Privacy Policy
Last updated: 13 September 2026
HagStone is a child-safety application published by Indrevo (ABN 21 979 134 918), based in New South Wales, Australia (“we”, “us”, “our”). This policy explains what we collect, how we handle it, and your rights. Questions: admin@hagstone.site.
HagStone is installed by a parent or legal guardian on a child’s device, with the child’s knowledge. The guardian holds the account. The child is the subject of the information HagStone processes but is not the account holder.
What we collect
| Category | Where processed | How stored |
|---|---|---|
| Account (guardian email, credentials) | Cloud (Firebase Auth) | Standard secure storage |
| Child profile (first name, age bracket) | On device | First name encrypted; age bracket plain |
| Message content (SMS, social/chat text) | On device | Encrypted |
| Contacts (names, numbers, usernames) | On device | Encrypted |
| Call analysis (derived transcript, number, counts) | On device (offline) | Transcript & number encrypted; no audio retained |
| Location (coordinates, safe zones) | On device | Coordinates encrypted |
| Alerts (severity, score, timestamps) | On device | Metadata plain; content encrypted |
| Billing (subscription status) | Payment provider | Held by the provider |
Your rights (Australia)
We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We collect only what the detection needs (APP 3); we do not use it for a secondary purpose except the two consented disclosures below or where required by law (APP 6); our servers are hosted in Australia (Sydney) (APP 8). You may request access to, or correction of, your personal information at admin@hagstone.site (APP 12/13). If we don’t resolve a complaint, you may contact the Office of the Australian Information Commissioner.
If you are in the EU/UK, US, or elsewhere, additional local rights may apply (GDPR / UK GDPR / US state privacy laws); contact us to exercise them.
Security
- Client-side encryption. A single AES-256 family key is generated on your device and wrapped with a key derived from a 12-word recovery phrase. Only the wrapped form is stored in our cloud. We never receive the phrase or the unwrapped key.
- No key escrow. If you lose your recovery phrase and have no device with the key cached, your evidence is permanently unreadable — we cannot recover it. We say this at setup, because the alternative would be a back door.
- All network traffic uses TLS; data is hosted in Australia; we run no analytics or engagement tracking in the app.
The two disclosures
AI second opinion (optional). If you enable it, already-flagged text is decrypted and stripped of personal identifiers on your device, then sent to an AI provider for a second opinion. We do not log or store it.
Law-enforcement reports. If you choose to lodge a report, the evidence package is assembled on your device and transmitted to the relevant authority (e.g. NCMEC and/or a national agency such as the AFP). We decrypt nothing in this process.
Children
HagStone processes information about a child at the direction of that child’s parent or legal guardian, who provides verifiable consent and may review or delete that information at any time. We design to the Online Safety Act 2021 (Cth), the US Children’s Online Privacy Protection Act (COPPA), and the UK Age Appropriate Design Code. HagStone shows an age-appropriate notice to the child on the monitored device; it is not covert.
Retention & deletion
Evidence is retained until you delete it. When you delete your account we remove your data as described in-app; deleting the wrapped key renders any residual copy unreadable. Where a law-enforcement report has been lodged, we retain a content-free record of that lodgement (identifiers and hashes only) as required for evidence integrity.
Changes & contact
We’ll post changes here and, for material changes, notify you in the app. Contact us any time at admin@hagstone.site.