ARVO Parent Control

1. Introduction

ARVO Mobile Ltd ("ARVO", "we", "us", or "our") operates the ARVO Parent Control mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

The App is a parental-control monitoring tool. With the parent's setup and the child's on-device consent, the App collects precise location, device status, communications metadata, and on-device usage information from the child's device — including in the background while the App is closed or not in use — and shares it with the linked parent account so the parent can keep the child safe.

By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the App.

2. Information We Collect

2.1 Account Information

When you register an account, we collect:

• Email address
• Name
• Password (stored securely in encrypted form)
• Account type (Parent or Child)

2.2 Child Device Information

When a child device is linked to a parent account, we may collect:

• Device name and model
• Battery level and connectivity status
• SIM/eSIM information
• Mobile data usage

2.3 Location Data

When the parent has linked a child device and the child has accepted the in-app location disclosure, we collect precise location data from the child's device. This includes:

• GPS latitude and longitude
• An approximate street address derived from those coordinates (via reverse geocoding through OpenStreetMap's Nominatim service)
• Speed, accuracy, and timestamp of each location reading
• Battery level and network type (Wi-Fi or mobile data) at the time the location is captured

Location is collected:

• Once per hour as a background sample, including when the App is closed or not in use. On Android this requires the ACCESS_BACKGROUND_LOCATION permission; on iOS it requires the "Always" location permission.
• Every 10 seconds for up to 10 minutes when the linked parent actively requests a live location update from the parent app.

Before any background-location permission is requested, the child sees a clear in-app disclosure explaining what is collected, how it is used, and that collection continues when the App is not in use. Tracking does not begin until the child taps "I agree" on that disclosure.

Location data is sent only to ARVO's secure backend (arvomobile.co.uk) and is made visible only to the parent account that has been paired with the child device through the QR-code linking process. We do not sell, share, or disclose location data to advertisers or any other third parties.

2.4 Communication Data

The App may collect information about:

• Call logs (incoming and outgoing calls on the child's device)
• SMS logs (sent and received messages on the child's device)
• Contact lists on the child's device
• Notifications sent between parent and child devices

2.5 Authentication Data

If you choose to sign in using third-party services (Google or Apple), we receive basic profile information as permitted by those services, such as your name and email address.

2.6 Screen Time and App Usage

On Android, the App reads on-device usage statistics (the PACKAGE_USAGE_STATS permission) so the parent can review which apps the child has used and for how long. We collect:

• Names and package identifiers of apps used on the child's device
• Total foreground time per app, per day
• Last-used timestamp per app

Individual screens, content viewed inside apps, or keystrokes are not collected.

2.7 Notification Content

On Android, with the parent's configuration and the child's grant of the notification-listener permission (BIND_NOTIFICATION_LISTENER_SERVICE), the App may read notifications posted on the child's device in order to forward parent-relevant alerts (for example, low-battery, location-disabled, or SOS notifications) back to the parent app. Notifications from unrelated apps are not stored or transmitted.

2.8 Sensitive Content Analysis (iOS only)

On iOS 17 and later, the App can scan photos taken on the child's device for sensitive (NSFW) imagery using Apple's on-device Sensitive Content Analysis framework. This analysis runs entirely on the child's device; no images are uploaded to ARVO's servers. If sensitive content is detected, only a notification (without the image) is sent to the linked parent.

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain the App's parental control features
• Enable parents to monitor and manage their child's device
• Send notifications and alerts between parent and child devices
• Manage content filtering and call blocking preferences
• Provide location tracking services when enabled
• Authenticate users and maintain account security
• Improve and optimise the App
• Respond to support requests

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

• Between linked accounts: Location, device status, call and SMS metadata, contact lists, screen-time and app-usage statistics, and parent-relevant notifications collected from the child's device are shared with the parent account that has been paired through the QR-code linking process. This sharing is the core functionality of the App and only occurs after the parent and child have explicitly paired.
• Service providers: We may share data with trusted third-party service providers who assist us in operating the App (e.g., cloud hosting, analytics), subject to confidentiality obligations.
• Legal requirements: We may disclose information if required by law, regulation, or legal process.
• Safety: We may disclose information if we believe it is necessary to protect the safety of a child or any person.

5. Children's Privacy

The App is designed for use by parents/guardians to monitor their children's devices. Child accounts are created and managed under parental supervision. We are committed to protecting children's privacy and comply with applicable children's data protection laws, including the Children's Online Privacy Protection Act (COPPA) and the UK Age Appropriate Design Code.

We only collect information from children's devices with verifiable parental consent, established through the QR code pairing process that requires the parent to initiate and approve the connection.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Regular security assessments
• Access controls and monitoring

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain different categories of data for different periods:

• Hourly background location history: retained for up to 30 days, then automatically deleted.
• Live-mode (10-second) location points: archived daily and retained alongside the hourly history for up to 30 days.
• Locally cached locations on the child's device (used when the device is offline): automatically purged after 7 days once they have been synced to ARVO's backend.
• Call and SMS metadata, contact lists, screen-time data, and notification metadata: retained while the parent–child link is active and deleted within 30 days of account deletion.
• Account information: retained while your account is active. If you delete your account, all associated data is deleted or anonymised within 30 days, unless retention is required by law.

You or your linked parent can request earlier deletion at any time by contacting support@arvomobile.co.uk.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Data portability: Request a copy of your data in a portable format.
• Withdraw consent: Withdraw consent for data processing at any time.

To exercise any of these rights, please contact us at support@arvomobile.co.uk.

9. Third-Party Services

The App integrates with the following third-party services:

• Google Sign-In: Used for parent and child sign-in. Subject to Google's Privacy Policy.
• Apple Sign-In: Used for parent and child sign-in on iOS. Subject to Apple's Privacy Policy.
• Firebase Cloud Messaging (Google): Used to deliver push notifications between linked parent and child devices, including parent-triggered live-location requests and SOS alerts. Subject to Google's Privacy Policy.
• OpenStreetMap / Nominatim: Used to convert GPS coordinates into human-readable addresses (reverse geocoding). When the App turns a location point into an address, the latitude and longitude are sent to nominatim.openstreetmap.org. Subject to the OpenStreetMap Foundation Privacy Policy.

We encourage you to review the privacy policies of these third-party services.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the App and updating the "Last Updated" date. Your continued use of the App after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

ARVO Mobile Ltd
Email: support@arvomobile.co.uk