Browser Guardian
Privacy Policy

The short version

Aunty Bea Browser Guardian checks the text of web pages the child opens in their browser for signs of harm (such as grooming, explicit content, or self-harm). Checking happens on the device. Out of the box — with no account connected — nothing is sent to our servers; blocking and on-screen alerts work locally. If a parent connects an account, then when a page is flagged we send only metadata — the type of concern, the page title and URL — not the page text and not any comment text visible on the page.

We never keep a record of the child's general browsing, never sell your data, and never use it for advertising.

1. Scope

This policy covers the Aunty Bea Browser Guardian extensions (Chrome, Edge) and the macOS Browser Guardian app and its Safari extension. The Aunty Bea iOS and Android companion apps have a separate policy.

2. What we collect

a. Connection details

If a parent connects the extension to an Aunty Bea account, the enrollment token and the linked child profile (first name, age, device label) the parent provides.

b. What we check, and what leaves the device

The extension reads the visible text of pages the child opens only to run its on-device safety check. This text — which can include visible comments or messages written by other people — is checked on the device and is not transmitted.

• Local-only mode (no account connected): the check runs entirely on the device and nothing is transmitted to our servers.
• Connected mode (account connected): when a page is flagged or blocked, we send only metadata — the type of concern, the page title and URL — not the page text or any comment text — to the dashboard and to our AI safety-analysis provider. nothing about a page is sent unless it's blocked or flagged — the only other thing sent is the periodic status check below, which carries no page data.
• Periodic status check (tamper-evidence): about every 15 minutes — and when you connect or disconnect — the extension confirms it's still active by sending the device ID, the device and child name you set, the extension version, and timestamps. No page content. If the extension is uninstalled it also sends a one-time removal signal (the device ID only). We use these only to show on your dashboard whether each device is still protected (active, quiet, or removed).

c. Safety events

The flagged or blocked event (site/URL, category, time) so the parent can see and act on it.

We don't keep a record of the child's general browsing, and we don't transmit page or comment text.

3. How we use it

We use this information to detect, classify and explain harmful content; to share the flag details (the category, page title and URL, plus the child's age so the assessment is age-appropriate) with our third-party AI safety-analysis provider (Anthropic, United States) for assessment; to show alerts and status on the parent dashboard; to keep the service working and secure; and to meet our legal obligations. We do not build advertising profiles and do not sell data.

4. Who we share it with

• Service providers acting on our instructions — our AI safety-analysis provider (Anthropic, United States) and our hosting and infrastructure providers (Replit and Google Cloud, United States).
• Safety and law enforcement — where reasonably necessary to protect a child from serious harm, or where required by law.

We never sell personal information and never share it for advertising.

5. How long we keep it

We keep your information for up to 90 days, and we delete it immediately if you close your account. We may keep certain information longer only where it's needed to protect a child or to meet a legal obligation.

6. Security

All personal information is encrypted in transit (TLS 1.2+) and at rest (AES-256), and we limit access to the people who need it to operate the service.

7. Children's privacy & your rights

Aunty Bea is a parental safeguarding tool set up by a parent or guardian for their own child, on a verifiable-parental-consent and child-safeguarding basis; where required, the child is shown that monitoring is active. We handle children's data in line with applicable laws, including COPPA (US), the GDPR and age-of-consent rules (EU/UK), and Australian privacy law.

You can ask us for access to, correction of, or deletion of the personal information we hold, and you can disconnect the extension at any time. To exercise these rights, email hello@auntybea.app — we'll respond within 30 days.

8. International transfers

We are based in Australia, and our service providers process information in the United States — so your information may be stored and processed there.

9. Complaints

If you're concerned about how we've handled personal information, email hello@auntybea.app with "Privacy complaint" in the subject line. We'll acknowledge your complaint within 7 days, investigate it, and respond with an outcome within 30 days.

If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

10. Changes to this policy

We may update this policy as the service evolves. We'll change the effective date above and, for material changes, take additional steps to let you know.

11. Contact

Aunty Bea — Hidden City Pty Ltd. Questions about your privacy? Email hello@auntybea.app.

Chrome Web Store Limited Use