Data Protection

How we meet our obligations under UK GDPR and the Data Protection Act 2018.

Lawful basis & transparency

We process personal data only on clear lawful bases — contract performance for your subscription, consent for optional features, and legitimate interest for security and fraud prevention. We tell you what we collect and why before we collect it.

Data minimization & purpose limitation

We collect only what a feature needs, use it only for the purpose we stated, and never sell your data. Parental monitoring is consent-based with visible indicators on the child device — no covert surveillance, ever.

Security of processing

Data is encrypted in transit and at rest. Device identifiers you store in the Recovery Vault are end-to-end encrypted in your browser — we never hold the key. Access to production data is restricted, logged, and audited.

Retention & erasure

Telemetry and location history age out automatically per your retention settings. You can delete device records, exports, or your entire account at any time; deletion is permanent.

Your rights

You have the right to access, rectify, export, restrict, object to, and erase your personal data, and to withdraw consent at any time. To exercise any right, use our contact page. You may also complain to the ICO (ico.org.uk).

Data controller

CloakGuardian is a trading name of New Age Bridge Ltd (Company No. 16701376), 18 Elizabeth Fry Place, SE18 4LA, United Kingdom.