Privacy Policy
Last updated: 2026-10-27 · Version 2026-10-27.2
Draft for legal review. This is a working draft. It will be reviewed by a US lawyer before public launch.
Summary
- Calls are checked automatically. No person listens. Nothing is recorded. We keep no audio and no transcript of any call.
- After a risky call we keep a short summary (who the caller said they were, on whose behalf, the purpose, the risk level and what the Service did) for 90 days.
- Guardians see only those summaries for the people they protect, and only after the protected person accepted them.
- We do not sell or share your personal information, and we show no ads.
1. Who this covers
This policy covers guardians and protected persons who use FamilyDefender, and people who call a protected person ("callers"). It is part of our Terms of Use.
2. What we collect
Account: first name, phone number and/or email, family membership and roles, subscription status (from Apple and our billing provider; we never see your card).
Protected person's setup: mobile number, carrier and line type (looked up from the number), the phone number we assign, the date and version of consent, setup progress, whether microphone and notifications are allowed, app version and a device push token.
Calls (protected person): for each forwarded call — caller number (or «hidden»), time, duration, how it was handled (screened, delivered, missed, ended) and, for risky calls, the summary described above. The caller's spoken answers to the assistant and the conversation itself are turned into text and analyzed only while the call is going on, in memory; that text and the audio are discarded when the call ends.
Callers: a caller's number, the risk level and, if the assistant asked who is calling, what they said (as a short category summary). Every caller hears, before the conversation starts, that the call is checked automatically to help prevent fraud.
Trusted numbers: names and numbers the family adds so those calls ring straight through. A protected person can pick one contact to add; we never read the whole Contacts list.
Legal records: which version of these documents you accepted, when, and in which app version; your confirmation that call forwarding was removed.
Technical data: IDs, timestamps and error categories in our logs. Logs never contain call audio, words from a call or your messages.
We do not collect your contacts list, location, photos or browsing activity.
3. How we use it
- to screen and deliver calls, detect scam signs, play warnings, end calls on the listed triggers and alert guardians;
- to run your account, family and subscription, and to send service notifications;
- to keep the Service secure, fix problems and measure reliability (using counts and categories, not call content);
- to meet legal obligations.
We do not use your information for advertising, and we do not use call content to train AI models.
4. Who processes data for us
We use these providers, under contracts that limit use of the data to providing their service to us:
- Twilio — phone numbers and call handling. Call recording is turned off.
- Deepgram — speech-to-text during the call and the assistant's voice, with model-improvement data use turned off.
- Anthropic — AI models that analyze the call text in real time. Anthropic does not train its models on this data; it may keep it for a limited period for abuse prevention under its commercial terms. We are requesting zero retention.
- Google Firebase — sign-in by phone or email and notifications.
- Apple — App Store purchases and push notifications for calls.
- RevenueCat — subscription status.
- Supabase (database), Upstash (short-lived call state that expires automatically) and Fly.io (servers) — hosting in the United States.
5. Who can see what
- Protected person: their own calls and summaries, their guardians, their trusted numbers.
- Guardians: alerts and summaries of risky calls, protection status and setup progress, for the people who accepted them. Never audio or a transcript.
- Family owner and payer: family members and subscription.
- Us: support staff can see account and status data needed to help you; they cannot see call content because we don't keep it.
We disclose information to authorities only when required by law, and to a buyer of our business subject to this policy.
6. How long we keep it
- Call audio and conversation text: not kept (only during the call).
- Risky-call summaries and call history: 90 days.
- Account, family and acceptance records: while your account exists.
- The protected person's assigned number: released 30 days after protection ends.
- When you delete your account, your data is deleted, except what we must keep by law.
7. Your choices and rights
- Change or delete information and your account in the app (Settings → Delete account).
- A protected person can remove an ordinary guardian or turn protection off at any time.
- Depending on your state (for example California, Virginia, Colorado, Connecticut, Texas, Oregon), you may have the right to know, access, correct, delete or get a copy of your personal information, and to appeal our decision. Email us to use these rights; we will verify your request and answer within the time the law requires. An authorized agent may make a request for you. We do not discriminate against you for using your rights.
- We do not sell or share personal information and do not use sensitive information beyond providing the Service; we honor Global Privacy Control signals.
8. Children
The Service is only for adults 18 and older. We do not knowingly collect information from children under 13. If we learn we have, we delete it.
9. Security
We use encryption in transit, access controls and the minimum data needed. No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.
10. Changes
If we change this policy in a material way, we will tell you in the app and ask you to accept the new version before you continue.