Privacy Policy

This Privacy Policy describes how IRONDUCKS LABS ("Ironducks," "we," "us," or "our") collects, uses, shares, and protects personal information when you visit broh.ai or big.broh.ai, join the Big Broh parent waitlist or early-access programme (including through sign-up forms we run on third-party platforms such as Meta), or use the Big Broh app for iPhone and the related services (collectively, the "Service").

Big Broh is a parental-safety app. A parent installs it, gives consent, and Big Broh watches their child's Roblox sessions to spot safety concerns, tells the parent what matters, and uses Apple's Screen Time controls so Roblox only opens while a session is being watched. This policy explains what that means for the parent's data and the child's data.

1. Who we are

Ironducks Labs is the data controller for personal information processed in connection with the Service. You can reach us at legal@broh.ai or at the postal address at the bottom of this page.

2. Who the Service is for, and children's privacy

Big Broh is offered to parents and legal guardians aged 18 or over. We do not offer accounts directly to children, and we do not knowingly collect personal information from a child except through the parent who set up the Service for them and consented on their behalf.

Parental consent. Before Big Broh watches anything, the parent, signed in to their own account, reads a consent screen in the app that explains what is shared and with whom, and confirms it by ticking "I agree". That consent is the legal basis for processing the child's information. We rely on the parent's authenticated account, their confirmation of being the child's parent or guardian, and this explicit step as our means of obtaining verifiable parental consent under the U.S. Children's Online Privacy Protection Act (COPPA), the EU and UK GDPR (Article 8), Andorran data-protection law, and similar laws.

What the child sees. Watching only happens during a session the child starts by tapping Play, after iOS shows its own screen-recording prompt. While a session is live, iOS displays its recording indicator and Big Broh shows "Big Broh is watching" on the child's screen.

The parent stays in control. A parent can stop monitoring, review the alerts and summaries about their child, change or remove the child's profile, or delete the whole family's data at any time from the app (Profile → Delete account) or by writing to legal@broh.ai. Withdrawing consent stops all future processing of the child's information.

3. Information we collect

From the parent

• Account data. Email address, the one-time codes used to verify it, your confirmation that you are 18 or over, account status, feature flags, and, if you sign in with Apple or Google, the name and email those services share with us.
• Family setup. The first name or nickname you give each child, the child's approximate age or birth year if you enter it, and the devices you pair.
• Your messages. Chat messages you send to the Big Broh assistant, and support emails.
• Device and usage data. Push-notification token, device model and iOS version, app version, IP address, language, feature usage, timestamps, and error logs.

About the child, during watched sessions

• Screen content. While a session is live, the child's iPhone sends images of the Roblox screen to our servers, roughly every few seconds. We extract on-screen text and use AI to check for safety concerns such as grooming, bullying, scams, and age-inappropriate content. By default the raw images are deleted as soon as they have been analysed, usually within minutes; they are never shown to the parent and never kept unless the parent has explicitly opted in to keep session recordings (see section 8).
• What we keep from a session. The start and end time, the game or experience being played, the alerts we raised, short text excerpts that are the evidence for an alert (for example the line of chat that triggered it), and a plain-language summary of the session.
• Voice. If the child uses the optional voice companion ("Robin"), their voice is transmitted to generate the companion's replies. We keep a text transcript of those conversations to produce summaries; voice audio is not stored after the reply is generated.
• Nothing else. We do not access the child's contacts, photos, location, other apps, or anything on the screen when a session is not live.

Screen Time controls. Big Broh uses Apple's Family Controls, Managed Settings and Device Activity frameworks to keep Roblox closed until a watched session starts and to apply any time limit the parent sets. Apple designs these frameworks so that app usage data stays on the device: we never receive information about how long or when the child uses Roblox or any other app, and we never use Screen Time data for advertising or profiling.

We do not knowingly collect government identifiers, precise geolocation, or payment-card data. The Service does not currently process payments.

4. How we use information

We use personal information to:

• provide the Service: watch sessions the parent has consented to, raise alerts, write summaries, run the companion, and apply the parent's Screen Time settings;
• send the parent alerts and notifications they have asked for;
• keep the Service secure, prevent abuse, and enforce our Terms of Use;
• understand how the Service performs and improve it, using aggregated or de-identified data where possible;
• communicate with you about your account and service changes;
• comply with legal obligations and respond to lawful requests.

We do not use screen content, transcripts, or any child's information to train AI models, to build advertising profiles, or for any purpose other than the safety service the parent asked for.

5. Who we share information with

We share personal information only with the following recipients, and only as needed to operate the Service:

• AI providers. Screen images, extracted text, voice, and chat content are transmitted to OpenAI, Anthropic, and ElevenLabs for the sole purpose of analysing sessions and generating responses. Each provider processes the data under contractual terms that prohibit using it to train their models. The parent consents to this sharing in the app before any session is watched.
• Real-time voice. Voice sessions run over LiveKit's audio infrastructure.
• Push notifications. Apple Push Notification service delivers alerts to the parent's iPhone.
• Email delivery. Our transactional email provider receives your email address and one-time code.
• Hosting. Cloud providers that host the Service and store its data on our behalf, under written data-processing terms.
• Advertising measurement, website only. On broh.ai we use pixels from Meta and TikTok to measure our ads. They receive website event data and standard device metadata. They never receive anything from the app, and never anything about a child.
• Professional advisors and authorities, where required by law or to establish, exercise, or defend legal claims.
• Corporate transactions, subject to confidentiality, if we are involved in a merger, acquisition, or sale of assets.

We do not sell personal information, we do not share it for cross-context behavioural advertising, and we never disclose a child's information to anyone except the providers above who process it on our behalf.

When Google ad measurement is enabled on this site, the Google tag runs with advertising storage switched off, so it does not place a Google advertising cookie on your device and does not use your visit to personalise ads. Google receives standard device/IP information, the click identifier Google itself added to the ad link you followed, and signup and parent-questionnaire completion events with a registration identifier used to avoid duplicate counting. We do not include your email address or questionnaire answers in those events. The other tools described above have their own behavior.

6. AI outputs

Alerts and summaries are produced by AI. They can be wrong: a concern can be missed, and an innocent exchange can be flagged. Big Broh is a tool to inform parents, not a guarantee of safety and not a substitute for supervision. We may review flagged content in limited cases to investigate abuse, fix errors, or comply with law.

7. Cookies and website analytics

On our websites we use first-party cookies to keep you signed in and remember preferences, and the advertising pixels described above to measure ads. You can block cookies in your browser. The app does not use cookies or third-party analytics.

8. Data retention

• Raw screen images. Deleted after analysis, normally within minutes. Only if the parent opts in to keep session recordings are they stored, and then until the parent deletes them or the account is deleted.
• Voice audio. Not stored after the companion's reply is generated.
• Alerts, evidence excerpts, session summaries, transcripts. While the parent's account is active.
• Account, family and device data. While the account is active.
• Server logs. Up to 90 days.
• After deletion. Deleted or de-identified within 30 days of an account deletion, except where law requires us to keep a record.

Aggregated, de-identified data may be retained.

9. International transfers

Ironducks is established in the Principality of Andorra, which the European Commission recognises as providing adequate data protection. Our providers operate in the United States and other countries. Where personal information leaves the EEA, UK or Andorra, we rely on the providers' standard contractual clauses or equivalent safeguards.

10. Security

We protect personal information with encryption in transit, access controls, audit logging, and by keeping as little as the Service needs. No system is perfectly secure; we cannot guarantee absolute security.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export personal information, to object to or restrict certain processing, and to withdraw consent. Parents may exercise these rights for their child. U.S. residents in states with consumer-privacy laws may submit requests to know, correct, delete, or opt out of sale or sharing (we do neither).

The fastest way to delete everything is in the app: Profile → Delete account, then confirm with Delete account and family data. This removes your account, your children's profiles, alerts, summaries, and any stored recordings, and revokes Sign in with Apple. You can also email legal@broh.ai from the address on your account. You can also ask us to delete only part of your data without closing your account. Step-by-step instructions are on our account deletion page. We will verify requests and will not discriminate against you for exercising your rights.

12. Do Not Track and global privacy signals

Our websites do not respond to "Do Not Track". We honour Global Privacy Control signals where the law recognises them.

13. Changes to this policy

We may update this policy. For material changes we will update the effective date and notify you in the app or by email; if a change affects how a child's information is used, we will ask the parent to consent again before it applies.

14. Contact us

legal@broh.ai, or by mail:

Roblox is a trademark of Roblox Corporation. Big Broh is not affiliated with or endorsed by Roblox Corporation.