App Permissions Explained
This piece goes deeper into each permission that Tortoise Time requests during installation — what it does and what happens if you decline it. Want the short version? See the FAQ.
Our commitments
- We request only the permissions needed for core functionality — nothing extra
- Each permission is used only for what’s described here — nothing else
- No data is uploaded — everything these permissions touch stays on your phone
Each permission
Usage access (required)
What it does: Tells Tortoise Time which app is in the foreground and how long it’s been open.
Why you can’t skip it: This is Tortoise Time’s only way to know what your child is doing. Without it, we can’t track time at all — the entire app stops working.
Important note: This permission only lets us see “which app is in the foreground.” It cannot see what’s happening inside those apps — what the child is playing, what video they’re watching. Android itself does not allow any third-party app to read that kind of content.
Screen overlay (gentle block at time’s up)
What it does: When “Time’s Up,” it uses a system-level way to gently stand in front of the target app and remind the child it’s time to stop — no matter which app the child is currently in, it can appear on top.
What happens if you decline: We can’t block when time runs out. We’ll fall back to a full-screen notification, but it’s far less effective — children can swipe it away.
Device admin
What it does: Prevents the child from directly uninstalling the app to bypass limits.
Minimum scope: We use only the smallest piece of Android’s device admin API (monitoring device startup). We cannot access your accounts, contacts, photos, or messages. At any time, you can go to system settings and see exactly what Tortoise Time’s device admin role is permitted to do.
To revoke it: PIN verification is required. You can revoke it through settings at any time.
What happens if you decline: The child can uninstall the app from system settings. We’ll show a red warning bar on the home screen to remind you.
Full-screen notification
What it does: Works together with the “Time’s Up” event — when the screen is off, it wakes the screen up.
What happens if you decline: When the screen is off, notifications will only vibrate or make a sound — the screen won’t light up automatically. This doesn’t affect the core blocking behavior.
Notification permission
What it does: Sends you parent alerts (for example, when your child exceeds time limits or makes repeated wrong PIN attempts). Also lets Tortoise Time’s background monitoring service show a “running” icon in the notification bar.
What happens if you decline: You won’t see parent alert notifications. You also won’t see the “running” icon — but the service is still running, just without the indicator.
Privacy bottom line
- All permissions are used locally on your phone
- No cloud, no accounts, no data uploaded
- Uninstalling the app clears all data
For PIN flow details → Parent PIN For issues with custom Android ROMs killing the app → Keeping the App Running