Privacy policy

Who we are

Aman Family is a parental control service from AMN: a parent app and a child app for Android phones, and a parent website. For anything about your data, write to support@amn.com.sa.

Nothing hidden

Aman is always visible on the child's phone, and the child can see the rules that apply to them.

Every feature that shares something from the child's phone with the parents starts on the child's own phone, after a notice that explains it. Parents cannot switch one on remotely. By default, stopping one from the child's phone needs the parent's code; parents can let the child stop it without the code.

One exception, stated plainly: with message checks, the child's phone shows neither the words the parents chose nor what matched, and no notification stays on while checking runs. The notice the child agrees to before it starts says so.

What we collect from parents

When you create the account: the family's name, your name, your email, your language, and a password stored in a form that cannot be read back.

If you sign in with Google, we keep that account's identifier at Google.

We keep a log of what parents do in the account, such as changing a rule or viewing sensitive data, for one year.

What we collect about your child and their phone

• The child's profile: their name, their birth year if you enter it, and a picture if you choose one.
• The phone: its model, Android version, Aman version, and when it last connected.
• The rules and schedules you set, your child's requests and your answers.
• Usage: total minutes each day and each app's share, plus the list of installed apps and their icons.
• Protection events: the kind of event, its category and its time, without the site's name. The exception is a site your child asks you to unblock.
• SOS alerts, with the phone's location when there is one.

What is collected only if it is turned on from your child's phone

• Location: the phone shares its location with the parents through a visible service, and the sharing notice stays on the whole time. Location and route history are deleted after seven days. Opening a map sends the coordinates to Google Maps.
• Websites visited: the site's name only, once a day per site, seen by the parents alone. Deleted after seven days, or after one or three days if you choose.
• Aman browser history: the addresses of pages opened in Aman's own browser, for seven days. Optional, and off to begin with.
• Notification sharing: the title and text of new notifications from the apps your child picks. These can include private message text and senders' names. Seven days.
• Message checks: text shown on the screen is read on the phone. Only a short excerpt is sent to the parents, when a word they chose matches. Text that doesn't match is neither saved nor sent. Seven days.
• Photo safety: a photo your child picks is sent to Aman's server and to Google Cloud Vision for an automated check. A blurred preview and the result are kept for seven days. The original is not kept.
• Call and SMS controls: when a call is blocked or a word matches in an SMS, the kind of event, a mostly hidden number and the matched words are sent. No call log and no message text is uploaded. Seven days.
• Live help: your child approves each session that shares the screen, camera or microphone, and sessions are not recorded. If they approve a snapshot or a short recording, it is kept for 24 hours.

Chat and calls

Each child's chat is seen by that child and their parents, not by siblings. Messages, photos and voice clips are stored on Aman's server for seven days. The chat is not end-to-end encrypted.

Calls are not recorded. We keep only the call's details, meaning who called and when, for seven days.

What we don't collect

We don't collect the call log, the text of SMS messages, what your child types or their passwords, or the content of pages and what they search for.

How long we keep it

• The activity record (protection events, answered requests, usage reports and SOS alerts): 90 days, which you can set anywhere from 7 to 365 days.
• The optional features above, chat, and call details: seven days. Saved captures: 24 hours.
• Family and child profiles, rules and the app list: until you delete them or delete the family.
• Ask Aman conversations inside the app: 30 days after the last message, 90 days if sent to support, and at most 180 days if tied to a bug report.
• Invoices stay after a family is deleted, because they are financial records. For two years we also keep an unreadable fingerprint of the phone's identifier and the card, so one phone can't repeat the free trial.

Who receives some of the data

• Google: its Firebase messaging service delivers alerts to phones, without names, locations or message text. Google Maps receives the coordinates when a map is opened. Google Cloud Vision receives the photos your child picks, if photo safety is on.
• Anthropic: receives, outside Saudi Arabia, the questions typed into Ask Aman, to write the answers. Inside the app, questions go with the phones' status after names are masked.
• The email provider: receives your email address and account messages, such as the confirmation code.
• The payment provider: you enter the card on its own page. Aman keeps a reference to the card, its brand, its last four digits and its expiry date, never the card number.

Where the data is kept

Families' data is kept on a server at a hosting company, which may be outside Saudi Arabia.

We take a backup of the database every day and keep it for seven days, plus a weekly copy off the server. What you delete can remain in those copies after it is gone from the service, until they are replaced.

This website

• amn.com.sa uses no cookies and no third-party tracking tools.
• We count some things that happen on the page, such as a tap on the start button or a question being opened, as daily totals only: the event's name, the page, the language and the day. No address, identifier or anything about you is kept with them.
• If you arrive through a partner's link, your browser keeps the partner's code for 30 days so it shows at sign-up, and we count the visit once, by the code alone.
• Your questions in Ask Aman go, as you type them, to Anthropic outside Saudi Arabia, and the conversation is kept for 30 days after the last message. If you leave your name and contact details with your consent, we keep them with the conversation until we have contacted you and then for 90 days, 12 months at most.
• The server records each visit's internet address in its operating logs, as web servers do.

What you control

• The account owner can download all the family's data as one file, from Settings.
• The account owner can delete the whole family with their password: the accounts, the phones and the data are deleted, and this can't be undone. A receipt holding identifiers only remains for one year, and so do invoices.
• You can delete one child's history, and delete location history, chat or call history separately.
• A co-parent or a caregiver can delete their own account, and the family stays.
• For any request about your data: support@amn.com.sa.

How we protect it

Traffic between the two apps, the website and the server is encrypted. Passwords and phone tokens are stored in a form that cannot be read back. Every request is tied to its own family, so one family never sees another's data.

If this policy changes

We publish the new text on this page with its date.