THE BIG PICTURE
A clear view of your family’s connected day.
Not connected
npsso value and paste it here.A pending put-back needs a working connection. You can check settings in PlayStation Family.
Choose a child and phone above.
Choose a connected phone to lock or unlock it.
The phone stays usable for calls and essential apps.
Your family's connected devices, all in one place.
What this does: silently asks Family Agent to upload current status and usage, download saved settings and requests, then report what succeeded. The child does not need to respond. An offline or sleeping phone may update later.
Waiting for the phone's first update
Waiting for a usage summary
Past 7 days with reports
No location point yet
Select a phone to check its connection.
Help requests and device health across all children, regardless of the child selected above.
Loading reported events…
SOS reaches a parent; it does not contact emergency services.
Acknowledging an event records that you saw it. It does not fix the phone or confirm that your child is safe. Resolve an event after you have followed up. Sending SOS does not trigger an allowance reduction. This inbox includes every child, regardless of the selected tab.
Family management and acceptance-test components are excluded from usage totals and rankings.
Count of hour slots with reported app use
Select an hour to see its app breakdown.
Loading hourly activity…
Generate a longer-term factual summary for this child. Missing reports are never counted as zero use.
The day view above stays focused on one date. Use this only when you want the broader week.
Save a place boundary for arrival and departure events from reported location points.
Turn on automatic location updates below, or request a fresh location now.
Map tiles are provided by OpenStreetMap. Loading the map shares your browser's IP address and the area being viewed with its tile service. Location records stay in your private family service. Circles show reported accuracy; a connecting line is not a recorded route between points.
The phone records a background location point around the selected interval. This creates breadcrumbs for a lost phone or emergency; it does not require child interaction.
The interval is a target. Android may delay background work while sleeping, and GPS accuracy varies. Tracking is visible on the phone. More frequent updates use more battery.
Plan recurring app pauses in your home timezone. Essentials stay available.
A saved draft does not pause apps. After activation, each phone must receive the schedule before it can run offline. Ending a routine removes only its scheduled pause; other app locks or exhausted allowances can remain. Routines follow the chosen home timezone while traveling.
One daily pool for your child, wherever they play. Choose the apps that count; essential communication and recovery stay available.
Across all devices assigned to this child.
Totals appear after the service receives usage from the phones.
One allowance for this child.
2 hours per day
The daily pool resets at midnight in this home timezone. Only selected apps count. Simultaneous use across devices adds device-minutes; it is not merged into a single wall-clock minute.
Each device has its own allowance. Allocations must add up to no more than the child’s daily budget; unused minutes do not move automatically.
Each selected app counts toward the pool. Its individual cap applies separately on each device.
Family Agent lets your child choose 15, 30, or 60 minutes and add a short note. A request never changes a limit by itself. Approving adds spendable time to this child’s shared pool for today; declining changes nothing.
Choose a phone above to preview, lock, or unlock it.
Family Agent shows a calm pause screen when opened. Android refuses to open nonessential apps. The child can still use essential apps and, when enabled, open Family Agent for emergency access.
This illustration makes no change to the phone. Use Preview device lock to see the nonessential apps currently reported by the phone.
Protected essentials stay available. The phone reports the actual result only after you choose Lock device.
Applies to this child across all assigned devices, regardless of the device filter above.
Both options end by this child’s next home-timezone midnight. A grace window runs from now, even when the device is idle. Saved grants take effect after a phone downloads the update; the dashboard shows confirmation separately.
Waiting for an app inventory.
Phone, communication and recovery apps stay available. See Settings → Always available.
Once confirmed, Pause lasts until you resume the app, including tomorrow. Its data stays on the phone. Parent recovery can temporarily restore access. Resume removes this manual pause; other locks, routines and limits can still apply. Remove uninstalls the app and deletes its local data.
Waiting for app icons from this phone.
Install trusted releases from GitHub and choose which apps stay up to date.
Choose a phone to manage its supported apps.
Turning management on installs the app on this phone. Turning it off stops future installs and updates and keeps the app and its data. An installation already received by the phone may finish. Use Remove below to uninstall. App review, pauses, and time limits still apply.
Newly detected apps can be paused after installation while you review them.
A parent decision and its phone result are separate. Approving an app removes its review pause; other restrictions can still apply. Removing it deletes the app’s local data.
Choose what a selected app may access on this phone.
Observe likely messages, Status, Channels and other screens. No screens are blocked or redirected.
Select a phone to see observation availability.
Requires the latest Family apps and a one-time Accessibility grant in Family Agent on the phone. Accessibility can expose visible text to local code; this experiment checks screen identifiers only and does not read, save or upload messages or screenshots.
Category timestamps and the WhatsApp version can be reported for seven days by the timeline-capable update. Samples are taken at most every ten seconds while WhatsApp is visible; these are not screen-time totals or verified classifications. Unrecognized screens and versions count as unknown. No contacts, activity names, chat titles or message contents are uploaded. Timeline samples contain only category, time, session and version metadata. Counters are hidden at UTC midnight and removed from the server within the next hourly cleanup. The phone clears old counters when it next runs. Turning this off or reassigning the phone clears counters. Existing timeline samples retain their original child/device and expire after seven days. Linked devices and WhatsApp Business are not covered. Parent offline recovery pauses observation.
Select one child and phone.
Every recorded sample can be inspected. Unknown means an unrecognized screen; no sample means no observation. These are not complete message histories or inferred usage durations. Direct/group labels require reliable structural evidence.
The planned local safety model is not deployed. This observer does not read message contents.
Choose a child and one device.
Counts can be estimated by Cloudflare’s adaptive sampling. A DNS lookup is not proof of a visited site; blocked lookups are not a count of ads shown or removed. Traffic is attributed to the assigned resolver configuration, not cryptographically to a physical phone.
Every retrieved API group is copied with its DNS domain, provider categories, count, hour, resolver, decision and matched policy identifier. We keep those copies for seven days, poll every 15 minutes, refresh recent windows, and retry missing windows with backoff. The private archive includes DNS domains for parental filtering review. We do not copy source IPs, full URLs, messages or page contents. Nonstandard DNS names use a placeholder; their counts remain. Repeated invalid or saturated windows become visible terminal gaps. This is not a guaranteed individual-query log. Copies are removed from the active archive after seven days. Provider-managed recovery backups may retain deleted data for up to 30 days. Provider DNS-log retention is separate.
This is a living comparison with Qustodio and Family Link. Select the improvements that matter most; saving priorities plans work and does not change any phone.
These are the most viable next steps. Effort is an engineering estimate, not an activation state.
WhatsApp’s 2026 parent-managed pre-teen account limits the experience to messages and calls and withholds Channels, Status, and Meta AI until the age transition. Availability is rolling out by region and the account transitions at 13, or a higher local age.
Our device owner cannot reliably distinguish Channels from chats inside the encrypted WhatsApp app. DNS sees domains, not the tab or feature being used. Accessibility automation would be brittle, invasive, language-sensitive, and likely to break after WhatsApp updates, so it is tracked as an experiment rather than presented as dependable enforcement.
Candidate APK identity pending.
A capture records a screen on the test phone in the child’s language. It does not prove that the same APK or policy is installed on their phone.
Add a child or edit any name below. The child switcher at the top updates after you save.
A child profile groups their phones, shared screen-time pool, reports, and settings. Adding a profile does not enroll or change a physical phone.
Give each phone a recognizable name and choose who it belongs to. One child can have several devices.
Registered phones appear here. One-time connection enables reporting and approved updates. Full Android enrollment additionally protects the Agent and enables app locking, limits, permissions, and managed DNS.
See what is installed, what is waiting, and what the phone has actually confirmed.
One filtering policy for the whole family. All managed phones receive it, regardless of the child selected above.
Waiting for the phone
Private DNS checks site addresses before apps connect. Filters block domains, not individual messages or videos.
Blocks domains, not individual posts, videos or content inside allowed apps. Classification can miss sites or block useful resources.
Domain exceptions include subdomains. Allowed and protected domains take priority. Conflicting exceptions are rejected. Enter up to 40 domains per list.
Cloudflare receives each domain query, the source IP address and the resolver identifier. Kin privately archives available Gateway DNS names, categories and counts for seven days. DNS domains and categories can be archived privately; source IPs and message contents are not copied. Copies are removed from the active archive after seven days; provider-managed recovery backups may retain deleted data for up to 30 days. Domain exceptions are settings, not browsing history.
DNS does not reveal the exact HTTPS page, search, message or video. DNS lookups are network metadata, not proof of a visited page. The Filtering page shows the copied DNS records.
Cloudflare logging: checking account settings.
This is a read-only report of Cloudflare’s account logging configuration, cached for up to five minutes. Saving DNS does not change logging or retention. Retention and exports are managed separately in Cloudflare; this view does not verify their duration.
One shared policy applies to every managed family phone. Per-child DNS requires an explicit migration.
Free shared DNS uses rotating resolvers. Further edits may wait until every affected phone confirms its replacement.
A VPN, an app with hard-coded encrypted DNS, or some browser secure-DNS settings can bypass system Private DNS. Domain blocking cannot remove most YouTube or other first-party ads. The phone reports whether Android accepted the hostname; category policy and bypass tests are separate checks.
Review the selected phone's protected apps and choose extra essentials for this child.
These required phone, communication, Family management, and recovery apps stay available during a parent app lock and time-limit exhaustion. Add your child's school, transport, authentication, or health apps as extra essentials. Extra essentials apply across this child's phones and are removed from the selected-app budget when saved.
Choose word access or a code-free action with a warning before your child confirms.
No emergency word configured.
The reduced allowance also applies offline: each phone enforces 30 minutes locally. Several offline phones can therefore exceed 30 minutes in total. Essential apps stay available. Emergency access remains off until you explicitly save it enabled. The new mode requires support on every assigned phone.
Ambiguous reports stay here for parent review. Reviewing a report does not apply a new restriction.
Use Kin Parent for quick controls and separate parent access.
The other parent can see daily pool totals and grant extra usage or a grace window for the children you choose. This access cannot view locations, manage devices, change policies, or review emergency uses. It can be revoked here.
Manage secondary parents with lock/unlock and extra-time permissions →
Copy this key once into the companion app on the other parent’s phone. It grants bonus-time access only for the children selected above; it cannot open this dashboard or view locations. It is shown only now, and revoking the entry ends its access.
Choose how far back your reports can go.
Reports start when collection begins. Increasing retention cannot recover already-deleted days. Daily summaries contain app totals, not messages, pages, or keystrokes.
One-time setup connects an enrolled Family Agent to this private dashboard.
If the phone already sends updates, it is connected and needs no code. Refreshing the dashboard, changing settings, and sending remote requests never require another setup code.
Open Family Agent after parent recovery has been set up in Family Owner. Create a code here and enter it on that phone within 10 minutes. The code works once and cannot open the parent dashboard.
Keep this code private until it is entered on the intended phone. It connects that phone to this family service and then expires.
Reserve a place in your family dashboard, then complete setup on the physical phone.
This creates a pending registration. It does not install apps, enroll, reset, or change the phone. An operator must verify its exact serial number, compatibility, signing, and parent recovery before enrollment. Only the Galaxy S23 model SM-S911B has been tested so far. The Pixel 2 connected to this Mac is excluded.
Saved in the cloud. The phone may not have received it yet.
The phone downloaded the request. Its result is still pending.
The phone reported what actually happened.
A sleeping or offline phone may respond later. “Requested” never means the change happened. The Update phone now button sends a silent sync hint; it does not ask the child to act. Offline parent recovery is available in Family Owner.
Checking…
Checked daily. New capabilities require review before installation.
Release notes ↗