ViewHaven Privacy Policy

ViewHaven ("ViewHaven", "the app", "we", "us", or "our") is provided by Conda Technology ("the Company"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. ViewHaven is a parental-control app that lets a parent or guardian choose the YouTube channels their children may watch, and gives children a safe, curated viewing experience.

ViewHaven is intended to be set up and controlled by a parent or guardian. Children do not create accounts and cannot change any settings.

Contact: For any privacy question or request, email info@condatechnology.co.za.

1. Summary

• The app is configured by a parent. Children do not have accounts and do not provide personal information to us directly.
• An optional adult account (email + password) lets a parent back up and restore their family setup across devices. You can use the app without one.
• We use the YouTube API Services to fetch channel and video information.
• We do not sell your or your children's personal information, and we do not use it for behavioural advertising. ViewHaven does not show ads.
• You can delete your account and its backed-up data at any time from within the app or by contacting us.

2. Information we collect

a) Adult account (optional)

If a parent chooses to create an account, we collect and store:

• Email address and an encrypted password (handled by our authentication provider; we never store plain-text passwords).
• A family recovery key that lets any device you sign in on restore your family setup.

If you do not create an account, none of the above is collected and the app runs using only on-device storage.

b) Family and child-profile data (created by the parent)

When a parent sets up profiles and controls, we process:

• Child profile details you enter - a display name or nickname, an avatar (emoji or an image you choose), an age group, and per-profile settings such as approved channels, daily time limits, allowed-hours schedules, blocked keywords/videos, and an optional profile passcode.
• Approved channels and blocked keywords for the family.
• A parental passcode (PIN or password), stored only as a one-way cryptographic hash on the device.

This information is provided and controlled by the parent. We do not ask children to provide any personal information.

c) Viewing activity (for Family Sync and parental reporting)

If Family Sync is enabled (used to let a parent device monitor and control child devices), the app shares, through our sync service, a limited record of activity so the parent can see it:

• What is playing / was recently watched - video id, video title, channel name, thumbnail, the seconds watched, a timestamp, the device name, and the associated profile name.
• Daily screen-time totals per profile, per device.

If Family Sync is not enabled, this activity stays only on the local device.

d) Device and pairing information

• A device name you set, used to identify devices in Family Sync.
• Camera access is used only to scan a QR code when pairing a child device to a parent device. Camera images are processed on-device to read the code and are not stored or transmitted.
• Basic approximate region/country, derived from your network, used only to hide videos that are not available in your region. We do not store precise location.

e) Technical information

• The app communicates with our proxy server to fetch content and (if enabled) sync family data. Standard technical data such as IP address and request metadata may be processed transiently to operate and secure the service.

We do not collect contacts, precise GPS location, advertising identifiers, or biometric data.

3. How we use information

We use the information above to:

• Provide the core service - fetch approved channel/video information and play it;
• Apply the parental controls you set (approved channels, time limits, schedules, keyword/video blocks, profile passcodes);
• Provide Family Sync - let a parent device monitor "watching now", recent watch history, and screen time, and remotely lock or adjust child devices;
• Let a signed-in parent back up and restore their family setup across devices;
• Maintain the security, integrity, and reliability of the service (including rate-limiting and abuse prevention);
• Respond to your support and privacy requests.

We do not use personal information for advertising or profiling, and we do not sell it.

4. YouTube API Services

ViewHaven uses YouTube API Services to retrieve channel and video information (such as titles, thumbnails, and playlists) for the channels a parent approves.

• By using ViewHaven, you are also agreeing to the YouTube Terms of Service.
• Google's handling of data is described in the Google Privacy Policy.
• Video playback occurs through YouTube's embedded player. When a video is played, YouTube may collect data as described in Google's Privacy Policy.
• We access YouTube API Services through our own server, which holds the API key; the app does not send your identity to Google through this integration.

You can manage or review Google's use of data via the Google security settings page.

5. Children's privacy

ViewHaven is designed to be operated by a parent or guardian on behalf of their children, consistent with children's-privacy laws such as the U.S. Children's Online Privacy Protection Act (COPPA), the EU/UK GDPR (including provisions for children), and South Africa's POPIA.

• Children do not create accounts and are not asked to provide personal information to us.
• The only child-related data we process is what a parent enters or enables (nickname, avatar, age group, viewing preferences) and the viewing activity the parent chooses to sync so they can supervise it.
• We do not show behavioural advertising to children, do not build advertising profiles, and do not sell children's data.
• The parent controls this data and can view, change, or delete it at any time in the app, or by contacting us.

If you believe a child has provided us personal information without a parent's involvement, contact us and we will delete it.

6. How information is shared

We share information only with service providers who help us run ViewHaven, and only as needed to provide the service:

• Authentication & account backup provider (Supabase): stores the adult account (email, encrypted password) and the encrypted family recovery record.
• Hosting / sync provider (Railway): runs our proxy and Family Sync service, which stores family configuration and recent activity so paired devices stay in sync.
• Google / YouTube: we request channel and video data via YouTube API Services, and playback occurs via YouTube's embedded player (see Section 4).

We do not sell personal information and do not share it with advertisers. We may disclose information if required by law, or to protect the rights, safety, or security of our users or the service.

7. Data retention

• Adult account data is retained until you delete your account.
• Family configuration (profiles, channels, settings) is retained while your family is active, so paired devices stay in sync.
• Recent activity (watching-now and watch-history feed) is kept as a rolling, limited window of recent events and is overwritten over time.
• On-device data remains on the device until you clear it, sign out, delete a profile, or uninstall the app.

When you delete your account, the account and the family backup associated with it are removed. Data held only on a device is removed when you uninstall or clear the app's data.

8. Data storage and security

• On-device data is stored in the device's app storage; the parental passcode is stored only as a one-way hash in the device's secure storage.
• Data in transit is protected using industry-standard encryption (HTTPS/TLS).
• Access to family sync data requires family credentials held by paired devices.

No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

9. International transfers

ViewHaven and its service providers may process and store data on servers located outside your country of residence. Where we transfer data internationally, we rely on appropriate safeguards as required by applicable law.

10. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal information, and to withdraw consent. To exercise these rights:

• In the app: manage or delete child profiles, and use Account → Delete account to permanently delete your adult account and its cloud backup.
• By email: contact info@condatechnology.co.za and we will respond within a reasonable time.

You can also disable Family Sync to keep all activity on the local device.

11. Payments and subscriptions

ViewHaven may offer an optional paid subscription ("ViewHaven Plus") that unlocks premium parental features. Watching approved content does not require a paid subscription.

• Billing is handled by the app store - the Google Play Store on Android and the Apple App Store on iOS - under their respective terms. Any free trial and the subscription price and renewal terms are shown to you before you purchase.
• We do not collect or store your payment card or bank details. Those are handled entirely by the app store's payment system.
• We receive limited transaction information from the store - such as a purchase token and your subscription status - which we use only to unlock premium features for your account and to prevent abuse.
• Purchases are placed behind a parental gate (the parent passcode), so a child cannot start a purchase.
• You can view, manage, or cancel your subscription at any time in your Google Play or Apple App Store account. Refunds are handled according to the applicable app store's policy.

Cancelling a subscription does not delete your account or data; to delete those, see Section 10.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Continued use of ViewHaven after an update means you accept the revised policy.

13. Contact us

Conda Technology
Email: info@condatechnology.co.za

See also our Account & Data Deletion page.