Privacy Policy

1The short version

• eGuard collects what it needs to set up and verify protections on your children's devices, and nothing more.
• We never read messages, photos, browsing content or files on your child's device.
• We don't sell your data, show ads, or use third-party tracking.
• Activity such as screen time and alerts is deleted automatically after 90 days.
• Location is off unless you turn it on. Even then, only the current location is kept unless you choose to keep history.
• You can export or delete your family's data at any time from Settings.

2Who we are

eGuard ("eGuard", "we") runs the eGuard website, parent dashboard and apps. We are the personal information controller for the data described here, under the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173).

Our Data Protection Officer handles every privacy request. You can reach them at support@devcomdigital.com.

3What we collect

A parent gives us most of this directly. The rest comes from your children's devices once you pair them with eGuard.

What we never collect

Messages, contacts, call logs, browsing history or web page content, photos or files stored on your child's device, audio, calendars, health or financial information.

4How we use it

We use your data to:

• apply the protections you choose to your children's devices, and check that each one is really on;
• show you screen time, apps, location and Configuration Health;
• send you alerts, sign-in and verification emails, and reminders about your plan;
• process payments and manage your subscription;
• answer your support requests;
• keep eGuard secure, prevent abuse, and fix problems.

We process this data to provide the service you signed up for, on the basis of your consent as your child's parent or guardian, and where the law requires it (for example, keeping payment records). We don't use your family's data for advertising, and we don't make automated decisions about you or your children that have legal effects.

5Children's data

eGuard is for parents and guardians. Children don't create accounts. A parent adds each child and pairs each device, and in doing so consents on the child's behalf to the collection described in this policy.

eGuard is never hidden. The eGuard app is visible on your child's device, and on Android, children 13 and older are asked to agree to supervision. We encourage you to tell your children what eGuard does and why.

Data from a child's device is used only to provide eGuard to their family. It is never used for advertising or shared for anyone else's purposes.

6Who we share it with

We don't sell personal data. Within your family, every parent you add can see your children's data. Outside your family, we share data only with:

• Service providers who run parts of eGuard for us: hosting and database, email delivery, and PayMongo for payments. They may use the data only to provide their service to us, under contract.
• Apple or Google, if you choose to sign in with them. We receive your name and email from them; we don't send them your family's data.
• Authorities, when the law requires it, or to protect someone's safety.

Maps in the dashboard are loaded through our own servers, so the map provider never sees your IP address or what you're looking at.

7How long we keep it

• Activity (screen time, app usage, location history, change history and resolved alerts): 90 days, then deleted automatically.
• Current location: overwritten with every update, and deleted when you remove the device or the child.
• Security records of account changes: one year.
• Sessions: until you sign out, or 30 days. Email verification links expire after 24 hours and password-reset links after one hour.
• Your account, children and settings: until you delete them.
• Payment records: as long as Philippine tax and accounting laws require, even after you delete your account.

8Cookies

eGuard uses two cookies, both our own:

• eg_session keeps you signed in. It is required, and ends when you sign out.
• eg_theme remembers whether you chose light or dark mode.

We don't use advertising, analytics or tracking cookies. If that changes, we'll update this policy first.

9How we protect it

Everything is sent over HTTPS. Passwords are hashed with bcrypt, and sign-in, device and reset tokens are stored only as hashes. Repeated failed sign-ins lock the account for a while. Only people in your family can see your family's data, and only a family admin can remove a parent or delete a child.

If a breach ever puts your data at risk, we will notify you and the National Privacy Commission within 72 hours of finding out, as the law requires.

10Where it's stored

Our hosting and service providers may store and process data outside the Philippines. When they do, we require them by contract to protect it to the standard of the Data Privacy Act.

11Your rights

Under the Data Privacy Act, you have the right to be informed about how your data is used, to access it, to correct it, to object to its processing, to have it erased or blocked, to get a copy in a portable format, and to claim damages. You can do most of this yourself:

• Download everything: Settings › Data › Export (JSON).
• Correct details: Settings › Account, or edit a child's profile.
• Delete a child's data: delete the child from their profile.
• Delete your account: Settings › Data. If you're the family admin, this deletes the whole family, including every child and device.

For anything else, write to support@devcomdigital.com. If you're not satisfied with our answer, you can file a complaint with the National Privacy Commission.

12Changes to this policy

If we change how we use your data, we'll update this page and its date. For significant changes, we'll also email family admins before the change takes effect.