Privacy Policy

• App usage — which apps were open, for how long, and screen unlocks. Only after you turn on “Usage access” for Khronometr in Android settings.
• Network use per app — how many Wi-Fi and mobile bytes each app used, from the same permission.
• Names and icons of installed apps — to show them in the lists. The website version holds the permission to see all installed apps for this.
• Device model and the name you give the device — to tell your devices apart.
• A device identifier — the number Android gives Khronometr on this phone (Android ID). It is part of the file names in your Drive folder, and only if you turn sync on.
• Your date of birth, only if you enter it — kept on this phone only and never synced, to show at what age your history starts.

It does not read messages, contacts, location, photos, the microphone, the camera, what you type, or anything inside other apps.

Usage access

To count time and traffic per app.

Notifications

Limit reminders and the evening summary — you choose which.

Display over other apps

Only to show the “Time’s up” screen over an app whose limit you set. Optional. The screen can always be closed.

See all installed apps

To show names and icons of your apps in the lists (website version).

Foreground service, run in the background, start after reboot

So counting and your limits keep working. While limits are watched, Android shows a notification.

Battery optimisation exception

Asked once, optional — so the phone doesn’t stop the counting.

Install unknown apps

Only in the version from this website, to install its own updates. Optional.

Internet

For the optional Google Drive sync and, in the website version, the update check.

If you install Khronometr for Windows, on that PC it reads:

• the name of the program whose window is in front, and for how long;
• when the screen is locked and unlocked;
• playtime of your own Steam account’s games, from Steam’s files on this PC (and, if you turn it on, a game name from Steam’s store, see below);
• older time and traffic per program from Windows’ own usage journal, for your Windows user only — only after you allow it once.

It keeps this in its own folder, %LOCALAPPDATA%\Khronometr, together with your Google address (as plain text) and, if you signed in, an encrypted sign-in token. It does not read what is inside windows, keystrokes, screenshots or browser history.

Steam. About once a day it reads the playtime of your Steam account from Steam’s files on this PC: the account used on your Windows user or, if it can’t tell, the one used last on this PC. Asking Steam’s public store is off by default. If you turn it on in Settings, then for a game that is no longer installed and whose name it cannot find there, the app asks store.steampowered.com for the name and saves what it finds. Steam then sees that game’s id and your PC’s IP address. This works without Google sign-in.

With sync on, it also downloads your other devices’ data from that same hidden Drive folder, to show it in its window. Its Drive files are named with an identifier of this PC (w- and the Windows machine id), and the PC’s name is stored as the device name. It also checks for its own updates every 6 hours on pegasohlib.github.io and installs only files with the author’s digital signature; no personal data is sent, but the server sees your IP address.

It installs for your user only and needs no admin rights. It adds:

• the program, in %LOCALAPPDATA%\Programs\Khronometr;
• a Start menu shortcut and an entry in Windows’ Installed apps;
• autostart (a Run entry for your user, switched on at the first start and off again in Settings);
• a scheduled task of your user, “Khronometr Watchdog”, that every 10 minutes starts the app again if it is not running.

Only if you choose to import Windows’ journal, Windows asks for administrator rights once. The app then creates the task “Khronometr Journal”, which runs as SYSTEM every 6 hours. It starts only Windows’ own cmd.exe and esentutl.exe and the script C:\Program Files\Khronometr\journal-copy.cmd. That folder can be changed only by SYSTEM and administrators, and the copy of the journal in it can be read only by them and the user who set it up. This copy is Windows’ whole journal, so it also holds the usage of all other Windows users of this PC, and the user who set it up can read it. The app itself imports only that user’s own records.

Uninstalling removes the program, shortcut, autostart, the Watchdog task and the Installed apps entry. The journal task notices that the app’s folder is gone and deletes itself and its Program Files folder, usually right away and at the latest at its next run, with no prompt. Your data folder stays; see “Your control and deletion”.

Everything is stored on your devices: in the app’s own database on the phone, in the app’s own folder on the PC and, only if you turn sync on, in your own Drive folder. The developer has no server and never receives your data. On Android the automatic backup is switched off, so the data does not go into Google’s phone backups.

Export files (zip) are created only when you ask, and are saved where you choose. They are not encrypted and hold your whole history, the apps you joined and device ids.

If you choose “Connect Google Drive”, the app saves its history in the hidden app folder of your own Google Drive. The permission is drive.appdata: the app can see only the files it created there and nothing else on your Drive.

What goes there: daily time and traffic per app, sessions, app names and icons, device names, your limits with groups (plus how much of each shared limit was used today) and the list of apps you joined (app identifiers and when they were joined). The file names contain an identifier of the device that wrote them (a- and the Android ID, or w- and the Windows machine id). This is how your other devices show the same history and how limits work on several devices.

Data travels encrypted (HTTPS) between your device and Google. The developer cannot access your Drive. The app reads your Google e-mail once from Drive to show it; it is kept on that device and not sent anywhere else.

Turning sync off stops sending and receiving, but what is already on Drive stays there, and old devices stay listed. To delete the cloud copy, use “Delete my copy from Google Drive” in the app (see “Your control and deletion”).

Khronometr’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

The version from this website checks pegasohlib.github.io about twice a day (the Windows app every 6 hours) for a newer version and downloads it from GitHub. Android checks that it is signed by the same developer before installing; the Windows app installs only files whose digital signature matches the author’s key. Nothing about you is sent, but, like any website, GitHub sees your IP address.

With “Update automatically” on (the default), the app installs the update itself; on Android only if you allowed “Install unknown apps”, and Android may ask you to confirm. Turning it off stops the installing, not the checking: the app then only tells you a version is out. The Google Play version is updated by Google Play instead.

GitHub also counts how many times each file has been downloaded. It is only a number, with nothing about who downloaded it; the website shows it as an approximate number of downloads.

The developer receives nothing: there is no server, no analytics and no crash reporting. Your data is not sold, shared or used for advertising. The apps talk directly to three outside services, which see what a normal request shows:

• Google — your own Drive, only if you turn sync on.
• GitHub and pegasohlib.github.io — update checks and downloads in the website versions; they see your IP address.
• Steam (Valve) — Windows app only, and only if you turn it on in Settings: for a game whose name it cannot find on the PC, it asks store.steampowered.com during the daily Steam check, without Google sign-in. Steam sees the game id and your PC’s IP address.

• Sync: turn it off any time in the Devices tab. This stops sending and receiving; what is already in Drive stays.
• Cloud copy: “Delete my copy from Google Drive” in the app deletes every file the app keeps in your Drive, for all your devices. The phone then turns sync off, and the PC signs out of Google. A device that still has sync on uploads its data again unless you turn sync off there too. What is already on each device stays. You can also use Google Drive → Settings → Manage apps → Khronometr → Delete hidden app data.
• Phone: clear the app’s storage or uninstall it — everything on the phone is gone. Android’s backup keeps no copy.
• PC: Windows Settings → Apps → Installed apps → Khronometr → Uninstall. The data folder %LOCALAPPDATA%\Khronometr (history, settings, your Google address) stays: delete it by hand if you want it gone. The journal task removes itself.
• Exports are your own files: delete them like any other file.

All traffic to Google uses HTTPS. On the phone, sign-in is handled by Google Play services; on the PC, the sign-in token is encrypted with Windows (DPAPI) for your user only. The app never asks for or stores passwords.

The journal task on Windows runs with SYSTEM rights, so it starts only Windows’ own programs and one script in a folder that only administrators can change. The data folder on the PC and export files are not encrypted.

The date at the top shows the latest version. Important changes are also mentioned in the app’s update notes.

Who is responsible. PegasoHlib, a private individual who develops these apps, is responsible for the data described here. Contact: support@pegasohlib.com.

Why data is used, and on what legal basis.

Running the app, and the backup or sync you turn on

Contract: needed to provide what you asked for (GDPR Art. 6(1)(b))

Update checks and safety

Legitimate interest: keeping the app safe and up to date (Art. 6(1)(f))

Names of Steam games, in the Windows app, if you turn it on

Consent: you can turn it off at any time (Art. 6(1)(a))

An e-mail you send

Legitimate interest: answering you (Art. 6(1)(f))

Who receives it, and transfers outside the EU. Google (your Drive, if you turn sync on), GitHub (update checks and downloads) and, only if you turn it on, Valve (Steam’s store). E-mail you send passes through Cloudflare and is kept in a Gmail mailbox by Google, and Anthropic may process it when an AI assistant helps read it. Some of these companies are based in the United States or other countries outside the EU. Those transfers rely on the EU–US Data Privacy Framework where the company takes part in it, or on the company’s standard contractual clauses.

How long it is kept. Data in the app stays until you delete it or remove the app. Copies in your own cloud storage stay until you delete them. E-mails you send are kept until the matter is closed, and for no more than 2 years.

Your rights. You can ask for access to your data, correction, deletion, restriction, a copy to take elsewhere (portability), and you can object to processing or withdraw consent at any time. Write to the address above. You’ll get an answer within one month. Most of the data is only on your device, so you can usually do this yourself in the app.

Complaints. You can complain to the data protection authority of your country.

Age. You need to be at least 15 to use the app on your own. If you are younger, ask a parent or guardian to agree first.

Language. Translations of this policy are made with the help of AI. If a translation differs from the English text, the version more favourable to you applies.

Questions or requests: support@pegasohlib.com