HappyJackPrivacy Policy
Hosting and processors: a self-hosted VPS, FCM (push notifications), and an SMTP provider (email sign-in codes). [TODO(owner/legal): hosting jurisdiction and approved processor list]
1. What the service does
HappyJack helps adult family members view member locations, receive safety events, and communicate. An adult creates the child profile and links the device. Location sharing is not hidden: the child can see the tracking state.
2. Data we process
We process email and sign-in codes; name, avatar, language and time zone; family roles, members and devices; precise location and its time, accuracy, speed, heading, altitude, activity, battery and tracking state; safe zones, routes, stops, events, SOS and notifications; chat messages and media; usage, battery, connectivity, audit and session records; and data needed by FCM push and the SMTP email-code provider.
“Listen around” is open and visible only: the child device shows a notification and visible indicator. Audio is relayed only during the session and is not recorded or stored; only the session fact is retained for audit. A loud signal is a command to the device, not covert recording.
3. Purpose and access
We use data for sign-in, family maps, location, history, zones, events, SOS, chat, safety support, and service operation. Family data is available only to authorized members of that family according to role. We do not sell data or use it for advertising, and we do not use advertising SDKs.
[TODO(legal): approve lawful bases, adult-consent text, and child requirements in each target country]
4. Retention
Locations and stops are kept for 90 days; chat media for 90 days; events and chat for one year; app usage for 90 days; battery and connectivity logs for 30 days; audio-session records for one year, while no audio is stored. Backups are kept for 35 days. After an account-deletion request, access is revoked immediately and complete erasure is performed after 30 days; backups are overwritten on schedule.
[TODO(owner): verify these periods against the deployed implementation] [TODO(legal): review lawful-retention exceptions]
5. Sharing and security
Transport uses TLS. Data and backups are encrypted at rest. FCM and the SMTP provider process only data needed for their functions. [TODO(owner/legal): add the approved processor list, countries, and agreements]
6. Rights and account deletion
Users may request access, correction, export, or deletion. Deletion starts from the in-app account-deletion function; Google Play also requires a web form. Access is revoked immediately and complete erasure finishes after 30 days.
Deletion web form: [TODO(owner): add the real web-form URL and instructions] [TODO(legal): approve identity verification and exceptions]
7. Children and consent
Adults are the primary users. An adult creates a child account/profile; parental-consent requirements, COPPA, GDPR-K, and local law apply. [TODO(legal): define age thresholds and verified-consent mechanisms for target countries]
8. Changes and contact
[TODO(owner/legal): add the change-notice procedure, legal entity, address, effective date, and approved contact]