Global Privacy Policy — Hayat Family
Transparent family protection and digital wellbeing.
What information may be involved?
Different Hayat Family tools rely on specific technical data points to function. We practice strict data minimization:
Parent name, email address, password hash (Bcrypt), and invited co-parent relationship records.
Device model, OS version, daily app usage duration, category totals, and battery level. We do NOT read private chats or view screen content.
GPS coordinates collected strictly to power arrival/departure geofence alerts, one-tap Check-In, and SOS alerts. Retained up to 7 or 14 days maximum.
Payment processing is securely handled by Stripe. We store Stripe Customer IDs and subscription states, never raw credit card numbers.
Why this information is used (Lawful Bases)
We process family data strictly to deliver contracted software services, enforce parent-approved safety rules, and ensure device security. Our lawful bases under GDPR Article 6 include:
- Performance of Contract: Delivering screen limits, app blocking, and safety notifications requested by the subscriber.
- Verifiable Parental Consent: Processing minor child data with the affirmative authorization of the verified guardian.
- Legitimate Interests: Preventing unauthorized tampering and maintaining platform stability.
03 Parents controls & child clarity
We reject secret spyware. Children can see their daily allowance directly in the Time Wallet and know when bedtime lockout begins.
Access to location maps, app rules, and check-in records requires authenticated credentials and verified pairing.
No secret keystroke logging, no hidden photo capture, and no listening through microphones.
04 Service providers & sharing
We share data ONLY with vetted cloud infrastructure providers necessary to operate our service:
- Hosting & Databases: ISO 27001-certified data centres in the UK and European Union.
- Payment Processing: Stripe handles card transactions in PCI-DSS Level 1 compliant environments.
- Push Notifications: Apple APNs and Google FCM for critical SOS and check-in dispatches.
Data Retention
Your rights, international families & contact
You have the right to access, rectify, export, or permanently erase your family
Security & international data protection
We enforce strong end-to-end encryption in transit (TLS 1.3) and AES-256 at rest. All family telemetry is processed in certified cloud infrastructure complying with strict UK GDPR and international adequacy decisions.
Cookies, policy updates & contact details
We use essential cookies to maintain secure sessions and privacy preferences. Any updates to this policy will be clearly communicated. For privacy inquiries, please contact our Data Protection Officer at [email protected].
Privacy, without the guesswork
Can my child see the rules and monitoring?
Yes. The child companion app clearly indicates that protections are active and shows remaining time allowances. We do not support hidden surveillance modes.
Do you sell data to advertisers or brokers?
No. We have never sold, rented, or monetized child or parent data. Our revenue comes entirely from software subscriptions paid by families.
Clear choices. Stronger family trust.
Read our Children's Privacy Policy to learn more about our COPPA safeguards.