Privacy Policy

Last Updated: September 20, 2026

FamilySafe ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website.

IMPORTANT: FamilySafe is a parental control app. By using it, parents/guardians consent to the controls and, on Android, the monitoring described below for their child's device. Children must be informed. What we collect depends on the platform: see sections 1.2 and 1.3.

1. Information We Collect

1.1 Personal Information

Account Information: Email address, name, password (encrypted)
Device Information: Device ID, operating system, app version
Child Information: Name, age, device information (provided by parent)

1.2 Monitored Activity Data (Android)

On Android, if the required permissions are granted on the child's device, the child app may collect:

App Usage: Installed apps, app usage time, screen time
Web Browsing: Visited URLs, browsing time
Location Data: GPS location of the device (if the child allows location access)
Messages: Chat/SMS content (analyzed for safety threats using AI)
Screenshots: Periodic screenshots (if enabled by parent)

1.3 iPhone and iPad (iOS)

On iOS, FamilySafe uses Apple's Screen Time APIs (Family Controls, ManagedSettings and DeviceActivity). Apple does not give apps access to which apps a child uses, how long they use them, or what they browse, and FamilySafe does not collect this information on iOS. Specifically, on iOS we do not collect installed apps, app usage, Screen Time usage, browsing history, visited URLs, message content or screenshots.

The restrictions a parent chooses (Lock now, bedtime and school schedules, blocked websites) are applied on the child's device by iOS. Any Screen Time selections and tokens stay on that device.

What our servers do receive from an iOS child device, for the parent's family only: the child's display name, device model and OS version, whether the required permissions are granted, the last time the device was seen, whether a restriction is currently active, and the rules the parent configured (lock status, schedules, blocked web domains). On iPhone and iPad, if the child allows location access on the device, FamilySafe sends the device's latest position to the parent's account, about every five minutes while the app is open. Location is reported only after the parent has approved the device and the child has allowed location access. Only the most recent position is stored; it replaces the previous one. FamilySafe keeps no location history and shows no timeline.

1.4 Technical Data

IP address, browser type, time zone, device identifiers
Usage analytics, crash reports, performance metrics

2. How We Use Your Information

We use collected information for:

Parental Controls: Apply the rules parents set, and on Android provide alerts about potentially dangerous activity
AI Safety Analysis: Detect cyberbullying, sexting, drug references, self-harm indicators
Usage Reports (Android): Generate daily/weekly reports for parents
Service Improvement: Analyze usage patterns to improve accuracy and features
Security: Prevent fraud, abuse, and unauthorized access
Legal Compliance: Comply with legal obligations (e.g., child safety laws)

3. Data Processing & AI

AI Chat Analysis: Messages are analyzed by OpenAI's GPT model to detect safety threats. We send message content to OpenAI's API, which processes it and returns a safety assessment. OpenAI does not store chat data used via API (as of their policy dated March 2023). We retain the safety assessment results, not the original message content.

Data Retention:

Safety alerts: Retained for 90 days
Usage statistics: Retained for 30 days
Account data: Retained until account deletion

4. Data Sharing & Disclosure

We DO NOT sell your personal information. We share data only as follows:

Service Providers: OpenAI (AI analysis), Google Cloud Platform (hosting), Stripe (payment processing)
Legal Requirements: If required by law, court order, or to protect child safety (e.g., imminent harm)
Business Transfers: In case of merger, acquisition, or asset sale (with notice to users)
With Consent: When you explicitly consent to share data

5. Children's Privacy (COPPA Compliance)

FamilySafe is a parental control tool, not a service directed at children. We collect information about children ONLY with verifiable parental consent. Parents have the right to:

Review their child's data
Request deletion of their child's data
Refuse further collection of their child's data

We comply with the Children's Online Privacy Protection Act (COPPA). Parents can contact us at privacy@getfamilysafe.com for data requests.

6. Data Security

We implement industry-standard security measures:

Encryption in transit (TLS 1.3) and at rest (AES-256)
Secure authentication (Firebase Auth with bcrypt password hashing)
Regular security audits and vulnerability scanning
Access controls (role-based permissions)
Automatic session timeout after 24 hours

No system is 100% secure. We cannot guarantee absolute security of your data.

7. Your Rights (GDPR & CCPA)

Depending on your location, you have the following rights:

Access: Request a copy of your data
Rectification: Correct inaccurate data
Erasure: Delete your account and data ("right to be forgotten")
Data Portability: Export your data in JSON format
Object: Object to processing for direct marketing
Withdraw Consent: Stop data collection (requires uninstalling app)

To exercise these rights, email us at privacy@getfamilysafe.com with proof of identity.

8. Cookies & Tracking

Our website uses:

Essential Cookies: Session management, security (required)
Analytics Cookies: Google Analytics 4 (optional, disable via cookie banner)
Payment Cookies: Stripe checkout (required for payment)

You can disable non-essential cookies via the cookie banner or browser settings.

9. Third-Party Services

We integrate with:

OpenAI: AI chat analysis - Privacy Policy
Google Cloud Platform: Hosting & database - Privacy Policy
Stripe: Payment processing - Privacy Policy
Firebase: Authentication, database and push messaging - Privacy Policy

These services have their own privacy policies. We are not responsible for their practices.

10. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. We ensure adequate safeguards (e.g., Standard Contractual Clauses) for GDPR compliance.

11. Changes to This Policy

We may update this Privacy Policy. Changes will be posted on this page with an updated "Last Updated" date. Continued use after changes constitutes acceptance.

12. Contact Us

For questions or concerns about this Privacy Policy:

Privacy and data requests: privacy@getfamilysafe.com
Support: support@getfamilysafe.com
General: contact@getfamilysafe.com
Data Protection Officer: privacy@getfamilysafe.com

For EU residents: You have the right to lodge a complaint with a supervisory authority.