Privacy Policy

Last updated and effective: October 20, 2026

This policy explains how EMZ Labs ("we") handles personal information through GTimer - the Windows app on a child's PC (the "PC app"), the parent web app, and the parent apps for iPhone and Android (the "parent apps", which work like the web app) - in line with Korea's Personal Information Protection Act, the EU and UK General Data Protection Regulation where it applies (see section 15) and other applicable laws. GTimer is used by parents and guardians; children don't create accounts. Where this policy says "the web app", the parent apps are meant too unless it says otherwise.

1. What we collect

From the parent

• Google sign-in details: your name, email address and an account ID.
• If you sign in with Apple (iPhone app): the name and email address Apple shares with us (Apple may give a private relay address instead of your real one) and an account ID.
• What you set up: the names you give each PC, the apps you choose to limit, daily time limits and weekly schedules, and the websites you add as games for a PC or exclude for it. Which sites families add or exclude is counted (families only by a one-way code, never linked to your account), so a site many families add or exclude can be reviewed for our web games list.
• Your time zone (for example "Asia/Seoul"), taken from your browser the first time you use the web app.
• Your devices: for each browser, phone or parent app you use, a random ID it keeps, its type (for example "iPhone · Safari" or "iPhone · App", from the browser's or app's own description), and when it was first and last used.
• Only if you turn notifications on: the push address or token your browser, phone or parent app gives us for that device (in the parent apps, from Apple's or Google's push service), and which notifications you chose (computer on / off, time's up, time changes).
• Only if you contact us: your email address and your message.
• Only if you send a problem report (Settings > Report a Problem): what you write, your sign-in email address (so we can reply), the type of your device, the web app's version and language, and each of your PCs' name, GTimer version and whether it is online - and, only if you turn on "Attach Activity" for that report, each PC's activity record for the last 7 days (described below).

From a PC linked to the web app

• A random ID for that PC (not linked to any personal account).
• Its device name, the GTimer version, and whether it is online.
• Time-limit status: time used and remaining today, whether a break is on, and which of the monitored apps are running (and which of them is in front or has a window open).
• Time used on each day of the last 4 weeks (and, on a day the used time was reset, the time used before the reset), shown in the web app's Usage.
• An activity record for the last 7 days, shown in the web app's Activity: when the PC was turned on or off, went to sleep or woke up, or lost its connection; when the day's first monitored app started (and which one); when time ran out; and when the time limit was changed or the used time was reset (with the type of your device it was changed on).
• The games the PC finds installed (names and program file names), which it counts automatically, and the apps you excluded from that.
• Programs used on the PC that our games list doesn't know yet (only ones the "Others" timer would count: not games, not excluded, not Windows' own windows): the program's file name, the description, product and company from its file properties, and its folder with the Windows user name removed - once per program. No window titles and nothing about what is done in the program. It is not linked to your account (families are only counted, by a one-way code).
• While "Web Game Detection" is on for that PC (it is on unless you turn it off in the PC's settings in the web app; you are told when a PC first has it): when the browser window in front shows a site on our web games list, the name of that site (for example "poki.com"), shown in the web app's Now Running and counted as game time. The PC reads the address of the tab in front and compares it with the list on the PC itself; addresses, page titles and other sites are never stored or sent. When the day's game time is up, that PC also blocks the listed game sites until the next day.
• Only when you ask for it while choosing apps to limit: a one-time list of the apps open on that PC, with window titles. It is shown to you and not stored.
• Only when you ask for it while adding a website: a one-time list of the sites (names only, for example "poki.com") shown in the tab in front of each browser window on that PC. It is shown to you and not stored.

Created automatically while the Service is used

• IP address and time of access - kept briefly (up to 7 days) in server logs for security and troubleshooting.

We do not collect keystrokes, screenshots, messages, browsing history (Web Game Detection sends only the name of a matching game site, described above), files, location, or what happens inside apps. We don't process national ID numbers or other unique identifiers, sensitive information, or pseudonymized information. A PC that isn't linked to the web app sends nothing about its use - it only checks for updates. Some information stays only on the PC itself (for example, its usage history older than 4 weeks, and app logs) and is never sent to us.

2. Why we use it

• To sign you in and make sure only you can see your family's PCs.
• To show you your child's time and status in the web app, and to deliver the limits you set to the PC.
• To start your child's day at your midnight (time zone).
• To send the notifications you turned on (computer on / off, time's up, time changes).
• To protect your account: to tell your other devices when a time limit is changed or a new device signs in, to show which device made a change, and to let you sign out a device (Settings > Devices).
• To keep the PC app up to date and to check that a PC runs a supported version.
• To keep our games list up to date: an automated check (Anthropic's Claude) judges whether a program the list doesn't know is a game, and we decide before anything changes on any PC.
• To manage your plan once paid plans start (see our Terms).
• To answer your questions and the problem reports you send, keep the Service secure and fix problems.

We don't sell personal information or use it for advertising.

3. How long we keep it

• Your family's data (the parent and PC information in section 1): while you use the Service. You can delete your account yourself in the web app or a parent app (Settings > Delete Account, after signing in again): your family's data on our servers and your sign-in account are deleted at once, and the PCs' technical sign-in IDs and any remaining copies within 10 days. Your PCs stop limiting time at once (GTimer stays installed on them until you uninstall it). You can also ask us by email; we then delete it without delay (within 10 days).
• Push addresses for notifications: until you turn notifications off, sign out on that device, or the device's push service retires the address.
• Your devices list: while you use the Service (only the 50 most recently used devices are kept).
• Server logs (IP addresses etc.): up to 7 days.
• Problem reports: until we've handled them, then 1 year after they're handled. Activity attached to a report is removed from it 90 days after it was sent. A deletion request removes your reports too.
• Program information for the games list (section 1): while we maintain the games list. It holds no personal information and is not linked to your account.
• Support emails: 3 years after they're handled (the retention period for consumer complaint and dispute records under Korea's Act on Consumer Protection in Electronic Commerce).
• Once paid plans start, records of contracts and cancellations, and of payments and supply, are kept for 5 years under the same Act.

Information kept because a law requires it is stored separately and used only for that purpose.

4. How we destroy it

• Procedure: personal information whose retention period has ended or whose purpose has been met is destroyed without delay (within 5 days); information a law requires us to keep is destroyed when that period ends.
• Method: electronic files are deleted by technical means that make them impossible to restore or read. We don't keep personal information on paper.
• Backups: copies left in our providers' backups are erased automatically when the backup period ends (at most 30 days) and are not used for anything else in the meantime.
• Records: when an account is deleted (by you in the web app, or by us on your request) we record when it was asked for and when it was done, and which of the two it was (with the account ID only - no name or email).

5. Sharing with third parties

We don't provide personal information to third parties, except where a law specifically requires it or investigating authorities request it following the procedures set by law.

6. Service providers (processing on our behalf)

We use the providers below to run the Service, under agreements that require them to protect the information.

7. Transfers outside Korea

These providers process information outside Korea. The transfers are processing and storage we need in order to provide the Service you signed up for, disclosed here under Article 28-8(1)(3) of the Personal Information Protection Act. Everything is sent over encrypted connections. For users in the EU, EEA and UK, see also section 15.

If you don't want your information transferred: stop using the Service and delete your account (Settings > Delete Account) or ask us (below) to delete your data. The transfers are needed to provide GTimer, so it can't be used without them. Turning notifications off in the web app's Settings stops the transfers to push services.

8. Your rights and how to use them

• You can ask at any time to see, correct or delete your personal information, to stop its processing, or withdraw your consent.
• You can see and change what you set up in the web app yourself, including which notifications each device gets (Settings); signing out stops that device's notifications. You can also unlink a PC (in the PC app's Settings) or uninstall the PC app, and delete your whole account yourself (Settings > Delete Account - see section 3).
• For anything else, email us (below); we act on it without delay (within 10 days) and tell you the result. A legal representative or someone you authorize can also make a request (we may ask for proof of authority).
• Where the law limits a request - for example, information we must keep by law - we tell you why.
• Please keep your account secure and don't use other people's information.

9. Children under 14

GTimer is a tool for parents and guardians and does not take personal information directly from children. Information about a child's PC (its device name may include the child's name, for example) is provided and controlled by the parent, as the child's legal representative, who installs the PC app and links it. If you believe a PC was linked without the proper authority, contact us and we will delete its data after checking.

10. Security

• Administrative: access to personal information is limited to the operator.
• Technical: all data is sent over encrypted connections (HTTPS/WSS), every request is checked against the sender's sign-in, and each family's data is kept separately. Notifications are encrypted so only the receiving device can read them, and the PC app only installs updates carrying our digital signature.
• Physical: data is stored in data centers run by the providers above.

11. Cookies and browser storage

The web app uses your browser's storage only to keep you signed in, to keep this browser's random device ID (see section 1) and to remember your language choice. It uses no advertising or tracking cookies. You can clear it in your browser's settings; you'll then need to sign in again, and the browser counts as a new device. The parent apps keep the same things in the phone's storage for the app; deleting the app removes them. The parent apps contain no advertising, analytics or tracking tools.

12. Privacy officer

The person responsible for personal information, and for questions, complaints and remedies about it:

• Privacy officer: Representative, EMZ Labs
• Contact: support@emzlabs.com

13. Where else you can get help

For reports or advice about a privacy violation, you can also contact (in Korea):

• Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
• Personal Information Infringement Report Center (KISA): 118, privacy.kisa.or.kr
• Supreme Prosecutors' Office: 1301, www.spo.go.kr
• Korean National Police Agency: 182, ecrm.police.go.kr

14. Changes

We announce changes on this page and in the web app at least 7 days before they take effect, and at least 30 days before for changes that matter to your rights.

15. Users outside Korea (including the EU, EEA and UK)

GTimer can be used from other countries. This section adds what the EU and UK General Data Protection Regulation (GDPR) and similar laws ask for; everything above applies too.

• Who is responsible (the "controller"): EMZ Labs, Republic of Korea - support@emzlabs.com.
• Why we may use your information (legal bases):
  • To provide the Service you asked for (performance of a contract): sign-in, your family's PCs, limits, schedules, Activity, Usage, website and app lists, your time zone, and deleting your account.
  • Our legitimate interests in keeping the Service secure and working, and in your account's protection: server logs, your devices list and its notices, update checks, and keeping the games list up to date (program information that isn't linked to you).
  • Your consent: notifications (only once you turn them on) and attaching Activity to a problem report. You can withdraw it at any time in Settings; that doesn't affect what was done before.
  • Legal obligations: records a law requires us to keep (section 3).
• Your rights: to access your information and get a copy in a common format, to have it corrected or deleted, to restrict or object to its processing (including processing based on our legitimate interests), and to withdraw consent. Much of it you can do yourself in Settings (including Delete Account); for the rest, email us. We answer within one month at the latest (usually within 10 days). You may also complain to the data protection authority where you live or work - but please contact us first so we can try to help.
• Transfers: your information is processed in Korea and by the providers in sections 6 and 7, mostly in the United States. Where the law requires a safeguard for this, we rely on the safeguards those providers offer, such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. Ask us if you want details.
• Automated decisions: we make no decisions about you based only on automated processing. The automated check in section 2 looks at programs, not people, and we decide before anything changes.
• Children: as in section 9, children don't use the parent web app or parent apps; a parent or guardian sets up and controls everything about a child's PC.