Important: FortiSPY is a parental-supervision service. A parent or legal guardian must have legal authority to supervise each enrolled child and device and must provide any notice or consent required by local law.
1. Who controls the information
FortiSPY is the service operator and data controller for account, billing, service, and support information. The parent or guardian chooses which child devices to connect and which supervision features to enable. Privacy questions may be sent to privacy@fortispy.com.
2. Information we collect
- Parent account: name, email address, password hash, verification status, Google account identifier and profile image when Google sign-in is used.
- Family and child-device details: family name, child display name, device name/model/platform, device identifiers created by FortiSPY, pairing codes/tokens, connection status, and settings.
- Supervision data: app inventory and usage, timestamps and duration, web-filter events and domains, safe-search/filter status, location and accuracy when enabled, tamper alerts, and activity reports. Desktop features may also process active application/window titles, visited URLs, attendance events, or screenshots when explicitly enabled.
- Billing: plan, subscription state, provider reference, amount, currency, and payment status. Payment providers process payment credentials; FortiSPY does not store full card or Mobile Money credentials.
- Technical and support data: IP address, logs, error/security events, browser/device details, messages, and information you provide to support.
3. How and why we use information
We use information to create and secure accounts; pair authorized devices; display activity and location to the parent; apply safety settings; detect tampering and abuse; manage plans and payments; provide support; maintain, troubleshoot, and improve the service; and comply with law. Depending on location, our legal bases may include contract, legitimate interests in operating and securing the service, consent for optional sensitive features, and legal obligations.
4. Children’s information
Children do not create parent accounts or purchase subscriptions. Their information is processed only to provide supervision selected by an authorized parent or guardian. We do not sell children’s personal information, use it for behavioral advertising, or permit public child profiles. Parents should explain age-appropriately what is monitored. If a child’s information was connected without proper authority, contact us immediately.
5. When information is shared
We share only what is necessary with vetted service providers for hosting, email delivery, authentication (including Google), payment processing, diagnostics, and map delivery. Location maps may use OpenFreeMap/OpenStreetMap infrastructure, which may receive ordinary network data such as an IP address when tiles load. We may disclose information when legally required, to protect a child or person from harm, to investigate abuse/security incidents, or during a business reorganization subject to appropriate safeguards. We do not sell personal information.
6. Retention and deletion
We retain account and supervision data while the account is active and as reasonably necessary to provide and secure the service. After an account-deletion request is verified, we delete or de-identify the account and associated family data unless limited records must be retained for fraud prevention, security, payment, tax, dispute, or other legal obligations. Residual encrypted backups are removed through normal backup rotation. See Account & Data Deletion.
7. Security
We use access controls, role-based administration, password hashing, token protection, transport encryption in production, monitoring, and data minimization. No system is perfectly secure. Report suspected compromise to security@fortispy.com.
8. Your choices and rights
You may access and correct account information, disable optional monitoring permissions on a device, unlink a device, cancel a subscription, request a copy of information, object to or restrict certain processing where applicable, and request account deletion. We may verify identity and authority before fulfilling a request.
9. International processing and changes
Service providers may process information in countries with different laws. We use appropriate contractual and technical safeguards where required. Material changes will be posted here with a new effective date and, when appropriate, communicated in the service.
10. Contact
Email privacy@fortispy.com for privacy requests or support@fortispy.com for product help.
← All policies
FortiSPY