Privacy Policy

1. Introduction

LexMatrix Guard (“we”, “us”, “our”) respects your privacy and is committed to protecting the personal data of parents, guardians, and children using our parental control platform. This Privacy Policy explains how we collect, use, store, and share information.

2. Data We Collect

• Account data: Parent email, authentication credentials via Firebase Auth.
• Child profiles: First name or nickname, age bracket, device identifiers.
• Platform usage data: App access attempts, blocked requests, timed usage summaries.
• Device telemetry: Device type, OS version, last-seen timestamp, heartbeat status, SIM card hash (cryptographic hash only — not the SIM number or IMSI).
• Payment data: Handled by Stripe or PayPal; we do not store card numbers.

3. How We Use Data

• Enforce active platform blocks and timed access rules.
• Provide the parent dashboard and real-time status updates.
• Improve service reliability and safety features.
• Comply with Australia eSafety, Indonesia Government Regulation No. 17 of 2025 (GR17), Malaysia Online Safety Act 2025 (ONSA), UAE Cabinet Resolution No. 106, and UK Online Safety Act legal obligations.

4. Children’s Data

We only collect the minimum data necessary to enforce parental controls. We do not collect precise geolocation, browsing history, messages, or media content from child devices. All child data is stored under the parent account and protected by Firebase Firestore security rules.

5. Data Sharing

We do not sell personal data. We share data only with trusted service providers (Firebase, Stripe, PayPal) solely to operate the service. We may disclose data if required by law.

6. Your Rights

Parents can request access, correction, or deletion of their family data by contacting support. Deletion requests are processed within 30 days.

7. Security

We use Firebase Firestore security rules, 2FA-gated parent actions, TLS encryption, and role-based access controls to protect data.