Technical security

Roles, sessions and acknowledgements. No hidden monitoring.

Guardian separates parent accounts, child invitations and operator administration. Access tokens expire quickly, session revocation takes effect immediately, and restrictions count as applied only after phone acknowledgement.

Argon2id and token rotation

Passwords are hashed. Refresh tokens rotate on every renewal and reuse is detected.

Separate roles

Parents, children, support and administrators do not share sessions. The child app joins only through a single-use invitation.

Device acknowledgement

Saving a rule in the cloud does not confirm enforcement. The portal shows queued, sent and phone-acknowledged states.

Data register

The same categories as in the privacy policy.

CategoryPurposeRetention
AccountLogowanie, role i identyfikacja rodziny2555 days
AuditPrivileged change and security audit trail2555 days
BillingPlan, invoices and payment history2555 days
Child profileChild's name, birth year and profile colour2555 days
DeviceSynchronisation, diagnostics, battery and connection status730 days
Support networkEmergency contacts and check-in history365 days
LocationFamily map, location zones, check-ins and SOS90 days
RulesVersions of rules, modes and device commands730 days
Screen timeRaporty czasu ekranowego i limity kategorii90 days
SupportTickets, website contact and account support1095 days
Environment

Current Guardian Cloud status.

PostgreSQL database

healthy

Redis cache

healthy

Real-time communication

healthy

AI engine

healthy · rules:deterministic-safety-v2

Android notifications

wymaga konfiguracji · operator details required

iOS notifications

wymaga konfiguracji · operator details required

Poczta e-mail (SMTP)

wymaga konfiguracji · operator details required

SMS verification

wymaga konfiguracji · operator details required

Billing

wymaga konfiguracji · operator details required