Privacy Policy

1. Who we are

SafeScreen is made by SafeScreen Pty Ltd (“SafeScreen”, “we”, “us”), a company based in Brisbane, Queensland, Australia. We handle personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles.

2. Information we collect

To run the service we collect a small amount of information:

• Account details: your email address and, if you sign in with Google or Microsoft, the name and profile picture they share with us. If you sign in with a password, our servers receive it over an encrypted connection only to pass it on to our sign-in provider (Supabase), which stores it in hashed form. We never store your password or record it in our logs. For paid plans, your billing details are handled by our payment provider and are never stored on our servers.
• Website analytics: we use Cloudflare Web Analytics to count visits to our public website and see which pages people visit and where they came from, so we can improve the site. It does not use cookies or track you across sites. Cloudflare, which also serves the website, processes your IP address to do this.
• Waitlist requests: if you sign in before you have an invitation and join our waitlist, we receive the message you write along with your name and email address, so we can contact you when there is a spot.
• Family details you enter: each child's name or nickname and the rules you set for them.
• Device information sent by each installed agent: its unique install key and the child it belongs to, the agent version, basic operating-system information (for updates), and login and connection times so you can see whether a device is online.
• Activity reports: the searches your child makes, the addresses of the sites they visit and any attempts to open blocked content. We collect these only so we can show them to you in weekly reports and real-time alerts.
• Diagnostic logs, but only if you choose to upload them for support.

3. What we deliberately don't collect

We do not collect, and the product does not perform:

• The contents of the pages your child visits. Page contents are scanned on the child's PC to apply keyword rules and are then discarded. They are never transmitted to SafeScreen.
• Keystrokes, screenshots or screen recordings.
• Location tracking, or the contents of messages and social media.

4. How we use information

We use the information above only to provide, secure and improve the service: creating and managing your account, registering devices and delivering policy updates, showing you device status, activity reports and alerts, processing payments, responding to support requests, and sending you service emails such as setup instructions, receipts and important notices. We may use aggregated, de-identified statistics (for example, how many devices run a given version) to improve SafeScreen. We do not use your family's activity for advertising, and we do not sell it.

Automated decisions

SafeScreen's filtering is automated. Software on your child's PC applies the rules you set to decide whether a page, search or app is allowed, and when screen time starts and ends. Alerts and weekly reports are also produced automatically. Our staff don't make or review these decisions. You can see and change your child's rules at any time, and your child can ask you for a blocked site or more time. No filter is perfect, so some pages may be blocked or allowed by mistake; you can always add your own exceptions.

5. The SafeScreen certificate

So it can check HTTPS pages, the agent installs a root certificate. This certificate is generated on the child's own PC, is unique to that machine, and its private key never leaves the device. It is used only for local filtering.

6. Storage, security and retention

Connections between each device and SafeScreen are encrypted, and our servers are hosted with reputable cloud providers. Your family's data is stored in one region, which you can see in your family settings. Access to personal information is restricted to staff who need it to operate the service. We keep account and device information for as long as your account is active. Activity reports are kept for 90 days by default and then deleted. You can delete your child's activity from your account at any time, and deleted activity is removed from our servers, including backups, within 30 days. Diagnostic logs you upload are deleted within 90 days. A waitlist request is deleted when you join or create a family, or sooner if you ask us. When you close your account we delete your family's information, including backups, within 30 days, except where we must keep records (such as tax invoices) to meet legal obligations.

If we suspect a data breach, we will assess it promptly. If it is likely to cause serious harm, we will notify the affected families and the Office of the Australian Information Commissioner (OAIC), as the Notifiable Data Breaches scheme requires.

7. Sharing

We do not sell personal information. We share it only with service providers who help us run SafeScreen (our hosting, email-delivery and payment providers), and only for that purpose, and where required by law or to protect the safety of our users. These providers are bound by their own privacy obligations and may process data outside Australia.

8. Children's information

SafeScreen is a tool for parents and guardians to supervise their own children. By installing it you confirm that you are the child's parent or guardian, or have their permission, and that you will use it in a way that suits the child's age. SafeScreen isn't hidden from children: the PC shows periodic reminders that it is running, and a clear page explains whenever something is blocked. We encourage you to talk with your child about the rules you set.

SafeScreen accounts are created and controlled by a parent or guardian, who manages each child's policy; children do not create accounts with us. The information we hold about a child is limited to the name or nickname their parent enters, their device information and their activity reports, and it is visible only to that family account. If you believe a child's information has been provided to us without a parent's consent, contact us and we will delete it.

9. Your rights

You can view and update most of your information from your SafeScreen account. You may also ask us for access to, correction of, or deletion of the personal information we hold about you by emailing [email protected]; we will respond within 30 days. If you are unhappy with how we have handled your information you can complain to us and, if we cannot resolve it, to the Office of the Australian Information Commissioner (OAIC).

10. Changes to this policy

We may update this policy from time to time. We'll post the new version here and update the date above, and for material changes we'll also email account holders before the changes take effect.

11. Contact us

Questions about privacy? Email [email protected] or write to SafeScreen Pty Ltd, Brisbane, Queensland, Australia.