Privacy policy

This page explains what data Family Guardian collects, why, and for how long. The system has a parent app, a child app, and a server that links them.

The principle

The app is for protection, not spying. It never reads messages, screen content, what the child types, or what is said on calls. Every rule and setting is visible to the child in their app.

The parent's data

• The email address, to send the sign-in code and keep the children in the account.
• A phone number, only if the parent adds one, shown to the child so they can call.
• The sign-in code is valid for ten minutes and is only ever stored hashed.

What the child's phone always sends

• The name the parent gives the child.
• Today's screen time and the ten most used apps.
• The list of installed apps, so the parent can choose what to block.
• Whether each protection permission is on, to alert the parent if one is switched off.

The child app only knows the name of the app on screen, never what is inside it. Daily screen time is kept for ninety days for the reports.

What is sent only if the parent turns it on

All of these start off, and the child's app shows when they are on:

• Location: only the latest one is kept, or the last day's if the parent turns on the history. Turning sharing off erases every location at once.
• Call log: the number, the name saved on the child's phone, the call type and its length. Kept for seven days, and erased as soon as it is turned off.
• Browsing history: the names of the sites visited and how many times each day, never the pages or their content. Kept for seven days, and erased as soon as it is turned off.

Safe browsing

Safe browsing passes only site names to Cloudflare's family filtering service, which blocks the unsuitable ones. No content goes through the app, and nothing is recorded unless the parent turns on browsing history.

The emergency button

When the child presses the emergency button, their current location goes to the parent with the alert, even if location sharing is off. This happens only when the child presses it.

Prayer times

Prayer times are worked out on the child's phone from the city the parent picks, with no data sent anywhere.

Where the data is kept

• On a server running on Cloudflare. No family can see another family's data.
• Sign-in codes are emailed through the Brevo email service.
• If instant alerts are on, alerts go through Google's notification service.
• The data is never sold, never used for advertising, and never shared with anyone else.

Deletion

• Unlinking a child erases their locations and logs.
• Deleting the parent's account unlinks their children and erases their locations.
• Once unlinked, the child app can be uninstalled from the child's phone as usual.

Contact

For any privacy question or to ask for your data to be deleted: familyguardian@hisnalzawaj.com

Last updated: October 2026.