Privacy Policy

SafeMind ("we", "us", or "our") provides a parental monitoring service designed to help parents identify potential wellbeing concerns in their minor children's interactions with AI chat tools such as ChatGPT and Google Gemini. This Privacy Policy explains what data we collect, why we collect it, how we process and protect it, and the rights you have over it.

By using SafeMind, you agree to the practices described in this policy. If you do not agree, please discontinue use of the service.

We collect the following categories of data:

• AI chat conversation text.The SafeMind Android app uses Android's Accessibility Service to read text displayed in supported AI chat applications (currently ChatGPT and Google Gemini) on the teen's device. This includes messages typed by the teen and responses from the AI.
• Account information. When a parent creates an account, we collect an email address and a hashed password.
• Device linking information.A unique identifier is generated when the teen's device is linked to a parent account. No device serial numbers or other hardware identifiers are stored.
• Usage logs. Standard server logs (timestamps, IP addresses) for security and abuse-prevention purposes.

We do not collect browsing history, location data, contacts, photos, or any data outside of the monitored AI chat applications.

The sole purpose of collecting conversation text is to perform automated safety analysis. Our AI models analyze the content to detect signals of distress, self-harm ideation, dangerous activities, or other concerning topics. When such signals are detected, the linked parent account is alerted so they can follow up with their child.

We do not use this data for advertising, profiling, or any commercial purpose other than delivering the SafeMind service.

Conversation text captured on the teen's device is transmitted over HTTPS (TLS 1.2 or higher) to SafeMind servers. Before analysis, automated filters redact personal identifiers from the text, including email addresses, phone numbers, ID numbers, physical addresses, and URLs.

The redacted text is then analyzed by AI models to produce numerical wellbeing signals. For this analysis we use vetted third-party AI infrastructure providers — currently OpenAI and Amazon Web Services (AWS Bedrock) — which process the text transiently to return analysis results and do not use it to train their models.

Only the derived signals — numerical scores, statistical baselines, and mathematical embeddings, none of which contain readable conversation text — are stored in our database. The conversation text itself is discarded after analysis and is not stored on our servers. The chat history visible in the SafeMind app remains only on the teen's device. When signals deviate meaningfully from the teen's baseline, the linked parent account receives an alert.

Conversation text is processed transiently and is not retained on our servers after analysis. Derived wellbeing signals (numerical scores, baselines, and embeddings, which do not contain conversation text) are retained while the account remains active so that changes can be measured against the teen's established baseline.

Account information is retained for as long as the account remains active. Upon account deletion, all associated signals, device links, and account records are permanently deleted within 72 hours. Deleted data is not recoverable.

Wellbeing signals and alerts are accessible only to the authenticated parent account that is linked to the teen's device. Conversation content itself is viewable only in the SafeMind app on the teen's device. SafeMind staff do not access your family's data except in limited circumstances required to investigate a technical incident or comply with a valid legal obligation.

We do not sell, rent, trade, or otherwise transfer your family's data to third parties. We do not share data with advertisers. The AI infrastructure providers described in Section 4 act as data processors on our behalf and may not use the data for their own purposes.

We implement reasonable administrative, technical, and physical safeguards to protect data against unauthorized access, alteration, or destruction. These include:

• Encryption in transit via TLS for all data sent between devices and servers.
• Access controls restricting who within SafeMind can query production databases.
• Automated redaction of personal identifiers before analysis.
• Conversation text is discarded after automated analysis and never written to our database.

No system is perfectly secure. In the event of a data breach that affects your account, we will notify you by email within the timeframe required by applicable law.

As a parent (account holder) you may:

• Delete all data at any timeby using the "Delete all data" option in the parent dashboard, or by contacting us at support@safemind.app.
• Access your data by downloading a copy from the dashboard.
• Unlink a device at any time, which immediately stops any further data collection from that device.
• Close your account at any time; all data will be permanently deleted within 72 hours.

SafeMind is a service for parents. Parent accounts must be held by adults (18 years or older). The teen whose device is monitored is not a direct user of our web service. Conversation data relating to minors is processed solely for the safety monitoring purpose described in this policy, and is never used for commercial purposes.

We may update this Privacy Policy from time to time. We will notify registered parent accounts by email of any material changes at least 14 days before the change takes effect. Continued use of the service after the effective date constitutes acceptance of the revised policy.

For questions, data requests, or concerns about this policy, please contact us at: