Privacy Policy for YellowHat Kids App

1. Overview

Our approach is privacy-first:

• • Notification analysis happens entirely on-device
• • We do not upload or store full message content on our servers by default
• • Data is kept local whenever possible
• • Monitoring is designed to be transparent and controlled by a parent or guardian

2. Notification Access (Android Permission)

The Kids App requires permission to access device notifications.

This allows the app to:

• • Read incoming notifications
• • Analyze them locally using an on-device AI model
• • Detect potentially harmful or unsafe content

This processing:

• • Occurs only on the device
• • Is not used to build user profiles
• • Does not result in full message content being stored on our servers

3. Information We Collect

We collect only the minimum information necessary to provide the service.

a. Device and Linking Information

• • Anonymous device identifiers
• • Secure pairing data used to link with the Parent App (e.g., QR code pairing)

b. Local Notification Data (On-Device Only)

The Kids App processes notification content locally to detect potential risks.

• • Notification content is analyzed only on-device
• • Data may be temporarily stored locally for functionality
• • This data is not transmitted to our servers

c. Alert Metadata (Subscription Required)

If a valid subscription is active for the linked device, the Kids App may send limited alert data to the Parent App, including:

• • Category of concern (e.g., bullying, scam, threats)
• • A short AI-generated explanation

If no subscription is active:

• • No alerts are sent
• • No data is transmitted to the Parent App
• • All analysis remains on the device

d. Optional Notification Content Sharing (Subscription Feature)

Parents may optionally enable sharing of limited notification content with the Parent App.

This feature:

• • Is disabled by default
• • Requires an active subscription
• • Can be turned on or off at any time by the parent

4. Remote Configuration (Parent App Control)

When a subscription is active, the Parent App may remotely configure how the Kids App operates, including:

• • Selecting which apps are monitored
• • Defining keywords to ignore or flag
• • Enabling or disabling notification content sharing

These settings:

• • Are securely transmitted to the Kids App
• • Are applied locally on the device
• • Can be changed or removed by the parent at any time

5. Information We Do NOT Collect

We do not:

• • Upload or store full message or notification content in the cloud by default
• • Collect chat history or conversation logs on our servers
• • Access or store photos, videos, or attachments
• • Track browsing history
• • Record keystrokes
• • Monitor apps beyond notification analysis

6. How Information Is Used

We use limited information to:

• • Detect and classify potentially harmful content
• • Apply parent-defined monitoring rules
• • Send alerts (only when a subscription is active)
• • Maintain and improve app functionality

We do not:

• • Sell user data
• • Use data for advertising
• • Share personal data with third parties for marketing

7. Data Processing and Storage

• • Notification analysis occurs on-device
• • Full message content is not uploaded to our servers by default
• • Data is only transmitted when required for alerts or configuration
• • Without a subscription, all analysis results remain on-device

8. Data Retention

• • Data is stored locally on the device only
• • Local data may be cleared over time or when the app is uninstalled
• • We do not retain personal data on our servers beyond what is necessary for basic functionality

9. Permissions We Use (Android)

The Kids App may request the following permissions:

• • Notification Access – to analyze incoming notifications
• • Camera – used only for QR code scanning during device linking
• • Foreground Service – required for continuous monitoring
• • Receive Boot Completed – allows monitoring to resume after restart
• • Internet / Network Access – used to communicate with the Parent App

10. Transparency and Acceptable Use

YellowHat is designed for transparent parental supervision.

• • The app must not be used for covert monitoring
• • Parents are responsible for informing the child about monitoring
• • The app is not designed to be hidden or disguised

11. Children's Privacy and Parental Consent

The Kids App is intended to be used under the supervision of a parent or legal guardian.

By using the app, you confirm that:

• • You are the parent or legal guardian, or
• • You have obtained appropriate consent to monitor the device

12. Security

We take reasonable steps to protect data, including:

• • Encrypted communication (HTTPS)
• • Secure device pairing
• • Minimizing data collection

However, no system is completely secure.

13. Third-Party Services

We may use third-party services for:

• • App functionality
• • Performance monitoring
• • Crash reporting

These services do not receive notification content.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date.

15. Contact Us

Email: support@yellowhatapp.com

16. Disclaimer

YellowHat is a support tool for parents.

• • It may not detect all harmful content
• • It should not replace parental supervision