Privacy Policy - Mehudar

Last updated: 2026-06-25

"Mehudar" is a device management and content-filtering service (the "Service"), consisting of an Android application installed on the device and a management server. This policy explains what we collect, why, and how we protect it.

Data we collect

• Customer details: name, phone, email, parent/guardian phone, and region, as provided at registration.
• Device information: model, OS version, app version, management level (Device Owner / Device Admin / none), and filtering status.
• Installed-app list (package name, label, version, icon) to manage the allowlist and filtering.
• Push token (Google FCM) to deliver policy updates and notifications.
• Security and diagnostic events: bypass attempts, filtering-off, and install failures, including limited technical context, for enforcement and support.
• Billing: payment records and subscription status. We do not store card numbers - they are processed and stored by our payment provider (uPay).

Accessibility Service disclosure

The app uses Android's AccessibilityService solely to detect which app is in the foreground and to enforce filtering and anti-bypass. Screen content is processed on-device; we do not collect or transmit your general screen content. Only a detected security event may include limited technical context for support.

How we use data

• Operate filtering, the app allowlist, and device policy.
• Enforce device compliance and detect/prevent bypass.
• Provide support, diagnose issues, and deliver app/policy updates.
• Manage subscription and billing.

Sharing

We do not sell personal data. We share data only with service providers needed to run the Service: Google Firebase (push), uPay (payments), and our hosting providers, all processing on our behalf.

Retention and your rights

We retain data while the account is active and as required by law (financial records are kept per legal requirements). You may request export or deletion of customer data; on deletion we anonymize identifying details and retain financial records as required. Contact [email protected].

Children

The Service is administered by an adult (customer, parent/guardian, or community) who owns the device. We do not independently collect data from minors beyond the operational device information above.

Security

Access is secured with device tokens and per-account isolation. Data is transmitted over encrypted transport (HTTPS).

Contact

Privacy questions: [email protected].