Privacy Policy

SafeFamily ("we," "our") provides a parental-control platform consisting of a parent app, a child app (SafeKid), and the backend that connects them. This policy explains what information the platform collects, why, and what choices a parent has over their family's data.

Who this policy is for

This policy is written for the parent or guardian who creates a SafeFamily account. Because SafeFamily is a supervision tool, the account holder — not the child — is the one who agrees to this policy and is legally responsible for deciding to monitor their child's device. We rely on the parent's consent to collect information about a child, consistent with how parental-consent frameworks like COPPA (US) and DPDPA (India) are intended to work for tools of this kind.

Information we collect

Directly from the parent, when creating an account or subscribing:

• Name and email address
• Password (stored as a salted hash, never in plain text)
• Billing details, handled by our payment processor — we store the transaction record and plan, not full card numbers

From the child's paired device, once a parent completes setup:

• Device information: name, model, OS version, battery level, online/offline status
• Location: periodic GPS coordinates and accuracy, used for the live-location and geofence features the parent configures
• App usage: which apps are used and for how long each day, used to generate screen-time reports
• The device's response to parent-issued commands (e.g. confirmation a lock command was received)

Set by the parent, applying to a child's profile:

• Screen-time limits and downtime schedules
• App allow/block rules and website filtering preferences
• Named locations (e.g. "Home," "School") and their coordinates

What we don't collect

SafeFamily does not read message content, call logs, browsing history beyond the domain-level website rules a parent sets, or photos and files on the device. The platform is built around a defined, visible feature set — screen time, app rules, location, and website categories — not open-ended surveillance.

How the child can see their own data

The SafeKid app includes an Activity view that shows the child the same screen-time and app-usage information visible to their parent. This is a deliberate design choice, not a legal requirement — we believe a supervision tool should be visible to the person it supervises.

How we use this information

• To provide the features a parent has configured (screen time enforcement, location sharing, app/web filtering, activity reports)
• To send notifications the parent has opted into (geofence alerts, screen-limit alerts, low battery, etc.)
• To process subscription payments and prevent abuse of free-tier limits
• To maintain an audit log of account-level actions (e.g. plan changes, account suspension) for security and support purposes

We do not sell family or child data to third parties, and we do not use it to serve advertising.

Who we share information with

• Payment processors (e.g. Razorpay, Stripe, Google Play, Apple), to complete a subscription purchase
• Cloud infrastructure providers, to host the platform and its data
• Push notification services (Firebase Cloud Messaging, Apple Push Notification service), to deliver alerts
• Law enforcement or regulators, only where legally required

Data retention

Location history, usage events, and generated reports are retained while a child profile is active, so trend reports (weekly/monthly) remain useful. A parent can delete a child's profile at any time, which removes its associated location and usage history. Deleting the family account removes all associated data, subject to a short retention window for financial records we're legally required to keep.

Security

Passwords are hashed, not stored in plain text. Device and parent sessions use short-lived access tokens with a separate, longer-lived credential for the child device, so a compromised access token has a limited window of use. All data in transit is encrypted (HTTPS/TLS). No system is perfectly secure, and we'll notify affected families if we become aware of a breach affecting their data.

Your choices as a parent

• Turn off individual alert categories (location, screen time, app, web, device) at any time
• Remove a geofence, app rule, or website rule at any time
• Unpair a device from the child app, which stops all monitoring from that device immediately
• Request a copy of your family's data, or request deletion, by contacting support

International users

If you're in the European Economic Area or UK, you have rights under GDPR (access, correction, deletion, portability, and objection to processing). If you're in India, this policy is intended to align with the Digital Personal Data Protection Act, 2023, including treating a parent's consent as the basis for processing a child's information. If you're in the United States, our approach to children's data is intended to be consistent with COPPA's parental-consent model. Regardless of region, you can exercise these rights by contacting us — see Support.

Changes to this policy

If we make a material change to how we handle family or child data, we'll notify the account holder by email before the change takes effect.

Contact

Questions about this policy or a data request can be sent through the Support page.