How we protect your family's data

Here are the safeguards we use today and how to report a security issue.

Vulnerability reports

Found a security issue?

Security researchers and users are both welcome to report issues. Send us enough detail to investigate.

The reporting channel is also published at the RFC 9116 standard location.

Data protection

The details match the safeguards article of our privacy policy.

Encryption in transit: All data between devices and our servers travels only over encrypted connections.
Family-only access rules: Family-level access rules reject requests for another family's data.
Genuine-app verification: Our servers answer only after verifying the request comes from the genuine app installed via Google Play.
Excluded from device backups: The app is configured to keep its local data out of Android device backups.
Access logs kept: For the safe operation of the service, we keep data-access records (audit logs) for 90 days.
Designed to collect less: Walking is detected on the child's phone, and we do not collect advertising identifiers.