Privacy Policy

Last Updated: February 17, 2026

At Sophia ("we," "our," or "us"), we prioritize the privacy and safety of your family. This Privacy Policy outlines how we collect, use, and protect your information when you use our website, mobile applications, desktop clients, and browser extensions.

1. Information We Collect

We believe in data minimization. We only collect the absolute minimum data required to provide our service:

  • Account Information: Email address for parent accounts.
  • Child Profiles: Names (or nicknames) you assign to child profiles, avatar emoji selection.
  • Device Information: Device IDs, device fingerprint (hardware identifiers used only for device recovery), operating system type, and online status.
  • Usage Data: Aggregate screen time duration (minutes per day). We do NOT track browsing history, specific websites visited, message content, or precise location.
  • Settings Data: Screen time limits, bedtime schedules, homework schedules, and blocking keywords you configure.

2. Browser Extension (Chrome/Chromebook)

Our Chrome extension provides parental controls for Chromebook and browser users. The extension:

  • Collects: Device identifier (generated once for pairing), browser fingerprint (for device recovery only), time spent browsing (aggregate minutes, not specific URLs).
  • Does NOT Collect: Browsing history, specific URLs visited, search queries, passwords, form data, or any page content.
  • Website Blocking: The extension blocks access to websites matching parent-configured keywords. Blocked site attempts are NOT logged or transmitted to our servers.
  • Permissions Used: Storage (save settings locally), tabs (enforce lock screen), declarativeNetRequest (block websites), alarms (sync with server).

3. Children's Privacy (COPPA & GDPR-K)

Sophia is a parental control tool designed to be used by parents to manage their children's devices. We comply with the Children's Online Privacy Protection Act (COPPA) and GDPR-K:

  • We obtain verifiable parental consent before collecting any information from a child's device.
  • We do not collect personal information directly from children under 13 without parental consent.
  • We do not use child data for advertising or marketing purposes.
  • Parents have full control to review, delete, and manage their child's data at any time.

4. How We Use Your Information

Your data is used solely for:

  • Enforcing the screen time limits you set.
  • Providing you with usage reports (e.g., "2 hours used today").
  • Syncing settings across your family's devices.
  • Sending device status notifications (online/offline, time expired).
  • Improvement of our app's stability and performance.

5. Data Storage & Security

All data is encrypted in transit (TLS 1.3) and at rest. We use enterprise-grade cloud infrastructure (Supabase/PostgreSQL) hosted in secure data centers. Access to data is strictly restricted to automated systems required to operate the service.

6. Data Retention

We retain your data only as long as your account is active:

  • Account Data: Retained until you delete your account.
  • Usage Statistics: Aggregated daily, raw data not stored.
  • Device Data: Automatically removed when a device is unpaired.

7. No Third-Party Sharing

We do not sell, trade, rent, or share your personal information with third parties. We do not use advertising networks or analytics services that track your family. Your family's data is yours alone.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of any incorrect data.
  • Request deletion of your account and all associated data ("Right to be Forgotten").
  • Export your data in a portable format.
  • Unpair devices at any time, immediately removing their data.

9. How to Delete Your Data

To delete your data:

  • Unpair a device: Go to Settings in the parent app, select the device, and tap "Unpair." This immediately removes all device data.
  • Delete a child profile: Go to the child's settings and tap "Delete Profile." This removes all associated data.
  • Delete your account: Contact us at privacy@getsophia.net to request full account deletion.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact our Privacy Team at:

privacy@getsophia.net