Privacy Policy

1The short version

• eGuard collects what it needs to set up and verify protections on your children's devices, and nothing more.
• We never read messages, photos, browsing content or files on your child's device.
• We don't sell your data, show ads, or use third-party tracking.
• Activity such as screen time and alerts is deleted automatically after 90 days.
• Location is off unless you turn it on. Even then, only the current location is kept unless you choose to keep history.
• You can export or delete your family's data at any time from Settings.

2Who we are

eGuard is a product of DevCom Digital Marketing Services ("DevCom", "we"), which runs the eGuard website, parent dashboard and apps. We are the personal information controller for the data described here, under the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173).

DevCom's Data Protection Officer handles every privacy request. You can reach them at support@devcomdigital.com, or by post at Brgy. Hipusngo, Baybay City, Leyte 6521, Philippines.

3What we collect

A parent gives us most of this directly. The rest comes from your children's devices once you pair them with eGuard.

What we never collect

Messages, contacts, call logs, browsing history or web page content, photos or files stored on your child's device, audio, calendars, health or financial information.

4How we use it

We use your data to:

• apply the protections you choose to your children's devices, and check that each one is really on;
• show you screen time, apps, location and Configuration Health;
• send you alerts, a weekly summary if you keep it on, sign-in and verification emails, and reminders about your plan;
• send you tips, weekly safety plans and check-ins, only on the channels you turn on in Settings › Notifications › Tips and reminders;
• send you product updates unless you turn them off in Settings › Notifications, and service notices about your account, our terms or security, which go to every parent;
• measure, in totals across families, whether eGuard and its tips help families keep protections in place;
• process payments and manage your subscription;
• answer your support requests;
• keep eGuard secure, prevent abuse, and fix problems.

We process this data to provide the service you signed up for, on the basis of your consent as your child's parent or guardian, and where the law requires it (for example, keeping payment records). We don't use your family's data for advertising, and we don't make automated decisions about you or your children that have legal effects.

5Mailing lists

You can ask for emails from our public pages without an account: eGuard news (the form at the bottom of each page) or one email when the iPhone app is out (eguard.family/iphone). For these we keep only your email address, which list you chose, where you signed up and when you confirmed.

• Confirmation first. We send one email with a link to confirm. Nothing else is sent until you press it. If you don't, we delete your address after 7 days.
• Unsubscribing deletes you. Every email has an unsubscribe link. Using it deletes your address from our lists entirely; we don't keep a copy.
• Separate from your account. Signing up doesn't create an eGuard account, and it doesn't change the emails you get as a parent, which you manage in Settings › Notifications.

We use the address only to send what you asked for. We never sell it or share it, except with our email delivery provider, which sends the emails for us.

6Children's data

eGuard is for parents and guardians. Children don't create accounts. A parent adds each child and pairs each device, and in doing so consents on the child's behalf to the collection described in this policy.

eGuard is never hidden. The eGuard app is visible on your child's device, and on Android it shows a notification whenever it's active. We encourage you to tell your children what eGuard does and why.

Data from a child's device is used only to provide eGuard to their family. It is never used for advertising or shared for anyone else's purposes.

7Who we share it with

We don't sell personal data. Within your family, every parent you add can see your children's data. Outside your family, we share data only with:

• Service providers who run parts of eGuard for us: hosting and database, email delivery, PayMongo for payments, and Google's Firebase Cloud Messaging, which delivers push alerts to the parent app (it carries each alert's title and text, which can include a child's first name). They may use the data only to provide their service to us, under contract.
• Google reCAPTCHA on the sign-in, create-account and forgot-password pages, and when you join a mailing list, to tell people from automated attacks. It reads how the page is used and your browser's details, under Google's Privacy Policy and Terms. On the mailing-list forms it loads only when you press the button. It doesn't run anywhere else in eGuard.
• Apple, Google or LinkedIn, if you choose to sign in with them. We receive your name and email from them; we don't send them your family's data.
• Authorities, when the law requires it, or to protect someone's safety.

Organizations your family joins never see your family's data: not your name, your children or which code you redeemed. They see only how many families joined and how many of their codes were used. If you manage an organization in eGuard, its other admins see your name and email address.

Maps in the dashboard are loaded through our own servers, so the map provider never sees your IP address or what you're looking at.

The setup video on our home page and How it works page is embedded from YouTube in its privacy-enhanced mode: YouTube receives your IP address when the player loads, and sets cookies only if you play the video.

8How long we keep it

• Activity (screen time, app usage, location history, change history, browser block counts and site requests, and resolved alerts): 90 days, then deleted automatically.
• Current location: overwritten with every update, and deleted when you remove the device or the child.
• Security records of account changes: one year.
• Sessions: until you sign out, or 30 days. Email verification links expire after 24 hours and password-reset links after one hour.
• Your account, children and settings: until you delete them.
• Tips and reminders: the record of your actions and of the messages you opened, and your weekly plans, 400 days; the messages we sent, 365 days. Your choices and your progress on activities are kept until you delete your account.
• Mailing-list addresses: until you unsubscribe, which deletes them. Unconfirmed sign-ups: 7 days.
• Payment records: until you delete your account. PayMongo keeps its own record of your payments, as the law requires of it.

9Cookies

eGuard sets these cookies of its own:

• eg_session keeps you signed in. It is required, and ends when you sign out or after 14 days without using eGuard on that browser.
• eg_2fa, with two-step verification on, holds your sign-in for the 10 minutes you have to enter the code. It is required.
• eg_signup, while you create an account, holds it for the 15 minutes you have to enter the emailed code. It is required.
• eg_device remembers this browser, so we can email you when someone signs in to your account from one you haven't used. It doesn't sign anyone in.
• eg_theme remembers whether you chose light or dark mode.

We don't use advertising, analytics or tracking cookies. If that changes, we'll update this policy first.

10How we protect it

Everything is sent over HTTPS. Passwords are hashed with bcrypt, and sign-in, device and reset tokens are stored only as hashes. Repeated failed sign-ins lock the account for a while. Only people in your family can see your family's data, and only a family admin can remove a parent or delete a child.

If a breach ever puts your data at risk, we will notify you and the National Privacy Commission within 72 hours of finding out, as the law requires.

11Where it's stored

Our hosting and service providers may store and process data outside the Philippines. When they do, we require them by contract to protect it to the standard of the Data Privacy Act.

12Your rights

Under the Data Privacy Act, you have the right to be informed about how your data is used, to access it, to correct it, to object to its processing, to have it erased or blocked, to get a copy in a portable format, and to claim damages. You can do most of this yourself:

• Download everything: Settings › Data › Export (JSON).
• Correct details: Settings › Account, or edit a child's profile.
• Delete a child's data: delete the child from their profile.
• Delete your account: Settings › Data. If you're the family admin, this deletes the whole family, including every child and device. Can't sign in? See how to request deletion.

For anything else, write to support@devcomdigital.com. If you're not satisfied with our answer, you can file a complaint with the National Privacy Commission.

13Changes to this policy

If we change how we use your data, we'll update this page and its date. For significant changes, we'll also email family admins before the change takes effect.