Screen PRIVACY POLICY
How we handle
your data.
Screen for AI (formerly AI Smart Screen) is operated by Gábor Eifert, Dunaharaszti, Hungary. He is the data controller for the information described here.
1. Who to contact
For privacy questions and data requests, email contact@screenforai.app. Please do not send passwords, access tokens or pairing codes. We have not appointed a data protection officer; this address handles all privacy questions and requests. The older name AI Smart Screen can still appear in parts of the service and sign-in.
2. The short version
- The clock and the direct Wi-Fi mode work without any Screen for AI account. Their data stays on your phone.
- If you use the internet service, we keep what we need to run it: an account record, your approved screens and short-lived delivery and usage records. We do not keep your full email address.
- We do not show ads, sell data, use analytics or tracking cookies, or build advertising profiles.
- Pages your AI sends and the answers you give are handled to deliver them, not for anything else.
- If you buy Plus, Google handles the payment. We never see your card.
- You can delete your account at any time.
3. What this policy covers
| Part | What it is |
|---|---|
| Website | screenforai.app |
| Android app | "Screen for AI" from Google Play, for Android 8.0 and newer. A separate edition for Android 5.0–7.1, not on Google Play and still being tested, is covered too. |
| Internet service | The service your AI connects to at app.screenforai.app (its own notice: app.screenforai.app/privacy) |
| Sign-in | login.screenforai.app, run for us by Auth0 |
| Plus | The optional paid subscription, sold through Google Play |
The AI apps you connect (for example Claude or ChatGPT) are separate services with their own privacy policies. See section 9.
4. The website
The website has no accounts, forms, analytics, advertising, tracking pixels or external fonts, and its code sets no cookies or browser storage. Its scripts, styles and pictures are local files. The interactive examples use made-up content, are kept in the page's memory, reset when you reload and are not sent to an AI, a phone or a mailing-list provider.
Cloudflare hosts the website. To deliver and protect it, Cloudflare processes technical request data such as your IP address and the page requested. The website runs no server code of its own, and we have not turned on visitor logging or analytics. Cloudflare's own security and operational records follow Cloudflare's policies.
Mailing list. This website has none and collects no email addresses. If we add one, this policy will first name the email provider, what is kept, for how long and how to unsubscribe.
5. On your phone
Without an account. The clock, the phone's settings and the direct Wi-Fi mode do not need a Screen for AI account. In the Wi-Fi mode an AI app on your local network that you approved on the phone talks to the phone directly over an encrypted connection. Pages, saved answers, interactions, approvals and settings stay on the phone and do not pass through our service. You approve or remove these apps in the phone's own controls.
What the app stores. Pages, the values a page saves, recent interactions, approved apps and screen settings. Each version of a page has its own saved answers; a new version starts with none unless the AI passes earlier answers on. Pages and their saved answers stay on the phone until you delete them (Settings › Page history), an AI app you connected deletes them, or you turn on automatic deletion of the oldest unused pages; a newer version of a page replaces an earlier one that holds no answers. Interaction history is kept for about seven days where the phone can tell its age, and cleanup runs when the app runs. This is not unlimited storage, a cloud backup or a promise to erase an offline phone by a fixed time.
"Clear remote content" in the app removes the pages and their saved data. A page may also keep data in the app's built-in browser that Clear remote content does not remove, so this control is not a complete browser-data wipe. Uninstalling the app or clearing its storage in Android settings removes everything the app keeps on the phone.
Android backup. The app opts out of Android cloud backup, so its data is not copied to your Google account.
Google Play services and Firebase. On Android 8.0 and newer the app includes Google's Firebase Cloud Messaging, which lets the service wake the phone when a new page is waiting. When the app starts, Firebase registers the installation with Google, even if you have no account, and Google processes an installation identifier, a messaging token and basic device information under Google's own terms. We receive the messaging token only if the phone uses a route with wake-up notifications.
The app contains no advertising, analytics or crash-reporting libraries. If you share usage and diagnostics with Google on your phone, Google may give us aggregated statistics and crash reports through Google Play. These are not linked to your Screen for AI account.
What the app can access. The app uses the internet and your local network, keeps a notification while connected, restarts after the phone reboots and can turn the screen on for a new page. It does not access your contacts, messages, files, location, camera or microphone. A page shown on the screen does not get access to these either.
6. When you use the internet service
Your account. An account is created when you sign in and approve your first screen. Signing in alone, or connecting an AI app, does not create one. We keep:
- a random account ID and when the account was created;
- a keyed hash of your sign-in identity, so the same sign-in finds the same account (it cannot be turned back into your email address);
- your plan (Free or Plus) and this and last month's usage counts.
If we invite an account, or give it complimentary Plus, the service's configuration also lists a keyed hash of that sign-in.
Your name and email. Auth0 gives us your name and email address when you sign in. We shorten the email immediately (for example an…ne@example.com) and never store or log the full address. The cleaned name and shortened email are shown on the approval page and on the phone you approve, so people near that screen can see them. They are held only in your short-lived sign-in session, in the service's memory and, encrypted so only the service can read them, in your browser's sign-in cookie (at most 15 minutes). They are never used to decide access.
Your screens. For each approved screen: its name, its keys and credential hashes, approval and expiry details, and whether it was removed. While a screen is connected the service also holds its latest status, settings and app version in memory.
Pages and answers. On the standard internet route the page your AI sends passes through the service's memory on its way to the phone; the service keeps delivery identifiers, fingerprints, status and times, not the page, limited to the latest 512 delivery records and 64 page identifiers per screen. Answers and interactions your AI reads back are fetched from the phone when asked.
On the older hosted relay route, still used by some earlier invited installations, the service stores the page's HTML, its latest values and returned interactions, the screen's registration and connection details and, if wake-ups are on, the phone's Firebase messaging token.
The service is not end-to-end encrypted: connections are encrypted in transit, but content passes through the service in readable form, and the AI apps you authorise and the operator could technically access it. We do not look at page content except to investigate a problem you report or to meet a legal obligation.
Usage and security records. To count your allowances and protect the service we keep short-lived records: per-delivery tickets (24 hours), monthly usage counts (current and previous month), one small daily record for each self-signed-up account, with its service use for the current day and whether it has Plus (the counts start again each day, and the record is removed with the account), a keyed hash of your network address in memory for about ten minutes, and, after an account is deleted, a keyed hash of its sign-in in memory for one day to stop immediate re-signup. None of these contain page content or answers. Cloudflare processes the network address itself to deliver and protect the service.
Cookies. The service sets one necessary cookie while you sign in, approve a screen or delete your account, lasting at most 15 minutes. Auth0 sets its own sign-in cookies. No analytics, advertising or tracking cookies are used. The website itself does not set this cookie.
7. Plus subscriptions through Google Play
Google Play handles the purchase and payment under the Google Play terms and Google's privacy policy. We never receive your card details, billing address or Google account email.
To link a purchase to your Screen for AI account, the app gives Google an account tag derived from your account ID that does not name you. When you buy, renew, switch plans, cancel or get a refund, we ask Google about the purchase and keep: a one-way hash of the purchase token, which account it belongs to, the product, whether it gives Plus and the dates it is valid. We keep this until 90 days after the purchase stops being valid, or until you delete your account, whichever is first.
Google shows us order records in the Google Play Console (such as an order number, product, price, country and status) and pays us through monthly reports. We keep those reports as our accounting records for as long as Hungarian accounting law requires, which is 8 years. They are kept separately from the service and are not deleted when you delete your account.
Deleting your Screen for AI account does not cancel your subscription. Cancel it in Google Play first (Google Play › Payments & subscriptions › Subscriptions).
8. Why we use your data (legal bases)
| Purpose | Legal basis (GDPR) |
|---|---|
| Running the service you asked for: account, screens, delivery, reading answers, Plus | Contract, Art. 6(1)(b) |
| Security, abuse and budget limits, stopping deleted data from coming back | Legitimate interest in a safe, working service, Art. 6(1)(f) |
| Accounting and tax records for Plus | Legal obligation, Art. 6(1)(c) |
| Answering your emails | Legitimate interest in replying to you, Art. 6(1)(f) |
You do not have to give us any data to use the clock or the Wi-Fi mode. The internet service cannot work without the data in section 6. We make no decisions about you by automated means that have legal or similarly significant effects; automatic limits only stop a delivery when an allowance or safety limit is reached.
9. Who else handles your data
| Who | Role | What |
|---|---|---|
| Cloudflare, Inc. | Our processor | Hosts the website and the service; network protection. Service data is stored in the EU. |
| Auth0 (Okta, Inc.) | Our processor | Sign-in; EU tenant. Keeps your sign-in profile. |
| Google (Google sign-in, Firebase Cloud Messaging) | Processor for messaging; independent provider for Google sign-in | Sign-in with Google; waking the phone |
| Google (Google Play) | Independent controller for purchases | App downloads, payment, subscriptions |
| Cloudflare, Inc. (Email Routing and Email Sending) and Google (Gmail) | Our processors | Our email: mail to contact@screenforai.app is forwarded by Cloudflare to the operator's Gmail mailbox. Sign-in emails from Auth0, such as password resets and email confirmations, are sent through Cloudflare from no-reply@screenforai.app |
| The AI apps you connect | Independent; your choice | Everything your AI sends to your screen and reads from it |
Some providers process data outside the European Economic Area, including in the United States. Where they do, they rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. EU storage of service data does not mean every request or provider log stays in the EU. Page content, page values and interactions are not sent to Auth0 by this service.
We do not sell personal data or share it for advertising. We disclose data to authorities only when the law requires it.
10. How long we keep data
| Data | How long |
|---|---|
| Account and screen records | Until you delete the account (removed screens stay listed until then) |
| A screen waiting for approval | At most 10 minutes |
| Delivery tickets | 24 hours |
| Monthly usage counts | Current and previous month |
| Daily usage counts | The current day |
| Purchase links (section 7) | 90 days after the purchase ends, or account deletion |
| Accounting records from Google Play | 8 years, as Hungarian accounting law requires |
| Support emails | 2 years after the last message |
| After you delete your account | Access ends at once; remaining service data is removed within 24 hours. Deleted account and screen IDs and deletion times can remain up to 7 days so deleted data cannot return. |
Older hosted relay route. The service keeps the page content and latest values that match the screen report it has accepted. Pages and values it no longer needs, or that failed, are removed within 24 hours after active delivery ends; an offline phone may still show a page whose hosted copy is gone. Commands that were never delivered expire within seven days, and what remains of them is removed within another 24 hours. Returned interaction values are kept for up to seven days from when the service accepted them, or less after a deletion request.
Backups and provider copies. We make no backups of service data. Cloudflare keeps a built-in 30-day recovery history that can still contain deleted data and that deployed code or someone able to change it could reach; we do not use it to restore deleted accounts. Thirty days is a recovery window, not a promise that every provider copy is gone by then. Deleting your Screen for AI account does not delete your Auth0 sign-in profile; email us to have it removed. Auth0 says it keeps encrypted backups of deleted identity data for up to 14 months. Provider copies follow the providers' own policies, and no universal erasure deadline is promised.
11. Your rights
You can ask for access to, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interest. Email contact@screenforai.app from the address you sign in with, and we will answer within one month. We may need to check that the account is yours.
An account you created yourself can be deleted after signing in again and confirming on the service's account page; invited accounts and Auth0 profile requests need our help by email. Account deletion does not erase pages on a phone or remove direct Wi-Fi approvals; use the phone's own controls for those.
Read the account-deletion guideYou can complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, naih.hu, 1055 Budapest, Falk Miksa utca 9-11) or to the data protection authority where you live or work.
12. Children
Screen for AI is for people aged 16 and over. We do not knowingly create accounts for younger people. If you believe a child has an account, tell us and we will delete it.
13. Changes
We will update the date below when this policy changes. If a change materially affects how we use data you have already given us, we will tell you on the website and, where possible, in the app before it takes effect.
Last updated 10 November 2026.
Read the terms of service