Aunty Bea Privacy Policy (Companion Apps)

1. Scope

This policy covers the Aunty Bea companion apps for iOS and Android and the parent dashboard at auntybea.app. The Aunty Bea Browser Guardian browser products have a separate policy.

2. What we collect

a. Parent / account

Your email, login credentials, and information to manage your subscription. Payments are handled by our third-party payment processor; we don't store full card details.

b. Child profile

First name, age, device name, and a device identifier, as set by the parent.

c. Device & technical

Device identifiers, app version, and periodic status ("heartbeat") — including whether the filter is running, battery level, and whether a VPN appears to be active on the device — so the dashboard can show whether protection is active.

d. What we check, and what leaves the device

Aunty Bea checks content on the child's device. What is sent when something is flagged depends on the platform:

• iOS (web pages & content filter). Checking happens on the device, with your data consent. For a flagged page we send only the category, the website and the page title — not a copy of the page, and not anything your child types or submits.
• Android (on-screen text). Because Android protection works across apps, on-screen text is read by the accessibility service. For screens that aren't clearly benign, an excerpt of the on-screen text may be sent to our servers for AI safety analysis. Your dashboard shows the type of concern found — not the on-screen text itself.
• Other people's words. The on-screen text Android sends for analysis can include comments or messages written by someone else (for example, a person messaging or collaborating with the child). We use it only to identify and explain a safety concern, on a child-safeguarding basis, and the parent sees only the type of concern.

e. Safety events

When content is blocked or flagged we record the event (site/URL, category, time, device).

f. Usage / screen-time

Aggregate activity shown on the dashboard.

g. Website & dashboard analytics

Our website and dashboard use Google Analytics, with IP addresses anonymised, to understand overall usage. No child monitoring data is shared with analytics.

We don't keep a running transcript of the child's screen.

3. How we use it

We use this information to run the safety service (detect, classify and explain harmful content); to share the relevant details with our third-party AI safety-analysis provider to assess them (on Android this includes an excerpt of on-screen text; on iOS, only metadata); to operate the dashboard and alerts; to manage accounts, subscriptions and support; to keep the service secure; and to meet our legal obligations.

We do not build advertising profiles and do not sell data.

4. Who we share it with

• Service providers acting on our instructions — our AI safety-analysis provider (Anthropic, United States), our payment processor (Stripe, United States), our email provider (Resend, United States), our web analytics provider (Google), and our hosting and infrastructure providers (Replit and Google Cloud, United States).
• Safety and law enforcement — where reasonably necessary to protect a child from serious harm, or where required by law, we may disclose relevant information to the appropriate authorities.

We never sell personal information and never share it for third-party advertising.

5. How long we keep it

We keep your information for up to 90 days, and we delete it immediately if you close your account. This covers safety events, blocked attempts, screen-time summaries, heartbeats and technical logs, which age out automatically. We may keep certain information longer only where it's needed to protect a child or to meet a legal obligation (for example, billing records we must retain under tax law). Parents can also request deletion at any time (see Section 7).

6. Security

All personal information is encrypted in transit (TLS 1.2+) and at rest (AES-256), and we limit access to the people who need it to operate the service.

7. Children's privacy & your rights

Aunty Bea is a parental safeguarding tool set up by a parent or guardian for their own child, on a verifiable-parental-consent and child-safeguarding basis; where required, the child is shown that monitoring is active. We handle children's data in line with applicable laws, including COPPA (US), the GDPR and age-of-consent rules (EU/UK), and Australian privacy law.

You can ask us for access to, correction of, or deletion of the personal information we hold about you or your child, and you can disconnect a device or close your account from the dashboard at any time. To exercise these rights, email hello@auntybea.app — we'll respond within 30 days.

8. International transfers

We are based in Australia, and our service providers process information in the United States — so your information may be stored and processed there.

9. Complaints

If you're concerned about how we've handled personal information, email hello@auntybea.app with "Privacy complaint" in the subject line. We'll acknowledge your complaint within 7 days, investigate it, and respond with an outcome within 30 days.

If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

10. Changes to this policy

We may update this policy as the service evolves. We'll change the effective date above and, for material changes, take additional steps to let you know.

11. Contact

Aunty Bea — Hidden City Pty Ltd. Questions about your privacy? Email hello@auntybea.app.