PRIVACY POLICY

1. Introduction

Welcome to Haris (حارس).

Haris is a privacy-by-design digital child safety platform developed to help parents and legal guardians protect children while respecting their privacy. Unlike many traditional monitoring applications, Haris has been engineered around a local-first architecture in which artificial intelligence performs safety analysis directly on the child's device whenever technically feasible.

This Privacy Policy explains how Haris collects, uses, stores, protects, and processes information when you use the application and related services. It also describes the choices available to users regarding their personal information and explains the measures Haris takes to minimize the collection and transmission of sensitive data.

Haris is intended to be used by parents and legal guardians to help supervise and protect minors under their care. It is not designed or intended for covert surveillance, unauthorized monitoring of adults, or any activity that violates applicable laws or the privacy rights of others.

By creating an account, installing Haris, or using any Haris services, you acknowledge that you have read and understood this Privacy Policy.

2. Our Privacy Principles

The design and operation of Haris are guided by a set of fundamental privacy principles that influence every engineering and operational decision.

Privacy by Design

Privacy considerations are integrated into the design and development of Haris from the earliest stages rather than being added after implementation.

Security by Design

Security is a fundamental principle guiding the design, development, testing, deployment, and ongoing operation of Haris. Security considerations are integrated into every stage of the software development lifecycle to help protect the confidentiality, integrity, and availability of user information before implementation, rather than relying solely on security measures added after development.

Haris follows a defense-in-depth approach by combining multiple complementary security controls, including secure authentication, encrypted communications, access controls, secure local storage, least-privilege principles, device pairing, and continuous security improvements to help safeguard user information and maintain the integrity of the platform.

Security controls are regularly evaluated and may be enhanced as Haris evolves to address emerging threats, platform changes, security vulnerabilities, and recognized industry best practices.

Security is considered an essential component of protecting children's privacy, digital well-being, and the trust placed in Haris by parents and legal guardians. Accordingly, security is treated as a fundamental engineering requirement throughout the design, implementation, and operation of the Haris platform.

On-Device AI First

Whenever technically feasible, Haris performs artificial intelligence processing directly on the child's device rather than transmitting monitored content to cloud servers for analysis.

Data Minimization

Haris collects only the information necessary to provide requested functionality. Information that is not required to operate a feature is not intentionally collected.

Minimum Disclosure

When Haris communicates with parents, it transmits only the minimum information necessary to notify them of potential safety concerns. Sensitive monitored content remains on the child's device under normal operation.

Transparency

Haris is designed to operate transparently. Monitoring features are intentionally visible through system permissions, application presence, and user-facing disclosures. Haris is not designed to operate covertly.

Parent Control

Parents and legal guardians determine how Haris protects their children. Haris provides configurable safety features while maintaining strong privacy protections for all users.

3. Scope of This Policy

This Privacy Policy applies to:

• The Haris mobile applications.
• The Haris parent application.
• The Haris child application.
• The Haris website.
• Haris account management services.
• Haris notification services.
• Customer support interactions.

This Privacy Policy does not apply to third-party applications, websites, services, or content that may interact with Haris. Such third-party services remain subject to their own privacy policies and terms.

4. Definitions

For the purposes of this Privacy Policy:

"Haris" means the Haris (حارس) application, associated services, and the organization operating those services.

"Parent" means a parent or legal guardian authorized to supervise a child's device using Haris.

"Child" means a minor whose device is protected through Haris.

"Protected Device" means a device paired with an authorized parent account for the purpose of providing child safety features.

"On-Device AI" means artificial intelligence processing performed locally on the protected device without transmitting monitored content to Haris servers for analysis.

"Protected Local Storage" means the secure storage area created by Haris on the child's device for retaining safety-related information that is accessible only to an authenticated parent or legal guardian.

5. Information We Collect

Haris is designed to minimize the amount of information collected while still providing effective child safety features. The information collected depends on how users choose to register and use the application.

5.1 Parent Account Information

When a parent or legal guardian creates a Haris account, Haris may collect the following information:

• Full name.
• Email address (when Google Sign-In is used).
• Phone number (when phone number registration is used).
• Password (when password-based registration is used). Passwords are never stored in plaintext and are protected using industry-standard one-way cryptographic hashing before being stored. Passwords are used solely to authenticate users who choose password-based registration and to help protect the security of their Haris accounts.
• Optional profile photograph.
• Country.
• Preferred language.
• Information necessary to identify the children linked to the parent account.
• Subscription status.
• Firebase Cloud Messaging (FCM) token for delivering notifications.

This information is used solely for account creation, authentication, device pairing, account management, and notification delivery.

5.2 Child Account Information

For each protected child account, Haris may collect the following information:

• Child's name.
• Date of birth.
• Gender.
• Email address (when Google Sign-In is used for registration).
• Phone number (when phone number registration is used).
• Optional profile photograph.
• Device nickname.
• Firebase Cloud Messaging (FCM) token.

Device nickname is assigned during the device pairing process and is used solely to help parents or legal guardians identify which protected device generated a notification, alert, or safety event. Device nicknames are used exclusively for identification within the Haris platform and are not used for advertising, behavioral profiling, commercial analytics, or any purpose unrelated to providing Haris's child safety services.

Firebase Cloud Messaging (FCM) tokens are collected solely to enable the secure delivery of push notifications between protected devices and authorized parent or legal guardian accounts.

The information described in this section is used exclusively for device pairing, account management, parental notification services, and providing the core child safety functionality described in this Privacy Policy. Haris does not use this information for advertising, behavioral profiling, or any purpose unrelated to operating the Haris platform.

5.3 Device Information

To provide core application functionality, Haris may collect a limited amount of device-related information necessary to operate the application securely and reliably. This information may include:

• Android ID.
• Device pairing identifiers.
• Authentication tokens.
• Firebase Cloud Messaging (FCM) tokens.

Android ID is collected solely for legitimate operational purposes, including uniquely identifying a protected device for account management, device pairing, authentication, security, fraud prevention, and maintaining the relationship between a protected device and its authorized parent or legal guardian.

Firebase Cloud Messaging (FCM) tokens are collected solely to enable the secure delivery of push notifications between protected devices and authorized parent or legal guardian accounts.

Haris does not use the Android ID, Firebase Cloud Messaging (FCM) tokens, or any other device identifiers for advertising, behavioral profiling, cross-application tracking, commercial analytics, or any purpose unrelated to providing the services described in this Privacy Policy.

Haris does not intentionally collect the following device identifiers:

• International Mobile Equipment Identity (IMEI) numbers.
• Device serial numbers.
• Advertising IDs.
• Hardware identifiers that are not required to provide the application's functionality.

5.4 Information Generated During Application Use

As part of its child safety functionality, Haris may generate information locally on the child's device, including:

• AI analysis results.
• OCR output.
• Cyberbullying detection results.
• Harmful content classifications.
• Nudity detection results.
• Violence detection results.
• Self-harm detection results.
• Risk scores.
• Detection history.
• Parent alert history.

Unless explicitly stated otherwise within this Privacy Policy, this information remains stored locally on the child's device and is not uploaded to Haris servers for AI processing.

6. Information We Do Not Collect

Protecting user privacy requires not only securing collected information, but also intentionally avoiding the collection of unnecessary information.

Accordingly, Haris does not intentionally collect or process the following information for its cloud services:

• Screenshots captured for local AI analysis.
• Chat conversations.
• SMS message contents.
• Email contents.
• Photographs analyzed by the AI engine.
• Videos analyzed by the AI engine.
• Audio recordings.
• AI confidence scores.
• AI inference results.
• OCR text extracted from monitored content.
• Detection history.
• Risk assessment history.
• Original images preserved for parental review.
• Monitored application content.

These categories of information remain on the protected device under normal operation.

7. How Haris Uses Your Information

Haris uses collected information solely to provide the services requested by parents and legal guardians.

Specifically, collected information may be used to:

• Create and manage user accounts.
• Authenticate parents and children.
• Pair protected devices with authorized parent accounts.
• Deliver push notifications.
• Synchronize parental safety settings.
• Maintain application security.
• Detect unauthorized access attempts.
• Provide customer support.
• Improve application reliability.
• Comply with applicable legal obligations.

Haris does not use personal information for behavioral advertising or commercial profiling.

8. On-Device Artificial Intelligence

One of Haris's fundamental design principles is performing AI processing directly on the child's device whenever technically feasible.

Unlike many cloud-based safety platforms, Haris analyzes monitored content locally using on-device AI models.

This local processing may include:

• OCR.
• Cyberbullying detection.
• Harmful text analysis.
• Image classification.
• Nudity detection.
• Violence detection.
• Self-harm detection.
• Risk assessment.

Performing these operations locally provides several benefits:

• Personal content remains on the child's device.
• Reduced dependence on cloud infrastructure.
• Faster response times.
• Continued operation even when internet connectivity is unavailable for AI processing.
• Improved protection of user privacy.

Under normal operation, Haris does not upload monitored screenshots, conversations, photographs, AI inference results, or other analyzed content to Haris servers for AI processing.

8.1 On-Device AI Model Updates

To improve the effectiveness, security, reliability, and performance of Haris, the application may periodically receive updates to its on-device artificial intelligence models.

These updates are intended to enhance capabilities such as harmful content detection, cyberbullying detection, image classification, optical character recognition (OCR), language understanding, and other child safety features.

Updates to AI models are designed to improve the quality of the services provided while maintaining Haris's core privacy principles. Unless otherwise stated and with appropriate user notice where required, updates to AI models do not change Haris's local-first processing architecture or result in monitored content being uploaded to Haris servers for AI analysis under normal operation.

Where an update introduces a material change to how personal information is processed, Haris will update this Privacy Policy and provide users with appropriate notice in accordance with the "Changes to This Privacy Policy" section.

8.2 Initial AI Model Download

To support Haris’s privacy-first architecture and advanced on-device artificial intelligence capabilities, certain AI models are not included within the initial application package and may be downloaded separately after the application has been installed and configured.

These AI models are required to enable certain on-device child safety features, including image analysis, text analysis, optical character recognition (OCR), cyberbullying detection, harmful content detection, and other AI-powered functionality made available by the Services.

Until the required AI models have been successfully downloaded and installed, certain AI-powered features may be unavailable or operate with reduced functionality.

AI model downloads consist solely of software components required to perform local processing on the protected device. They are not generated from, personalized using, or trained on monitored user content or personal information.

8.3 AI Model Storage and Management

To support on-device artificial intelligence functionality, AI models downloaded by Haris are stored locally on the user’s supported device using storage mechanisms provided by the operating system. These AI models are software components that enable local processing and are not generated from, personalized using, or trained on the user’s monitored content or personal information.

AI models may be updated, replaced, optimized, or removed through future application updates or separately delivered model updates to improve security, performance, compatibility, accuracy, regulatory compliance, or child safety functionality. Such updates may replace previously installed AI models without affecting the user’s ownership of personal information or altering the privacy commitments described in this Privacy Policy.

When the Haris application is uninstalled, AI models installed as part of the application are generally removed together with the application, subject to the behavior of the supported operating system. In some circumstances, the operating system may temporarily retain cached files, backup data, or other residual information outside Haris’s control until they are automatically removed or managed by the operating system.

AI models remain software components used solely to enable local artificial intelligence processing on supported devices. They do not contain users’ monitored content, personal information, or individualized behavioral profiles, and they are not designed to transmit monitored content to Haris for artificial intelligence analysis.

9. Local Storage of Sensitive Content

Certain safety-related information must be retained temporarily on the protected device in order to provide parental review capabilities.

When Haris identifies potentially inappropriate content:

• The monitored content remains on the protected device.
• Images classified as potentially inappropriate may be presented in a protected (blurred) form within the device gallery, depending on the protection mode selected by the parent.
• An unmodified local copy may be securely preserved within Haris's protected local storage.
• Protected local storage is accessible only through local authentication by an authorized parent or legal guardian using the configured PIN.
• Sensitive content is not uploaded to Haris servers for storage or AI analysis.

This approach allows parents to review relevant safety events while maintaining Haris's commitment to local-first privacy.

10. Android Accessibility Service

To provide its core child safety features, Haris uses the Android Accessibility Service in accordance with Android platform requirements and applicable Google Play policies.

Accessibility Service enables Haris to perform on-device safety functions including:

• Detecting harmful or inappropriate text displayed on the screen.
• Performing Optical Character Recognition (OCR) for on-device analysis.
• Identifying the foreground application.
• Detecting potential cyberbullying and other harmful digital interactions.
• Capturing on-device screenshots using Android Accessibility APIs solely for local AI analysis of potentially harmful content.
• Enforcing parental protection rules, including application blocking and other safety restrictions.

All processing performed using Accessibility Service is intended exclusively to provide the child safety functionality requested by parents or legal guardians.

Haris does not use Accessibility Service to:

• Perform clicks, gestures, or other actions on behalf of the user.
• Enter or modify text within third-party applications.
• Interact with applications on behalf of the user.
• Circumvent Android security protections or platform restrictions.
• Operate covertly or without user awareness.

Information processed through Accessibility Service remains subject to the privacy principles described in this Privacy Policy, including Privacy by Design, On-Device AI First, Data Minimization, and Minimum Disclosure. Sensitive monitored content processed through Accessibility Service is analyzed locally on the protected device and is not uploaded to Haris servers for AI processing under normal operation.

Before requesting Accessibility Service permission, Haris provides users with a clear and prominent disclosure explaining why the permission is required, the child safety features it enables, how information processed through Accessibility Service is handled, and how this processing aligns with the privacy principles described in this Privacy Policy. Users must explicitly grant this permission before the associated features become available.

11. Local VPN Service

To provide web protection and enforce parental internet safety rules, Haris may establish a local Virtual Private Network (VPN) connection on the protected device using Android's VPN framework.

The VPN connection is used exclusively to:

• Apply parental web filtering rules.
• Block access to websites classified as harmful or inappropriate.
• Enforce internet safety policies configured by the parent or legal guardian.
• Support Haris's child safety functionality.

Haris's VPN operates locally on the protected device. Internet traffic is evaluated locally for the sole purpose of enforcing parental web filtering and safety rules. Under normal operation, Haris does not transmit users' browsing content, browsing history, or internet traffic to Haris servers for filtering, monitoring, storage, or analysis.

Haris does not use the VPN to:

• Route internet traffic through Haris servers.
• Provide commercial VPN services.
• Record or store users' browsing sessions.
• Monitor internet activity beyond what is necessary to enforce the parental protection rules selected by the parent or legal guardian.
• Circumvent Android security protections or platform restrictions.

The VPN functionality is intended solely to support parental controls and child safety features. It is not designed to anonymize internet traffic, bypass geographic restrictions, or provide general-purpose VPN services.

All processing performed through the VPN remains subject to the privacy principles described in this Privacy Policy, including Privacy by Design, On-Device AI First, Data Minimization, and Minimum Disclosure.

Before requesting VPN permission, Haris provides users with a clear and prominent disclosure explaining why the VPN is required, the child safety features it enables, how internet traffic is processed, and how this processing aligns with the privacy principles described in this Privacy Policy. Users must explicitly grant this permission before the associated features become available.

12. Parent Notifications

Haris is designed according to a principle of Minimum Disclosure, meaning that parents receive only the information necessary to become aware of potential safety concerns while minimizing the transmission of sensitive information.

When Haris detects potentially harmful activity on a protected device, the application may send a notification to the authorized parent or legal guardian.

Notifications may include:

• The device nickname associated with the protected device.
• A general category of the detected event (for example, harmful text, inappropriate image, or policy violation).
• Operational information necessary for notification delivery.

Notifications do not include:

• Screenshots.
• Chat conversations.
• Message contents.
• Photographs.
• Videos.
• AI confidence scores.
• Risk scores.
• OCR output.
• Application names.
• AI-generated analysis.

Parents who wish to review the underlying evidence must authenticate locally on the child's device through Haris using the configured PIN.

13. Image Protection

One of Haris's primary objectives is reducing repeated exposure to potentially harmful visual content while preserving parental oversight.

When Haris identifies an image as potentially inappropriate using on-device AI, the application may perform one of the following actions depending on the protection mode selected by the parent.

Active Protection (Default)

• The image displayed within the device gallery may be presented in a blurred form.
• An unmodified copy of the original image is securely preserved within Haris's protected local storage.
• The original image remains on the child's device.
• The original image is accessible only to an authenticated parent or legal guardian through Haris using the configured PIN.
• Neither the blurred image nor the original image is uploaded to Haris servers.

Monitor Only

If the parent selects Monitor Only mode:

• Images remain unchanged.
• The parent receives a notification that potentially inappropriate content has been detected.
• Any retained evidence remains stored locally on the protected device.
• No monitored content is uploaded to Haris servers.

To promote transparency, Haris may display a visual indicator on protected images informing users that the image has been intentionally protected by Haris.

14. Cloud Services

Although Haris uses cloud services for account management and application functionality, cloud services are intentionally limited to operational functions.

Cloud services may be used for:

• User authentication.
• Parent and child account management.
• Device pairing.
• Application configuration and future subscription management (when available).
• Notification delivery.
• Customer support.

Cloud services are not used for:

• AI inference.
• OCR processing.
• Cyberbullying detection.
• Nudity detection.
• Harmful content analysis.
• Processing screenshots.
• Processing monitored photographs.
• Processing conversations.
• Processing monitored application content.

This separation between operational services and AI processing is a fundamental aspect of Haris's privacy architecture.

15. Firebase Cloud Messaging

Haris uses Firebase Cloud Messaging (FCM) to deliver push notifications between protected devices and authorized parent devices.

Firebase is used exclusively for:

• Delivering parent notifications.
• Delivering operational application notifications.

Firebase is not used by Haris to process:

• Screenshots.
• AI results.
• OCR text.
• Conversations.
• Images.
• Videos.
• Other monitored content.

Notification payloads are intentionally minimized to reduce unnecessary disclosure of personal information.

16. Information We Share

Haris is committed to protecting user privacy and does not sell, rent, trade, or otherwise disclose users' personal information to third parties for advertising, marketing, commercial profiling, or any other commercial purposes.

Haris shares personal information only when such sharing is necessary to provide the services requested by users, operate the application, protect the security and integrity of the platform, or comply with applicable legal obligations.

Depending on the functionality being used, limited information may be shared with carefully selected service providers solely for the following purposes:

• User authentication.
• Push notification delivery.
• Secure cloud infrastructure required for account management, authentication, device pairing, and operational services.
• Customer support.
• Compliance with applicable laws and lawful requests from competent authorities.

Each service provider receives only the minimum amount of information necessary to perform its services on behalf of Haris and is expected to process such information in accordance with applicable privacy and security requirements.

Haris does not share the following categories of monitored content with third parties for advertising, analytics, profiling, or AI processing purposes:

• Screenshots.
• Chat conversations.
• OCR output.
• AI analysis results.
• AI confidence scores.
• Detection history.
• Risk scores.
• Monitored photographs.
• Original protected images.
• Other monitored content processed locally on the child's device.

As of Version 1.0, Haris does not process subscription or payment information. If optional subscription services are introduced in future releases, payment-related information may be processed by authorized payment service providers. This Privacy Policy will be updated accordingly before such services become available.

17. Security Measures

Haris implements technical and organizational safeguards designed to protect user information.

These safeguards include:

• Secure authentication.
• Encrypted communications using industry-standard protocols.
• Password hashing where passwords are used.
• Local PIN protection for parental access to protected content.
• Device pairing authentication.
• Access control mechanisms.
• Tamper detection.
• Secure local storage for monitored evidence.
• Restricted access to cloud infrastructure.

Haris continuously evaluates its security architecture and may introduce additional safeguards as the application evolves.

However, no security system can guarantee absolute protection. Users remain responsible for maintaining the security of their accounts, authentication credentials, and devices.

18. Data Retention

Haris retains personal information only for as long as necessary to provide requested services or comply with legal obligations.

Cloud Data

Cloud-stored account information is retained while an account remains active.

When a parent deletes an account:

• Parent account information is deleted.
• Child account information associated with that parent is deleted from Haris cloud services.
• Device pairing information is removed.
• Notification tokens are deleted.

Deletion is performed without an intentional retention period unless otherwise required by applicable law.

Local Device Data

Safety-related information retained on the child's device remains under the control of the parent or legal guardian and is not automatically transferred to Haris servers.

8.2 Initial AI Model Download

To support Haris’s privacy-first architecture and advanced on-device artificial intelligence capabilities, certain AI models are not included within the initial application package and may be downloaded separately after the application has been installed and configured.

These AI models are required to enable certain on-device child safety features, including image analysis, text analysis, optical character recognition (OCR), cyberbullying detection, harmful content detection, and other AI-powered functionality made available by the Services.

Until the required AI models have been successfully downloaded and installed, certain AI-powered features may be unavailable or operate with reduced functionality.

AI model downloads consist solely of software components required to perform local processing on the protected device. They are not generated from, personalized using, or trained on monitored user content or personal information.

8.3 AI Model Storage and Management

To support on-device artificial intelligence functionality, AI models downloaded by Haris are stored locally on the user’s supported device using storage mechanisms provided by the operating system. These AI models are software components that enable local processing and are not generated from, personalized using, or trained on the user’s monitored content or personal information.

AI models may be updated, replaced, optimized, or removed through future application updates or separately delivered model updates to improve security, performance, compatibility, accuracy, regulatory compliance, or child safety functionality. Such updates may replace previously installed AI models without affecting the user’s ownership of personal information or altering the privacy commitments described in this Privacy Policy.

When the Haris application is uninstalled, AI models installed as part of the application are generally removed together with the application, subject to the behavior of the supported operating system. In some circumstances, the operating system may temporarily retain cached files, backup data, or other residual information outside Haris’s control until they are automatically removed or managed by the operating system.

AI models remain software components used solely to enable local artificial intelligence processing on supported devices. They do not contain users’ monitored content, personal information, or individualized behavioral profiles, and they are not designed to transmit monitored content to Haris for artificial intelligence analysis.

19. Account Deletion

Parents may request deletion of their Haris account at any time through the application or other supported account management mechanisms.

Deleting an account permanently removes cloud-based account information associated with that account, subject to any legal obligations requiring temporary retention.

Deletion of cloud account information does not automatically remove locally stored information remaining on the child's device. Parents are responsible for uninstalling Haris or removing locally stored information from protected devices when appropriate.

20. Children's Privacy

Protecting children's privacy is a core objective of Haris.

Haris is designed to assist parents and legal guardians in supervising and protecting children under the age of eighteen (18). Haris is not intended to enable covert monitoring, unauthorized surveillance, or activities that violate the rights of children or other individuals.

Children do not independently activate Haris monitoring features. Monitoring functionality becomes available only after a protected device has been paired with an authorized parent or legal guardian account.

Parents and legal guardians remain responsible for:

• determining whether Haris is appropriate for their family;
• configuring monitoring and protection settings;
• supervising their children's use of technology;
• reviewing detected safety events; and
• complying with applicable laws regarding parental supervision and privacy.

Although Haris uses artificial intelligence to assist in identifying potentially harmful content and behavior, Haris does not replace parental judgment or supervision.

21. International Users

Haris is developed in the Arab Republic of Egypt and is intended for use by families worldwide.

If you access or use Haris from outside Egypt, you acknowledge that your information may be processed in accordance with this Privacy Policy and applicable laws governing Haris's operations.

Users are responsible for ensuring that their use of Haris complies with the laws and regulations applicable within their jurisdiction.

As Haris expands into additional jurisdictions, this Privacy Policy may be updated to reflect additional legal or regulatory requirements.

22. Third-Party Services

Haris relies on selected third-party service providers to support specific operational functions.

These providers may include services for:

• user authentication;
• cloud infrastructure;
• push notification delivery;
• website hosting;
• customer support; and
• future payment processing.

As of Version 1.0, Haris may use services such as Google Sign-In and Firebase Cloud Messaging. Future subscription services may be supported through Paymob or another authorized payment provider.

Each third-party provider processes information according to its own privacy policies and contractual obligations.

Haris carefully selects service providers and seeks to limit the information shared with them to the minimum necessary for providing the requested service.

23. Legal Basis for Processing

Depending on the applicable laws of the jurisdiction in which Haris is used, Haris processes personal information on one or more of the following legal bases:

Performance of Services

Haris processes personal information as necessary to create and manage user accounts, authenticate users, pair protected devices, deliver notifications, maintain account security, and provide the child safety services requested by parents or legal guardians.

User Consent

Where required by applicable law, Haris processes personal information based on the consent provided by users when creating an account, granting Android system permissions, enabling specific child safety features, or otherwise choosing to use particular services offered by Haris. Users may withdraw their consent where permitted by applicable law; however, doing so may limit or prevent the operation of certain Haris features.

Legitimate Interests

Where permitted by applicable law, Haris may process personal information where necessary to maintain the security, integrity, reliability, and proper operation of the platform, prevent fraud, investigate misuse, protect the rights and safety of users, and improve the quality, security, and reliability of the services provided.

Legal Obligations

Haris may process or disclose personal information where required to comply with applicable laws, regulations, court orders, or lawful requests from competent governmental or regulatory authorities.

Where the laws of a particular jurisdiction require additional legal bases, enhanced user rights, or supplementary privacy protections, Haris will process personal information in accordance with those applicable legal requirements.

24. Your Rights

Subject to applicable law, users may have the right to:

• access their personal information;
• correct inaccurate account information;
• update profile information;
• delete their account;
• withdraw consent where applicable;
• request information regarding the processing of their personal information; and
• contact Haris regarding privacy-related concerns.

Parents may manage their accounts directly through the application or by contacting Haris using the contact information provided below.

Deletion requests will be processed in accordance with Section 19 of this Privacy Policy.

25. Changes to This Privacy Policy

Haris may update this Privacy Policy from time to time to reflect:

• new features;
• changes in applicable laws;
• security improvements;
• operational changes;
• new technologies; or
• improvements to Haris services.

When material changes are made, Haris will provide appropriate notice through the application, website, or other reasonable communication channels before the updated Privacy Policy becomes effective where required by applicable law.

The "Last Updated" date appearing at the beginning of this Privacy Policy indicates the most recent revision.

Continued use of Haris after the effective date of an updated Privacy Policy constitutes acceptance of the revised Privacy Policy, unless applicable law requires additional consent.

26. Contact Us

If you have questions regarding this Privacy Policy or Haris's privacy practices, you may contact us using the following channels:

General Support

support@harisfamily.com

Privacy Inquiries

privacy@harisfamily.com

Legal Inquiries

legal@harisfamily.com

Website

www.harisfamily.com

27. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws of the Arab Republic of Egypt, without prejudice to any mandatory consumer protection rights that may apply under the laws of the jurisdiction in which a user resides.

Nothing in this Privacy Policy is intended to limit rights that cannot legally be waived under applicable law.

28. Artificial Intelligence Disclaimer

Haris uses artificial intelligence to assist parents and legal guardians in identifying potentially harmful digital content and behavior.

Artificial intelligence systems are probabilistic technologies and may not detect every instance of harmful content, inappropriate behavior, or online threat.

Accordingly:

• Haris assists parents in supervising children's digital activities.
• Haris does not guarantee the detection of all harmful or inappropriate content.
• Haris should not be relied upon as the sole means of protecting children online.
• Parents and legal guardians remain responsible for supervising and guiding their children's digital activities.

The recommendations, alerts, and classifications generated by Haris are intended to support informed parental decision-making rather than replace human judgment.

29. Our Commitment

At Haris, protecting children and respecting privacy are complementary objectives. We believe that effective digital safety should never require unnecessary collection, transmission, or disclosure of personal information.

From the earliest stages of development, Haris has been engineered around the principles of Privacy by Design, Security by Design, On-Device AI First, Data Minimization, Minimum Disclosure, Transparency, and Parent Control. These principles guide our technical, operational, and product decisions and form the foundation of the Haris platform.

As Haris continues to evolve, we remain committed to strengthening both child safety and user privacy through responsible innovation, continuous security improvements, and transparent communication with our users. Whenever significant changes affect how personal information is processed, we will update this Privacy Policy and provide appropriate notice as required by applicable law.

Our goal is to provide parents and legal guardians with technology that helps create safer digital environments while preserving the privacy, dignity, and trust of every family that chooses to use Haris.

30. Transparency Commitment

Haris is committed to operating transparently.

The application is intentionally designed so that monitoring activities remain visible through application presence, system permissions, foreground notifications where applicable, and user-facing disclosures.

Haris is not intended to function as spyware, stalkerware, or a covert surveillance application.

Our goal is to help families create safer digital environments while respecting the privacy and dignity of all users.

End of Privacy Policy