Privacy Policy

1. Who we are and what this policy covers

mspy.live ("mspy.live", "we", "us") is operated by Altercorn Group s.r.o., a company registered in the Czech Republic with its registered office at Londynska 730/59, Vinohrady, 120 00 Praha, Czech Republic. This Privacy Policy explains how we handle personal information when you visit our website, create an account, or use the mspy.live Parent App or the mspy.live Family Member App (together, the "Service").

mspy.live is a transparent, consent-based family-safety service. It is not a hidden or secret monitoring tool, and this policy is written to reflect that. We process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the rules made under it, the Information Technology Act, 2000, and other applicable Indian law. If you use the Service from outside India, the additional information in section 12 applies.

2. Definitions

• Circle Admin — the adult who creates a Family Circle in the Parent App and manages its members, safe zones and subscription.
• Family Member — a person who has joined a Family Circle through the Family Member App, either a child whose parent or guardian has consented, or an adult who has accepted the invitation themselves.
• Family Circle — a private group of members who have agreed to share safety information with each other through mspy.live.
• Personal data — any information that relates to an identifiable person, including location data.
• Safe zone — a place (such as home, school or tuition) and a radius around it that a Circle Admin sets up to receive arrival and departure alerts.
• Processing — anything we do with personal data, such as collecting, storing, using, sharing or deleting it.

3. The two apps and who is who

mspy.live has two apps. The Parent App is used by the Circle Admin and other adults in the circle to see the family map, safety status, safe-zone alerts, battery levels and the activity timeline. The Family Member App runs on the phone of the person who is sharing their location. It shows that person, at all times, whether sharing is on, with whom they are sharing, and gives them check-in, SOS and privacy controls.

For a child under 18, the parent or lawful guardian who sets up the child's membership is the person who provides consent for the child's data to be processed, as Indian law requires. For an adult member, consent is given by that adult on their own phone.

4. Information we collect

4.1 Information you give us

• Account details: your name, email address, mobile number and a password (which we store only in hashed form).
• Family Circle details: the names or nicknames, relationship labels and avatars you give to members of your circle.
• Safe zones: the place name, map coordinates and radius of each safe zone you create.
• Payment information: payments are handled by our payment partner. We receive and keep only a transaction reference, the plan purchased, the amount, and, for card payments, the card network and last four digits. We never see or store full card numbers, CVV or UPI PINs.
• Support and feedback: anything you send us when you contact support, request early access or answer a survey.

4.2 Information shared from a Family Member's phone, with consent

• Live location: the device's current position from GPS, Wi-Fi and mobile networks, updated periodically while sharing is on.
• Location history: recent positions and safe-zone arrivals and departures, used to build the activity timeline for the number of days your plan allows.
• Battery and connectivity: battery level, charging state and whether the device is online, so the circle can be told about a low battery or a phone that has gone offline.
• Check-ins and SOS: the time and location of each check-in or SOS the member sends.
• Device information: device model, operating system version, app version, language and a push-notification token.

4.3 Information collected automatically

• App diagnostics: crash reports and performance data that help us keep the apps reliable.
• Website usage: pages visited, approximate region derived from your IP address, browser type and referring page, collected through cookies and similar technologies as described in our Cookie Policy.

5. What we never collect

mspy.live is built for safety, not surveillance. The apps do not read, record or transmit:

• messages, chats, emails or social-media activity;
• call logs or call audio;
• contacts, photos, videos or files stored on the phone;
• browsing history or the apps a person uses;
• keystrokes, screenshots, microphone or camera input.

The Family Member App has no hidden mode. It cannot be disguised, and the sharing indicator cannot be switched off while location sharing is active.

6. Consent and transparency

• Nothing is shared until the member agrees. Pairing a phone with a Family Circle requires the invitation to be accepted on that phone, after a clear notice of what will be shared and with whom.
• Sharing is always visible. Whenever location sharing is on, the Family Member App shows a persistent "Location sharing is ON" status and lists who can see the member.
• Consent can be withdrawn. A member can pause sharing, set quiet hours or stop sharing entirely from the Privacy screen at any time, without needing anyone's approval. The Parent App then shows "Sharing paused" or "Not sharing" instead of a location.
• Children. For a member under 18, the parent or guardian provides consent and is responsible for explaining the app to the child. We design the child's experience so the child can always see that sharing is on.

7. Why we use information

We use personal data only for the purposes you would expect from a family-safety service:

• To provide the Service — showing the family map, sending safe-zone, battery, check-in and SOS notifications, and building the activity timeline (performed on the basis of the consent given when a member joins a circle).
• To run your account and subscription — creating your account, taking payment, sending receipts and renewal reminders, and providing support.
• To keep the Service safe and reliable — detecting fraud, abuse and misuse, fixing bugs, and protecting the security of our systems.
• To meet legal obligations — keeping records required by tax and company law and responding to lawful requests from authorities.
• To improve mspy.live — using aggregated or de-identified statistics (for example, how often safe-zone alerts are used) that cannot identify any individual.
• To send product updates and offers — only if you have opted in, and you can opt out at any time.

We do not use location data or children's data for advertising, profiling or any purpose other than providing the Service and keeping it safe.

8. How we share information

• Within your Family Circle. A member's location, status, battery level, check-ins and SOS alerts are shown to the other members of the circle according to the sharing settings the member has chosen.
• Service providers. We use carefully selected providers to host our systems, deliver push notifications, SMS and email, render maps, process payments and analyse app performance. They may process personal data only on our instructions and under written contracts that require appropriate security.
• Legal requirements. We may disclose personal data when required by law, by a court order or by a lawful request from a government authority, or where necessary to protect the life or safety of a person.
• Business transfers. If mspy.live is involved in a merger, acquisition or sale of assets, personal data may be transferred to the new operator, who will remain bound by this policy.

We never sell personal data, and we do not share it with advertisers or data brokers.

9. Where data is stored and international transfers

Personal data is stored on secure cloud infrastructure located in [DATA CENTRE REGION]. Some of our service providers may process limited data in other countries; where that happens, we transfer data only to countries permitted under Indian law and under contracts that require the same level of protection described in this policy.

10. Security

• All data moving between the apps, our servers and the website is encrypted in transit using TLS.
• Location history, safe zones and account data are encrypted at rest.
• Access to personal data inside mspy.live is limited to staff who need it to run the Service, is protected by multi-factor authentication, and is logged.
• We test our systems regularly and fix vulnerabilities promptly.

No system is completely secure. If a personal data breach occurs that affects you, we will notify you and the Data Protection Board of India as required by law, and tell you what you can do to protect yourself.

11. How long we keep data

• Live location: only the latest position is kept while sharing is on; it is replaced as new positions arrive.
• Location history and safe-zone events: kept for the number of days shown on your plan's activity timeline, then deleted automatically.
• Check-ins and SOS events: kept for the same period as your activity timeline.
• Account and circle details: kept while your account is active and deleted within 30 days of account deletion.
• Billing records: kept for as long as Indian tax and accounting law requires, in a form that no longer includes location data.
• Support conversations: kept for up to 2 years so we can help with follow-up questions.

When a member leaves a circle or stops sharing, their location history is deleted from the circle within 30 days. Data may be kept for longer only where required by law or needed for an ongoing legal matter.

12. Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access a summary of the personal data we hold about you and how it is used and shared;
• Correct or update inaccurate or incomplete data;
• Erase your personal data when it is no longer needed for the purpose it was collected for, or when you withdraw consent;
• Withdraw consent at any time, as easily as you gave it;
• Nominate another person to exercise these rights on your behalf if you are unable to do so;
• Raise a grievance with our Grievance Officer and, if unresolved, with the Data Protection Board of India.

You can exercise most of these rights directly in the app (Account → Privacy). For anything else, write to [PRIVACY EMAIL]. We respond within 30 days and may ask you to verify your identity first.

If you use mspy.live from outside India, you may have additional rights under your local law, such as the rights to data portability and to object to processing. We honour those rights where they apply.

13. Family members' rights

Every Family Member, including a teenager, can at any time and without asking anyone:

• see exactly who can view their location and status;
• pause sharing for a set time, set quiet hours, or stop sharing completely;
• see which safe zones exist and when an alert about them was sent;
• leave a Family Circle, which also deletes their location history from it;
• ask us to delete the data we hold about them.

14. Children's privacy

mspy.live is designed to be used by families, and children under 18 may use the Family Member App only when a parent or lawful guardian has created their membership and consented on their behalf. We process a child's data solely to provide safety features to the child's family circle. We do not show advertising to children, do not track children across other apps or websites, and do not use children's data for profiling. If you believe we have collected data about a child without appropriate consent, contact us and we will delete it promptly.

15. Cookies and website analytics

Our website uses cookies and similar technologies to keep it working, remember your preferences and understand how visitors use it. You can read what we use and how to control it in our Cookie Policy.

16. Changes to this policy

We may update this policy as the Service or the law changes. We will post the updated version here with a new effective date, and for significant changes we will tell you in the app or by email before they take effect. Continuing to use the Service after a change means you accept the updated policy.

17. Grievance officer and contact

If you have a question, concern or complaint about privacy, contact our Grievance Officer, appointed under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023:

• Name: [GRIEVANCE OFFICER NAME]
• Email: [PRIVACY EMAIL]
• Postal address: Altercorn Group s.r.o., Londynska 730/59, Vinohrady, 120 00 Praha, Czech Republic

We acknowledge grievances within 72 hours and aim to resolve them within 30 days.

18. Governing law

This policy is governed by the laws of India. Any dispute relating to it is subject to the exclusive jurisdiction of the courts at [CITY], India, without prejudice to your right to approach the Data Protection Board of India.