Privacy policy
DRAFT — waiting for a lawyer's review (incl. KVKK and GDPR). It will change before launch.
Who we are
Data controller (the company responsible for your data): [company name] Ltd, registered in England and Wales, [address], [email] — added before launch. Representative in Turkey: [name, address — added before launch].
This policy covers the Guard computer app, the phone app and the parent dashboard.
What stays in your home
Microphone sound is checked on your own computer. No constant sound or video reaches our servers.
Recordings of your word cards and sounds in the test screen stay on your computer.
Nothing is sent in test mode.
What we process, and why
Account: your name, email address and sign-in id (with Google, through the Microsoft Entra sign-in page). Why: to know you, and to show your devices only to you. We keep no passwords.
Device link: the computer's name, which parents see it, the name you gave it, and 10-minute pairing codes.
Alerts: time, kind (crying, fussing, word, movement), numbers (how long, score) and a 5-second sound clip. Movement alerts have no sound clip.
Live status: whether the computer is listening, and its last signal. The live "now hearing" and "moving" information is only passed on, never stored.
Notifications: your phone's notification key and your browser's notification subscription, to get alerts to you.
Security: session keys (only their hashes are stored), device keys checked in the room, "new sign-in" and "new parent" notices.
Legal basis: needed to provide the service (contract), and our legitimate interest in keeping your account safe from misuse. To be checked by a lawyer.
Sounds of your child
Alert clips may contain your child's voice. Clips go only to the parents who see that device, and are deleted after 7 days.
Guard is made for adults. You must be over 18 to make an account.
Who we share data with
We use these companies to run the service (processors): Microsoft (sign-in page and server hosting), Google and Apple (phone notifications), Expo (passes on phone notifications), your browser's push service.
Some of them are outside your country. The rules for sending data abroad (KVKK art. 9, GDPR chapter V) will be checked by a lawyer. The server region will be added before launch.
We do not sell your data and do not use it for ads.
How long we keep it
Sound clips: 7 days. Pairing codes: 1 hour at most. Sessions: end 30 days after the last use.
Your account: until you delete it. When you delete it, your name, email, sessions, notification keys and device links are deleted at once.
Alert list entries (no sound): 90 days, then deleted automatically.
Your rights
Under KVKK article 11 and the GDPR you can ask what data we have, correct it, delete it, object to its use, and complain to the data protection authority (in Turkey: the Personal Data Protection Board, KVKK).
You can delete your account at any time: in the phone app under Settings → Delete account, or in the parent dashboard (/en/app/) → Delete account.
For other requests: [email address — added before launch].
Security
Connections are encrypted (HTTPS). Only hashes of keys are stored. The computer accepts no outside connections; it only connects out to the server.
When a parent is added, the other parents and the computer's screen are told.
Improving Guard
We may use non-personal statistics (counts, error reports without sound) to improve Guard.
We use sound clips to improve detection only if you say yes separately. You can take back this yes at any time.
Other cases
We may change our service providers or add new ones. The list on this page shows the current ones.
If our business is sold or merged with another company, your data may pass to the new owner under this policy.
We may share data with authorities when the law requires it (for example a court order).
Changes
We may change this policy. We tell you about important changes in the app or by email before they apply.
If we add a feature that needs new data, we update this policy before the feature starts; if it needs your permission, we ask for it.