Privacy Policy

Last updated: 2026

This Privacy Policy explains how Guardian Eye ("we", "us", "the Service") handles information when you use our website, the Guardian Eye parent app, and the Guardian Eye child app. By creating an account or using the Service, you agree to this policy.

Guardian Eye is intended only for a parent or legal guardian to monitor a minor child in their care, or for monitoring a device you own with consent where required by law. You are responsible for using it lawfully. See our Terms of Service.

Your data is yours — and your responsibility

You are solely responsible for the data you collect and store through the Service — including having the legal right to collect it, how it is used, and keeping it secure. Guardian Eye does not read, analyse, use, sell, or keep your monitored data for any purpose of our own. It exists only inside your own private account so that the Service can show it to you, and it is removed when you delete a device or close your account. We accept no responsibility or liability for the data you choose to collect or for how you use it — that is entirely yours.

1. Who is responsible for the data

When you monitor a device, you are the data controller of the information collected from that device. We act as a processor that stores that information in your private account on your behalf. We do not use it for our own purposes, and we do not sell it.

2. Information we collect

Account information — your email address and password (stored securely, hashed). Used to sign you in and link your subscription.
Payment information — handled entirely by our payment processor (Stripe). We never receive or store your full card details.
Monitored data — when you install the child app on a device you are authorised to monitor, it collects data from that device (for example: notifications and messages, contacts, SMS and call logs, location, media file information, and on-demand camera and microphone streams) and delivers it to your private account.

3. How your data is stored and who can access it

Monitored data is stored in a private, per-account database and is accessible only to you, the account holder. Data is encrypted in transit. Live camera, microphone and file transfers stream directly between the two devices where possible, relayed only when a direct connection is not possible. We do not access, review, or share your monitored data, except where required by law.

4. Third-party services

We rely on the following providers to run the Service:

Stripe — payment processing.
Cloudflare — website hosting, network, and file delivery.
Supabase — account and database storage.

Each processes data only as needed to provide their part of the Service.

5. Data retention and deletion

You can remove a monitored device and its data at any time from the parent app. If you cancel your subscription, your access continues until the end of your paid period, after which your account and associated data are scheduled for deletion. You may also request deletion of your account and data by contacting us.

6. Children's data

The Service is designed for a parent or legal guardian to monitor their own minor child, or a device they own and are legally permitted to monitor. Any data relating to a child is collected on behalf of, and under the responsibility of, that parent or guardian. We do not knowingly collect data for any other purpose.

7. Your rights

You may access, export, or delete the data in your account, and you may close your account at any time. To exercise these rights, use the in-app controls or contact us.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

9. Contact

Questions about privacy? Email us at contact@shtaya.site.

This document is a general template and not legal advice. Please have it reviewed by a qualified professional and add your legal entity name and jurisdiction before launch.