Privacy Policy

SafeMind ("we", "us", or "our") provides a parental monitoring service designed to help parents identify potential wellbeing concerns in their minor children's interactions with AI tools such as ChatGPT. This Privacy Policy explains what data we collect, why we collect it, how we process and protect it, and the rights you have over it.

By using SafeMind, you agree to the practices described in this policy. If you do not agree, please discontinue use of the service.

We collect the following categories of data:

• ChatGPT conversation text.The SafeMind Android app uses Android's Accessibility Service to read text displayed in the ChatGPT application on the teen's device. This includes messages typed by the teen and responses from the AI.
• Account information. When a parent creates an account, we collect an email address and a hashed password.
• Device linking information.A unique identifier is generated when the teen's device is linked to a parent account. No device serial numbers or other hardware identifiers are stored.
• Usage logs. Standard server logs (timestamps, IP addresses) for security and abuse-prevention purposes.

We do not collect browsing history, location data, contacts, photos, or any data outside of the ChatGPT application.

The sole purpose of collecting conversation text is to perform automated safety analysis. Our AI models analyze the content to detect signals of distress, self-harm ideation, dangerous activities, or other concerning topics. When such signals are detected, the linked parent account is alerted so they can follow up with their child.

We do not use this data for advertising, profiling, or any commercial purpose other than delivering the SafeMind service.

Conversation text captured on the teen's device is transmitted over HTTPS (TLS 1.2 or higher) to SafeMind servers. Once received, the text is analyzed by our AI safety models. Flagged conversations are made available to the linked parent account through the SafeMind dashboard. Conversations that are not flagged are still stored briefly (see Section 5) to allow retroactive review if new safety signals are identified.

Our AI analysis is performed by models we operate directly. Conversation data is not sent to third-party AI providers for processing.

All captured conversation messages are automatically and permanently deleted 30 days after they are received, regardless of whether they were flagged. Deleted data is not recoverable.

Account information is retained for as long as the account remains active. Upon account deletion, all associated conversation data, device links, and account records are permanently deleted within 72 hours.

Conversation data is accessible only to the authenticated parent account that is linked to the teen's device. SafeMind staff do not access conversation content except in limited circumstances required to investigate a technical incident or comply with a valid legal obligation.

We do not sell, rent, trade, or otherwise transfer your family's data to third parties. We do not share data with advertisers.

We implement reasonable administrative, technical, and physical safeguards to protect data against unauthorized access, alteration, or destruction. These include:

• Encryption in transit via TLS for all data sent between devices and servers.
• Access controls restricting who within SafeMind can query production databases.
• Automatic deletion after the 30-day retention window.

No system is perfectly secure. In the event of a data breach that affects your account, we will notify you by email within the timeframe required by applicable law.

As a parent (account holder) you may:

• Delete all data at any timeby using the "Delete all data" option in the parent dashboard, or by contacting us at support@safemind.app.
• Access your data by downloading a copy from the dashboard.
• Unlink a device at any time, which immediately stops any further data collection from that device.
• Close your account at any time; all data will be permanently deleted within 72 hours.

SafeMind is a service for parents. Parent accounts must be held by adults (18 years or older). The teen whose device is monitored is not a direct user of our web service. Conversation data relating to minors is processed solely for the safety monitoring purpose described in this policy, and is never used for commercial purposes.

We may update this Privacy Policy from time to time. We will notify registered parent accounts by email of any material changes at least 14 days before the change takes effect. Continued use of the service after the effective date constitutes acceptance of the revised policy.

For questions, data requests, or concerns about this policy, please contact us at: