Privacy policy

Applies to the Pixelproofed app for iPhone and Android, the web player at app.pixelproofkids.com and the Pixelproofed Chrome extension. Last updated 4 October 2026.

Short version: your family’s information stays on your devices. Our server sees which public YouTube videos get checked, never who asked. Messages between your phone and your child’s device are end-to-end encrypted; we can’t read them.

Who we are

Pixelproofed is made by Pixelproof Kids, operated by Sandhu Technologies LLC, 15305 Dallas Parkway, Suite 1200, Addison, TX 75001, USA. Contact us through pixelproofkids.com.

Who the app is for

The Pixelproofed app is for parents and guardians. Children don’t have accounts. We don’t ask for a child’s birthday, photo, email or location, and we don’t knowingly collect personal information from children.

Stays on your phone

• Your children’s names or nicknames and age bands
• Their values settings, and your parent PIN (stored only in scrambled form)
• What they watched, what they asked for, and when
• Your approvals, denials, cuts and corrections

On your phone this is stored encrypted, with the key kept in the phone’s secure storage (Keychain on iPhone, Keystore on Android).

Stays on your child’s device

• A copy of the settings above (the PIN only in scrambled form), so it can decide what to play
• Which videos you approved, with their edits

Goes to our server

• Public YouTube video IDs to check. The check result is stored against the video and shared by every family. We don’t record which family asked.
• Encrypted messages between your phone and your child’s device (requests, decisions, settings). They’re locked with a key only your two devices have. We see that a message was sent and when. Undelivered messages are deleted after 14 days; delivered ones straight away.
• Your invite, as an unreadable code. It lets your devices use the service.
• A notification address for your phone, if you turn notifications on. Notifications carry no content: they say only that something is waiting. Your phone fetches and unlocks the message itself.
• Corrections, only if you turn sharing on: the video ID, the moment and the category. Nothing about you.
• Your email, only if you join the waitlist on our website.

We don’t use advertising, analytics or tracking SDKs in the app, we don’t sell or share personal information, and we don’t build profiles.

Who else is involved

• YouTube plays the videos, as it normally would. Your child doesn’t need to be signed in. YouTube’s own privacy policy applies to playback.
• Google Gemini is sent the public video’s address to check it. No family information is sent.
• Vercel (hosting) and Supabase (database) run our server.
• Expo, Apple Push Notification service and Firebase Cloud Messaging deliver notifications to your phone. They receive your phone’s notification address and a mailbox number, never message content.

Camera and Face ID

The camera is used only to read the pairing code on your child’s device; nothing is recorded or uploaded. Face ID or fingerprint, if you turn the lock on, is checked by your phone; we never receive biometric data.

Your choices and deleting your data

• Turn notifications and correction sharing on or off at any time in the app, under Privacy.
• Clear history on your phone under Privacy → Clear history.
• Delete everything on your phone under Privacy → Leave the pilot and erase this phone’s data. Uninstalling the app also removes it.
• To have your invite and any undelivered messages removed from our server, contact us through pixelproofkids.com. We’ll confirm when it’s done.

Security

Messages between your devices use end-to-end encryption (ECDH P-256 key agreement, AES-256-GCM). Data in transit to our server uses HTTPS. No system is perfectly secure, but we designed this one so that a breach of our server would not expose your family’s information.

Changes

If we change this policy we’ll update the date above, and tell you in the app if the change matters to what leaves your phone.

Pixelproofed is a test tool in a private pilot. It catches most things and shows you what it checked. It will miss some.