Privacy Policy

This Privacy Policy outlines how VigilKids ("we", "our", or "us") collects, uses, shares, and protects your personal information when you:

• Visit our official website at https://www.vigilkids.com (the "Website")
• Create an account and use the VigilKids mobile application or dashboard
• Access or use any of our related monitoring services, parental control tools, or features (collectively referred to as the "Services")

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, you should not use the Services.

This Policy is designed to comply with applicable data privacy laws and frameworks, including but not limited to:

• General Data Protection Regulation (GDPR) – for users located in the European Economic Area (EEA)
• California Consumer Privacy Act (CCPA) – for California residents
• California Online Privacy Protection Act (CalOPPA)
• Children's Online Privacy Protection Act (COPPA) – where applicable, especially for services involving children under 13

We reserve the right to update this Privacy Policy from time to time. Changes will be effective immediately upon posting the revised version on the Website, unless otherwise stated. Your continued use of the Services following any changes means you accept and agree to those updates.

For the purposes of applicable data protection laws, the entity responsible for your personal data (i.e., the "Data Controller") is:

• Company Name: VigilTech Limited
• Registered Address: B10 RM 2703 NEW TREND CTR 704 PRINCE EDWARD RD EAST SAN PO KONG
• Country of Incorporation: Hong Kong
• Email for Privacy Matters: support@vigilkids.com

If you are located in the European Union, we may also appoint a Data Protection Representative in accordance with Article 27 of the GDPR. You may contact this representative directly regarding all issues related to data protection and privacy compliance.

We are fully committed to safeguarding your personal data and handling it in accordance with data protection principles such as lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

We collect both personally identifiable information (Personal Data) and non-identifying technical information, which fall into the following categories:

1. Information You Provide to Us Directly

   This includes data you provide when you:

   • Register for a VigilKids account (e.g., full name, email address, phone number)
   • Purchase a subscription (e.g., billing name, payment method details)
   • Contact our support team (e.g., your inquiry message, screenshots, device info)
   Examples:
   • Full name
   • Email address
   • Mobile phone number (optional)
   • Billing information (only partial data; full card details handled by payment processors)

   Note: We do not store your full payment card number, CVV, or expiration date. These are handled securely by our third-party PCI-DSS-compliant payment processors.

2. Information Collected Automatically

   When you access our Website or use the VigilKids App, we may automatically collect:

   • IP address and geolocation (city-level)
   • Device type, OS version, browser information
   • Time zone, language preferences
   • App usage logs, interaction behavior
   • Referrer URLs and session duration

   These are collected via:

   • Google Analytics
   • Meta Pixel
   • Firebase (for crash reports and usage analytics)
   • Cookies and pixel tags (see Section 7)
3. Product Architecture and Data Collected from Monitored Devices

   VigilKids consists of a parent-facing application and a separately installed VigilKids Assistant for supported Android child devices.

   The VigilKids application for iOS is a parent-facing viewer and management application. It does not monitor the parent's iPhone or iPad and does not collect camera content, screen content, keyboard input, photos, videos, messages, or other monitored-device content from the parent's iOS device.

   VigilKids does not currently support monitoring a child's iPhone or iPad. Monitoring data displayed in the iOS parent application originates from a separately installed VigilKids Assistant on a paired Android child device. Before monitoring can be activated, the Android child device must be installed with VigilKids Assistant, linked to the parent or legal guardian's account, granted the permissions required for the selected features, and authorized through the applicable setup and privacy notice.

   Depending on the features enabled and the permissions granted on the paired Android child device, VigilKids may process the following information:

   • Location Data: Current location, location history, and safe-zone events.
   • Device and App Activity: Screen time, app usage statistics, installed-app information, and related activity records.
   • Contacts and Communication Records: Contact names and phone numbers, call history, and supported message metadata and content.
   • Screen Content: Screenshots and live screen streams, which may include personal content visible on the Android child device's screen.
   • Camera Content: Images or video obtained through remote access to the paired Android child device's camera.
   • Audio Content: Surrounding audio captured through the paired Android child device's microphone.
   • Text Input: Recorded text entered in supported applications on the paired Android child device through the keystroke-monitoring feature.
   • Photos and Videos: Supported media content processed for media review, parental supervision, or harmful-content detection.

   These features may involve processing the actual content of messages, images, videos, audio, screen activity, and text input. Processing is not limited to usage statistics or communication metadata.

   Feature availability depends on the Android device, operating-system version, supported applications, permissions granted, subscription plan, region, and connection method.

4. Purpose and Use

   We use monitoring data to provide the parental-supervision features selected by the parent or legal guardian, display relevant activity through the linked parent account, generate alerts and reports, maintain and secure the Services, and provide customer support.

5. Authorization and User Control

   VigilKids is intended only for parents and legal guardians who are legally authorized to supervise the child and the paired Android device. Before monitoring can be activated, the installer is presented with the applicable privacy notice and must confirm authorization to proceed. The permissions required for the selected features must then be granted on the Android child device.

   Parents and legal guardians are responsible for using the Services lawfully and for informing the child about the monitoring features when required by applicable law. Device permissions may be managed through the Android child device's settings. For assistance with withdrawing authorization, disabling monitoring, or disconnecting a linked device or account, contact support@vigilkids.com.

6. Data Deletion

   Parents and legal guardians may request deletion of monitoring data associated with a paired Android child device by contacting support@vigilkids.com. Account deletion may also be requested through the account-deletion option provided in the Services. We may verify the requester's identity and authority before processing a request. Certain records may be retained where required by applicable law or for legitimate security, fraud-prevention, dispute-resolution, or compliance purposes.

⚠️ Important: You must be the owner or legal guardian of the monitored device and obtain any required consent under your local laws. We act solely as a Data Processor for this data (see Section 5).

We use your personal data for specific, legitimate purposes in accordance with applicable laws. The legal bases for processing your data may include your consent, our contractual obligations, our legitimate interests, or legal compliance.

1. Service Provision
   • Create and manage your VigilKids account
   • Enable monitoring features and generate reports (e.g., screen time, GPS history)
   • Deliver alerts, push notifications, or email summaries based on your settings
2. Customer Support & Communication
   • Respond to your inquiries, feedback, or troubleshooting requests
   • Send transactional communications (e.g., activation emails, payment confirmations)
3. Analytics & Product Optimization
   • Analyze user behavior to improve functionality, UX, and performance
   • Identify technical issues, crash patterns, or system bugs (e.g., via Firebase)
4. Marketing & Engagement (with your explicit consent)
   • Send promotional emails, product announcements, usage tips
   • Inform you about service updates, discounts, or seasonal campaigns
5. Compliance and Legal Protection
   • Enforce our Terms of Service or End User License Agreement (EULA)
   • Comply with applicable laws, regulatory requirements, or court orders
   • Investigate misuse, fraud, or abuse of the Services

You may opt out of receiving non-essential marketing communications at any time by clicking "Unsubscribe" or contacting us at: support@vigilkids.com

We rely on different legal grounds to collect and process your data, depending on the context of the interaction:

Under the CCPA, you also have the right to know what data we collect, request deletion, or opt out of data sale (note: we do not sell your data).

We only share your data with third parties where it is strictly necessary to operate the Services, meet our contractual obligations, or comply with legal requirements.

1. Service Providers

   Trusted third parties who help us provide core infrastructure, including:

   • Payment processors (e.g., Stripe, Paddle)
   • Cloud hosting providers (e.g., AWS, Google Cloud)
   • Analytics services (e.g., Google Analytics, Firebase)
   • Email delivery (e.g., SendGrid, Mailchimp)
2. Legal & Compliance Authorities

   We may disclose your data if required to:

   • Comply with applicable laws or legal processes
   • Respond to lawful requests from government authorities
   • Prevent fraud, misuse, or threats to data security
3. Business Transfers

   If VigilKids is involved in a merger, acquisition, or asset sale, your personal data may be transferred as part of the transaction. You will be notified via email or prominent notice if such a change occurs.

4. Your Explicit Consent

   We may share data with other parties (e.g., for cross-app integration or co-branded features) only if you give us prior consent. All third-party providers are contractually bound under Data Processing Agreements (DPAs) and are obligated to use your data only for specified purposes and under strict security standards.

We use cookies and similar technologies to enhance your browsing experience, deliver relevant content, and improve the performance of our Website and Services.

1. What Are Cookies?

   Cookies are small text files stored on your device (computer, tablet, mobile phone) by your browser. They help recognize your device and remember information about your visit—such as your language preference or login status.

2. Types of Cookies We Use

   Type of Cookie	Purpose
   Essential Cookies	Necessary for basic site functionality, login, navigation
   Performance Cookies	Collect anonymous usage data to improve user experience (e.g., Google Analytics)
   Functionality Cookies	Remember your preferences (e.g., language, region)
   Marketing Cookies	Deliver targeted ads, track email campaign performance (e.g., Meta Pixel)

3. Third-Party Tracking Tools We May Use

   Tool	Provider	Purpose
   Google Analytics	Google LLC	Website analytics, traffic reports
   Firebase	Google LLC	Mobile app usage logs, crash reporting
   Meta Pixel	Meta Platforms Inc	Conversion tracking for marketing campaigns

   Please note: Not all tools are active in every product or region.

4. Cookie Controls

   You can manage or disable cookies in your browser settings. However, disabling essential cookies may affect some functionality of the Website or App.

You may also opt out of interest-based advertising via:

• YourAdChoices
• Google Ads Settings

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

1. Account Data

   Type	Retention Period
   Account & Login Info	Retained until account deletion
   Billing Information	Up to 180 days after cancellation (legal compliance)
   Customer Support Logs	90 days from ticket resolution

2. Target Device Data

   Data Type	Retention Period
   Monitoring Data Logs	Automatically deleted after 90 days
   Downloaded Reports	Not stored on servers after 7 days
   Deleted Accounts	Data purged from all systems within 30 days

   You may request data deletion at any time by contacting support@vigilkids.com or using the "Delete My Account" option in your dashboard.

3. Exceptions

   We may retain certain data longer if required for:

   • Legal obligations (e.g., tax audits, fraud investigations)
   • Resolving active disputes or enforcing agreements

Depending on your jurisdiction, including the European Union (GDPR) and California (CCPA), you may have the following rights regarding your personal data:

1. Right to Access

   You may request a copy of the personal data we hold about you, including how and why it is being used.

2. Right to Rectification

   You have the right to correct inaccurate or incomplete personal information.

3. Right to Erasure ("Right to Be Forgotten")

   You can request the deletion of your personal data when:

   • The data is no longer needed for its original purpose
   • You withdraw your consent
   • You object to processing and there are no overriding legitimate grounds
4. Right to Restriction of Processing

   You can request that we limit the way we use your data, for example:

   • While we verify its accuracy
   • If the processing is unlawful but you oppose deletion
5. Right to Data Portability

   You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another controller.

6. Right to Object

   You may object to the processing of your personal data on grounds related to your particular situation, including objections to direct marketing.

7. Right to Withdraw Consent

   If you have provided consent for any data processing, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

8. Right to Lodge a Complaint

   You have the right to file a complaint with your local data protection authority if you believe we are not handling your personal data in accordance with applicable law.

VigilKids is a parental control application intended for use by adults (parents/legal guardians), and not directly by children under the age of 13.

1. Data Collected About Children

   We may process data related to children through the Services—but . Examples include: only if entered or authorized by their parent or legal guardian . Examples include:

   • Location data of the child's device
   • Screen time usage
   • Keyword alerts or application logs

   We do not intentionally collect information from children directly through our Website or App interface.

2. Compliance with COPPA

   In accordance with the Children's Online Privacy Protection Act (COPPA):

   • We do not collect personal data from children under 13 without verified parental consent
   • All child-related data is encrypted and only viewable by the authorized account holder
   • If we learn that personal information has been collected from a child without parental authorization, we will delete it promptly

You, as the legal guardian, are responsible for:

• Installing the app only on devices you are authorized to monitor
• Complying with laws in your region regarding notice or consent to children

We take the protection of your personal information very seriously and implement industry-standard technical and organizational safeguards.

1. Technical Measures
   • Data Encryption: All data in transit is encrypted via HTTPS. Data at rest is encrypted using AES-256 (Advanced Encryption Standard) and RSA-4096 for key exchange.
   • Hashing: Passwords are never stored in plain text; we use secure salted hash functions.
   • Access Control: Only authorized personnel have access to user data, restricted by role and need.
2. Organizational Measures
   • Regular security audits and vulnerability assessments
   • Strict internal policies on data access and handling
   • Confidentiality agreements for all staff and contractors handling user data
3. Breach Notification

   In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will:

   • Notify you without undue delay
   • Report the breach to the competent data protection authority within 72 hours (as required by GDPR)

While we take robust steps to protect your information, no method of data transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your login credentials.

You are in full control of your data and can choose to stop using VigilKids and remove your personal information at any time.

1. How to Opt Out of Communications

   You may opt out of receiving marketing communications (e.g., product updates, promotional emails) by:

   • Clicking the "Unsubscribe" link at the bottom of any marketing email
   • Adjusting your communication preferences in your account settings
   • Sending a request to: support@vigilkids.com

   Please note: You may still receive essential transactional emails such as payment confirmations, password resets, or critical security notices.

2. How to Uninstall the App

   To stop all data collection from a monitored device:

   1. Access the target device.
   2. Use the system's app uninstall function to remove the VigilKids App.
   3. Optionally, clear all browser data or uninstall browser extensions if applicable.
3. How to Delete Your Account and Data

   You may request permanent deletion of your account and associated data at any time. To do so:

   • Use the "Delete My Account" option in your dashboard OR
   • Send a written request to support@vigilkids.com

   Upon verification of your identity:

   • Your account will be deactivated immediately
   • All personal data, except legally required records (e.g., billing for tax), will be deleted within 30 days
   • Monitoring data will be purged from our servers, unless otherwise requested earlier

We may revise this Privacy Policy from time to time to reflect changes in legal requirements, technological advancements, or our service offerings.

1. Notification of Changes

   If we make material changes, we will:

   • Post the updated version on our Website with a new "Last Updated" date
   • Notify registered users via email or in-app notification, where required by law

   You are encouraged to review this Privacy Policy periodically to stay informed about how we are protecting your data.

2. Continued Use as Agreement

   Your continued use of the VigilKids Services after any changes to this Privacy Policy will constitute your acceptance of those changes.

   If you do not agree to the updated policy, you should stop using the Services and request data deletion as described above.

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us through the following channels:

• Company Name: VigilTech Limited
• Mailing Address: B10 RM 2703 NEW TREND CTR 704 PRINCE EDWARD RD EAST SAN PO KONG
• Email (General Support):support@vigilkids.com

We will make every effort to respond to your inquiry within 14 calendar days, or sooner where legally required (e.g., 10 days under CCPA)