Privacy Policy

Mamoru provides parental-control software for families. For the purposes of data protection law we are the data controller for the information described below. You can reach us at privacy@trymamoru.com.

• Account information — the parent’s name, email address and password. Passwords are handled by our authentication provider and are never stored by us in readable form.
• Child profile information — the name or nickname, age range and avatar you set for each child, plus the devices you connect.
• Device and usage activity — which apps are used and for how long, screen-unlock activity, and the device model and operating-system version.
• Web activity — the domains a child’s device requests, so filtering rules can be applied and blocked attempts can be reported.
• Location — the child device’s location and its arrival at or departure from zones you define, when you enable location features.
• Tasks and rewards — tasks you assign, their completion, points earned and rewards redeemed.
• Technical data — IP address, timestamps and error logs generated when apps talk to our servers.

• To provide the features you switch on — limits, filtering, location alerts, tasks and reports.
• To create and secure your account and keep your session valid across web and mobile.
• To send service email such as verification codes, password resets and important notices.
• To diagnose faults, prevent abuse and improve reliability.

We do not sell personal data, and we do not use children’s data for advertising or profiling unrelated to the service.

Mamoru is bought and configured by a parent or legal guardian. By connecting a child’s device you confirm you have the authority to do so and that you have explained to your child what is being monitored. The child app makes its presence and the active rules visible on the device; we do not offer a hidden mode.

We share data only with service providers that operate parts of the product on our behalf, under contract and only for that purpose:

• Our cloud database and authentication provider, which hosts accounts and application data.
• Our transactional email provider, which delivers verification and reset codes.
• Our push-notification providers, which deliver alerts to your devices.
• Our payment processor, when paid plans become available; card details go to them directly and never reach our servers.

We may also disclose data where we are legally required to do so.

Account data is kept while your account is open. Activity data such as app usage, domain requests and location history is kept for a limited retention window and then deleted or aggregated. When you delete your account, we delete or anonymise the associated data except where we must retain records by law.

Data is encrypted in transit. Access to production systems is restricted to staff who need it. No system is perfectly secure, so we also ask you to use a strong, unique password and to keep your device locked.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to certain processing, and to complain to a supervisory authority. Write to privacy@trymamoru.com and we will respond within the period required by applicable law.

If we make a material change we will update the date above and, where the change meaningfully affects you, notify you by email or in the app.