How we protect

What encryption actually means here.

We say encrypted at rest, not end-to-end. That's a choice about honesty, not a marketing tagline. Here is exactly what happens when your child uses a device TinyBeacon is watching over.

The pipeline

1. A screenshot is captured on the device (with your active consent).
2. The image is sent to a Supabase Edge Function where Claude's vision model reads it in plain language.
3. If nothing concerning is found, the image is discarded. No copy is saved.
4. If something is flagged, the image is encrypted at rest and retained for 30 days. You see the model's plain-English explanation of what it saw.
5. On day 31, the flagged image is deleted unless you explicitly saved it.

What this means

Server-side systems see plaintext during analysis. That's unavoidable if we want a vision model to understand the frame. We do not log, we do not persist plaintext, and we do not train models on your child's screens. We are working toward on-device analysis — true end-to-end — as soon as the technology makes it practical.

Malaysian data law & consent

Every data category requires active, revocable consent. Revoke and the retained content is purged within 24 hours. We are built to Malaysian data protection standards under the Personal Data Protection Act 2010 (PDPA).

What this looks like in practice

Device

Aisha’s iPad, 10:42 am

A screenshot is captured with active parental consent and sent for analysis. Nothing is stored yet.

Transit only · TLS 1.2

Analysis

Here’s what we noticed

“A direct message from an unfamiliar account asking Aisha to share her phone number and school name.”

Model reads plaintext · encrypted at rest if flagged

You

One thing worth a conversation

You see the same plain-English sentence Aisha could see if she opened the app. No score. No alarm. Just what we noticed.

Retained 30 days · deleted unless you save it

If nothing is flagged, the screenshot is deleted immediately. No copy is saved, no record is kept. The pipeline runs the same way whether the result is “nothing to see” or “worth a conversation.”