Privacy Policy
Apps “Semya i Ya” (Family and I): md.familyapp.parent and
md.familyapp.child.
Version of 15 сентября 2026. Effective from 15 сентября 2026.
In short. We collect only the data parental control cannot work without: the child's location, device status and app list. We do not sell data, show ads, or share information with third parties for marketing. Ambient sound is streamed live to the parent and is never recorded.
1. Who processes the data
Data controller — Семья и Я, developer of the “Semya i Ya” apps.
Privacy and data deletion contact:
support@myfamely.md.
Website: myfamely.md.
2. How the service works
The service consists of two apps. The parent app is installed on an adult's phone; the child app is installed and configured on the child's phone by that parent. A child device is linked to a family with a one-time code issued in the parent app — without this code no child data is shared with anyone.
The child app is a companion app and is not intended for independent use by children without the parent's knowledge. The parent must inform the child that parental control software is installed and obtain any consent required by the law of their country.
3. Data we collect
3.1. From the parent
- Phone number — the only account identifier; used to deliver a one-time sign-in code (via Telegram bot or SMS).
- Name — only if provided; used for display inside the app.
- Push token (FCM) — to deliver geofence, SOS and connectivity alerts.
- Subscription records — payment fact, date and validity period. We never receive or store card details; payment is processed by the bank.
3.2. From the child device
- Location — coordinates, accuracy, timestamp, sent at the interval set by the parent (typically 30 seconds; 3 seconds in real-time mode). This is the core function of the app.
- Battery level and connectivity status — so the parent understands why a marker is not updating.
- Installed apps and their usage statistics — to configure blocking and show screen time.
- Device model and Android version — diagnostics and compatibility.
- Push token (FCM) — to deliver commands (refresh location, ring, apply restrictions).
- SOS alerts — coordinates at the moment the button is pressed.
3.3. Ambient sound (microphone)
A parent may listen to the surroundings of the child's phone. Audio is streamed live only, while the parent keeps the screen open. It is not stored on the server or in the apps, no recording is made and no files are created. The feature is time-limited (3 minutes per hour by default). During listening the child's phone runs a visible foreground-service notification and Android shows its microphone indicator.
3.4. Technical logs
The server keeps an event log: sign-ins, parent commands, errors. The log may include the request IP address, used to prevent abuse and investigate failures.
3.5. What we never do
- We do not read messages, SMS, calls or screen contents.
- We do not take screenshots or camera photos.
- We include no advertising networks and no behavioural analytics SDKs (no Firebase Analytics, no Crashlytics, no ad SDKs).
- We do not sell data or share it with data brokers.
- We do not use data for profiling or targeted advertising.
4. Why sensitive permissions are required
| Permission | Purpose |
|---|---|
| Location, including background (ACCESS_BACKGROUND_LOCATION) | Core purpose: the parent must see the child's location while the app is closed. Without background access the map would update only when the app is open. |
| Microphone (RECORD_AUDIO) | Listening to the surroundings on the parent's explicit command. No recording is made. |
| Installed app list and usage statistics | App blocking and screen-time reporting. |
| Display over other apps, Accessibility service | Lock screen for an app the parent has blocked. The service detects which app is in the foreground and does not read screen content. |
| Autostart, background execution, battery optimisation exemption | To prevent the system from killing the app and losing contact with the parent. |
| Notifications | SOS, geofences, connectivity status. |
5. Who data is shared with
We do not sell data. It is shared only with parties the service cannot run without:
- Google (Firebase Cloud Messaging) — delivery of push notifications and commands; Google receives the device push token and the service payload.
- Telegram — if the parent chooses to receive sign-in codes via the Telegram bot, the phone number is passed to Telegram as needed to deliver the message.
- Hosting provider — servers running the service.
- Acquiring bank — subscription payment processing.
- Public authorities — only upon a lawful and justified request.
6. Storage and retention
- Data is stored on servers in the Republic of Moldova.
- Location history is deleted automatically after 3 days. This is a hard maximum: the server does not keep coordinates any longer and the period cannot be extended.
- Account, children, geofences, blocking rules — while the account exists.
- Event log — limited period, for troubleshooting.
- Audio — never stored.
- Backups — encrypted, kept for a limited time and rotated out.
7. Security
- All traffic between apps and the server uses HTTPS/TLS.
- Traffic between the public gateway and the application server runs through an encrypted tunnel.
- Only the parent who linked the device can access that child's data; every request is verified against an access token.
- Backups are encrypted.
8. Children's data
The service is intended for adults: the account is created by a parent or legal guardian, who alone controls the child's data. Children's data is used exclusively for parental control functions, is never shared with advertising networks and is not used for profiling. A parent may delete a child at any time in the app — that child's data, including location history, is removed from the server, and the child's phone is unlinked from the family.
9. Your rights
- Access — request the list of data we hold about you and your children.
- Rectification — change your name, phone number or a child's details.
- Erasure — delete an individual child or the entire account (see data deletion).
- Withdraw permissions — at any time in Android settings; some features will then stop working.
- Complaint — to the data protection authority of your country.
Requests: support@myfamely.md, answered within 30 days.
10. Changes to this policy
For material changes we update this page and its version date, and notify users in the app where appropriate. Continued use after the changes take effect means acceptance of the new version.
11. Contact
Семья и Я
Email: support@myfamely.md
Website: myfamely.md