🔒 Privacy Policy

1. Information We Collect

We collect various types of information to provide and improve our Service:

1.1 Account Information

• Email address
• Password (encrypted)
• Name (optional)
• Phone number (optional)
• Account creation date

1.2 Device Information

• Device ID and model
• Operating system version
• App version
• Device manufacturer
• Screen resolution

1.3 Monitoring Data

2. How We Collect Information

Information is collected through:

• Child App: Installed on the monitored device with user consent
• Parent App: Used to view monitoring data
• Web Dashboard: Browser-based access to monitoring data
• Accessibility Services: Android accessibility features for screen monitoring
• Device Permissions: Location, contacts, SMS, phone, storage, camera, microphone

3. How We Use Your Information

We use collected information for:

1. Service Provision: Delivering parental monitoring features
2. Account Management: Creating and maintaining user accounts
3. Data Storage: Securely storing monitoring data
4. Service Improvement: Analyzing usage to improve features
5. Technical Support: Providing customer assistance
6. Security: Detecting and preventing fraud or abuse
7. Legal Compliance: Meeting legal obligations
8. Communication: Sending service updates and notifications

4. Data Storage and Security

4.1 Where We Store Data

• Data is stored on secure cloud servers (Supabase)
• Servers are located in secure data centers
• Data is encrypted in transit and at rest

4.2 Security Measures

• SSL/TLS encryption for data transmission
• Password hashing and encryption
• Row-level security policies
• Regular security audits
• Access controls and authentication
• Automated backups

4.3 Data Retention

• Active accounts: Data retained indefinitely
• Deleted accounts: Data deleted within 30 days
• Legal holds: Data retained as required by law

5. Data Sharing and Disclosure

We do NOT sell your personal information. We may share data only in these circumstances:

5.1 With Your Consent

We share data when you explicitly authorize us to do so.

5.2 Service Providers

• Cloud hosting providers (Supabase)
• Analytics services
• Customer support tools

5.3 Legal Requirements

We may disclose information if required by:

• Court orders or subpoenas
• Law enforcement requests
• Legal processes
• Protection of rights and safety

5.4 Business Transfers

In case of merger, acquisition, or sale, your data may be transferred to the new entity.

6. Your Privacy Rights

You have the right to:

1. Access: Request a copy of your data
2. Correction: Update inaccurate information
3. Deletion: Request deletion of your data
4. Export: Download your data in portable format
5. Opt-Out: Unsubscribe from marketing communications
6. Restrict Processing: Limit how we use your data
7. Object: Object to certain data processing
8. Withdraw Consent: Revoke previously given consent

To exercise these rights, contact us at sammyseth260@gmail.com

7. Children's Privacy

Our Service is designed for parental monitoring of children. We recognize the importance of children's privacy:

• Parents must obtain consent before monitoring
• Parents control what data is collected
• Parents can delete child data at any time
• We comply with children's privacy laws (COPPA, GDPR-K)
• Children's data is only accessible to authorized parents

8. Consent and Transparency

We require explicit consent for monitoring:

• Child app displays consent screen on first launch
• User must actively agree to monitoring
• Consent can be withdrawn at any time
• Monitoring stops immediately upon consent withdrawal

9. Cookies and Tracking

9.1 Cookies We Use

• Essential Cookies: Required for service functionality
• Authentication Cookies: Keep you logged in
• Preference Cookies: Remember your settings
• Analytics Cookies: Understand service usage

9.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect service functionality.

10. Third-Party Services

We use third-party services that may collect information:

• Supabase: Database and authentication
• Google Maps: Location display
• Cloud Storage: Media file storage

These services have their own privacy policies that govern their use of your information.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

• Standard contractual clauses
• Privacy Shield compliance (where applicable)
• Adequate protection measures

12. Data Breach Notification

In the event of a data breach:

• We will investigate immediately
• Affected users will be notified within 72 hours
• Authorities will be notified as required by law
• We will take steps to prevent future breaches

13. Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or significantly affects you.

14. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising privacy rights

15. European Privacy Rights (GDPR)

EU residents have rights under GDPR:

• Right to access personal data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object
• Rights related to automated decision-making

16. Marketing Communications

We may send you:

• Service updates and announcements
• Security alerts
• Feature updates
• Promotional offers (with consent)

You can opt-out of marketing emails at any time by clicking "unsubscribe" or contacting us.

17. Account Deletion

To delete your account:

1. Contact us at sammyseth260@gmail.com
2. Verify your identity
3. Confirm deletion request
4. Data will be deleted within 30 days

18. Changes to Privacy Policy

We may update this Privacy Policy. We will notify you of changes by:

• Posting the updated policy on our website
• Sending email notification
• Displaying in-app notification

Continued use after changes constitutes acceptance.

19. Data Protection Officer

For privacy-related inquiries, contact our Data Protection Officer:

Email: sammyseth260@gmail.com

Subject Line: "Privacy Inquiry - DPO"

20. Supervisory Authority

You have the right to lodge a complaint with your local data protection authority if you believe your privacy rights have been violated.

21. Do Not Track

We do not currently respond to "Do Not Track" signals from browsers.

22. Mobile App Permissions

Our mobile apps request the following permissions:

23. Data Accuracy

We strive to maintain accurate data. You can update your information at any time through your account settings.

24. Data Minimization

We collect only the data necessary to provide our Service. You can customize what data is collected through app settings.

25. Transparency Reports

We may publish transparency reports detailing:

• Government data requests
• Data breaches
• Service statistics

26. Privacy by Design

We incorporate privacy considerations into our product development:

• Default privacy settings
• Data encryption
• Access controls
• Regular security audits

27. User Control

You have control over:

• What data is collected
• Who can access your data
• How long data is retained
• When monitoring is active

28. Legal Basis for Processing

We process your data based on:

• Consent: You have given explicit consent
• Contract: Processing is necessary to provide the Service
• Legal Obligation: Required by law
• Legitimate Interest: Service improvement and security

29. Questions and Concerns

If you have questions about this Privacy Policy or our privacy practices, please contact us.

30. Contact Information