Screen Time permission. You can withdraw it at any time in iOS Settings. If you do, your league will see there’s no data from you and can vote on whether you stay.
2.4. Notifications
If you turn on notifications, we store your device’s notification identifier and, while you wait for an answer to a plea, the identifier of its Live Activity. We use them to let you know when someone asks you for time, when you’re given time or when the week closes. We may also send silent notifications so the app can sync your data. Legal basis: your consent. You can turn them off in the app or in iOS Settings.
2.5. The league pass (payments)
Payments are processed by Apple. We never see or store your card details. To manage the subscription we use RevenueCat, which receives your KRot user identifier, the purchase information Apple provides and the league the pass belongs to. We store which league has a pass, who pays for it, its status and its expiry date. Other league members can see who pays. Legal basis: performance of the contract.
2.6. Subscription screens
To show and improve the pass screens we use Superwall. It receives your user identifier, how you interact with those screens and only this data: how many people are in your league, whether you’re the one paying, the pass status and how many weeks you’ve closed. No Screen Time data is sent to Superwall, RevenueCat or any other third party for commercial or analytics purposes. Legal basis: our legitimate interest in offering and improving the subscription.
2.7. Technical and security data
Our servers log technical data (date and time of requests and errors) to keep the service secure and detect abuse. Legal basis: our legitimate interest in the security of the service.
2.8. If you write to us
If you write to support or privacy, we use your email address and what you tell us only to reply. Legal basis: our legitimate interest in helping you or, if you’re exercising a right, our legal obligation to respond.
3. Who else processes your data
We work with these providers, who process data only on our instructions:
| Provider | Purpose | Where |
|---|---|---|
| Supabase Inc. | Database, sign-in and server | European Union (Ireland) |
| Apple Inc. | Sign in with Apple, notifications, payments | US / EU |
| Google LLC | Sign in with Google | US / EU |
| RevenueCat Inc. | Subscription management | US |
| Superwall Inc. | Subscription screens | US |
| Cloudflare Inc. | Hosting this website and forwarding contact email | US / EU |
| Microsoft Corporation | Inbox where we receive support and privacy email | US / EU |
When a provider processes data outside the European Economic Area, it does so with GDPR safeguards: the EU-US Data Privacy Framework if the provider is certified or, if not, the standard contractual clauses approved by the European Commission.
We don’t sell your data or share it with third parties for advertising. We will only disclose it to authorities when the law requires us to.
4. What your league sees about you
Members of your league see what the app shows about you:
- Your league name and your position.
- Your time for the week and for each day, and what you’ve spent today in each app you flagged, in the steps described in section 2.3.
- The flagged app you use most.
- Your attempts to get past the lock.
- How often you give time and when you last used KRot (“active X min ago”).
- Your votes, your pleas with their message, and your posts.
- Whether you pay for the league pass.
5. How long we keep your data
- While you have an account, we keep what’s needed for your league and its history to work.
- If you leave a league, you stop appearing in it. The results of weeks already closed are kept as that league’s history.
- If you delete your account (in the app: Perfil › Cuenta › Borrar cuenta, that is, Profile › Account › Delete account), we immediately delete your account, your profile and your Screen Time data. Your name is replaced with “Alguien” (“Someone”) in the feed and in the history of the leagues you were in. Our provider’s backups are deleted automatically within 30 days at most. How to delete your account.
- RevenueCat and Apple keep purchase information for the periods required by tax law.
- Emails you send us are kept as long as needed to help you and, after that, for the limitation period of any possible liability.
6. Minimum age
KRot is meant for people aged 16 or over, and we don’t allow anyone younger to use it. If you are a parent or guardian and believe a child under 16 has given us data, write to us and we will delete it.
7. Your rights
At any time you can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given. To do so, write to privacidad@lancelot-project.com. We will reply within one month, which may be extended by two more months if the request is complex; if so, we’ll tell you.
You can do many of these things directly in the app: change your name, turn off notifications, withdraw the Screen Time permission in iOS Settings, leave a league or delete your account.
If you think we haven’t handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority where you live.
8. Security
Communication between the app and our servers is encrypted. Access to each league’s data is restricted to its members by rules in the database itself. Apple’s app identifiers never leave your device.
9. This website
krot.lancelot-project.com uses no cookies, has no analytics or advertising and loads no third-party resources. Cloudflare, which hosts it, processes your IP address and the technical data of each visit to serve the pages and protect them from attacks. More detail in the legal notice.
10. Changes to this policy
If we make an important change to this policy, we’ll let you know in the app before it applies. The date of the last update is shown at the top.