Privacy Policy

Who we are

BEAM by GlowJar (“BEAM”, “we”, “us”) is made by Glow Jar Ltd, a company based in Israel. BEAM is a family app for Android and iOS: kids earn screen time through learning and real-life missions, and parents set the rules. This policy explains what information the BEAM app and this website collect, why, and what you can do about it. Questions are always welcome at support@glowjar.io.

The short version

• We collect only what BEAM needs to work for your family.
• No ads, no advertising ID, and no third-party analytics or tracking.
• We never sell your data or share it for marketing.
• We don't run your family's data through AI or large language models.
• The list of apps on your child's device, and how they're used, stays on that device. This includes everything Apple's Screen Time gives BEAM on iPhone and iPad.
• Kid mode has no chat, no public profiles, and no ads.
• You can delete your account and all of your family's data at any time, right in the app.

Parent accounts

On Android, parents sign in with Google. We receive your email address, your name, and the user ID Google gives us for your account.

On iPhone and iPad, parents sign in with Apple. BEAM asks Apple only for your name, not your email address, and we receive the user ID Apple gives us for BEAM. Apple also gives us a sign-in token, which we keep encrypted. When you delete your account, we use it to tell Apple to disconnect BEAM from your Apple ID.

We never see your Google or Apple password. You also tell us your name (as you want it shown in the app), your relation to the children (for example mother or father), and the language you use.

You also set a parent PIN, which protects parent-only settings on your family's devices. We store the PIN only in hashed form (using bcrypt), so we can check it but can't read it.

BEAM is currently by invitation. If your family joined with an invitation code, we record which code it used.

Children's profiles

A parent adds each child to the family and enters the child's first name, their relation to the parent, an emoji avatar, and birth year. The parent also sets the family's rules, such as daily screen-time and learning limits and a bedtime schedule. We use this to choose age-appropriate learning content and to apply those rules. We don't ask for a child's full date of birth, school, profile photo, email address, phone number, or location.

Paired devices

A child's device joins your family when it scans a QR code or enters a pairing code from your parent account. To keep track of which devices belong to your family, we store:

• An installation ID that the BEAM app generates itself. It is not a hardware identifier and not an advertising ID.
• The device's name as set in its settings (for example “iPhone” or “Galaxy A17”), so you can tell your family's devices apart.
• The device's time zone, so bedtimes and daily limits follow your child's local time.

What happens in the app

To run BEAM for your family, we store on our servers:

• Learning and quiz answers (including answers your child types), how long each answer took, and your child's mastery progress.
• Screen-time sessions your child buys with Glow points: how many minutes were bought, how many were used, and when the session ended. Glow points are virtual points earned inside the app; they are not money.
• Missions and tasks, your child's suggestions, and notes from parents.
• Feedback and bug reports you send us from the app.

This information is visible only within your family.

When something goes wrong, the app sends us a short error report: an error code, the app version, and the app's language. It contains no text you or your child typed and no photos. We use it only to find and fix problems, and it is kept only in our server logs (see “How long we keep data” below).

Mission photos

Some missions let a child add a photo as proof, taken with the camera or picked from the device. This is optional. Before a photo leaves the device, the BEAM app resizes and re-encodes it, which strips hidden metadata such as location. Photos are kept in a private Google Cloud Storage bucket, are visible only to the parents in that family, and are shown through links that expire after an hour.

Screen Time on iPhone and iPad

On iPhone and iPad, BEAM uses Apple's Screen Time frameworks (Family Controls, Managed Settings, and Device Activity) to apply the rules a parent sets. A parent grants this permission on the child's device, and can turn it off in the device's Settings.

• Apps and categories are picked in Apple's own picker. Apple gives BEAM only opaque tokens for them, not app names, and those tokens are stored only on the device.
• The time your child spends in other apps is counted on the device by Apple's Device Activity framework. It is not sent to us.
• BEAM never receives your child's app list, app names, websites, browsing history, or Screen Time reports.
• Our servers receive only BEAM's own screen-time sessions (described above) and whether Screen Time permission is on or off on the child's device, so we can tell the parents if it is turned off.

Screen-time controls on Android

To enforce the screen-time rules a parent sets, BEAM on Android may use Usage Access and an Accessibility service, and can optionally run as Device Owner if a parent sets this up after a factory reset. We use these only to detect which app is in the foreground and to block the apps the parent has chosen.

• The Accessibility service does not read what is on the screen.
• The list of installed apps, app usage, and which app is in the foreground stay on the device. They are never sent to us.
• To scan the pairing QR code, BEAM on Android uses Google's code scanner from Google Play services. The scan is processed on the device.

Beam Plus subscriptions (iOS)

Beam Plus is sold through Apple's App Store, and Apple handles the payment. To unlock Beam Plus features, we receive Apple's signed transaction information for your purchase. We never see your payment card details. You manage or cancel your subscription in your Apple account settings.

Notifications (iOS)

On iOS, we send notifications through Apple Push Notification service. To do that, we store the device token Apple provides for your device. Notifications can include a child's first name (for example, “Noa finished a mission”), so that text passes through Apple's service. BEAM on Android doesn't use push notifications; it checks our servers for updates instead.

The waitlist on this website

If you joined the BEAM waitlist on glowjar.io, we store the email address you gave us, the time you signed up, a rough country based on your IP address (used only for overall signup counts), and your browser's user-agent string (used only to catch spam and bots). This is kept in Cloudflare Workers KV, a storage service Cloudflare runs for us, and a short notification email goes to our team via Cloudflare Email Routing. We use your email only to tell you about BEAM's launch and news, and we keep one record per address. This website doesn't use tracking cookies or tracking scripts. It loads its fonts from Google Fonts, so your browser sends your IP address to Google when you view a page. To be removed from the waitlist, email support@glowjar.io from the address you signed up with.

Who processes data for us

We use a small number of service providers to run BEAM:

• Google Cloud — hosting our servers, our Firestore database, Cloud Storage for mission photos, and server logs. Your family's data is stored in Google Cloud's europe-west1 region (Belgium, EU).
• Google — sign-in on Android, the QR-code scanner on Android, and fonts for this website.
• Apple — Sign in with Apple, the App Store (Beam Plus purchases), and push notifications.
• Cloudflare — hosting this website, storing the waitlist, and running our domain names.

They process data on our behalf to provide these services. We don't use advertising networks or third-party analytics, and we don't sell or share your data for marketing.

Security

All data sent between the BEAM app, this website, and our servers is encrypted in transit using HTTPS, and Google Cloud encrypts it at rest. Inside the app, your family's data is available only to your family. No system is perfectly secure, but we work to protect your information and keep what we collect to a minimum.

Children's privacy

BEAM is used by families. A child uses BEAM's kid mode only on a device that a parent has paired with their parent account, and the parent creates and controls the child's profile. A parent gives consent for BEAM to process their child's information by creating the parent account and setting up the child. We don't knowingly collect information from a child without a parent setting this up.

Parents can review their child's information in the app, ask us to remove a child's profile at any time, or ask us to delete all of their family's data. If you believe a child is using BEAM without a parent's setup, email support@glowjar.io and we will delete that information.

We aim to follow children's privacy rules such as the US Children's Online Privacy Protection Act (COPPA), and to respect the rights people have under laws like the EU and UK GDPR and Israel's Privacy Protection Law.

Your rights

You can ask us to show you the data we hold about you or your children, correct it, delete it, or give you a copy. Email support@glowjar.io and we'll respond. Depending on where you live, you may also have the right to complain to your local data protection authority.

How long we keep data, and deleting it

We keep your family's data for as long as your account is active.

• Your whole account. Use Delete account in the parent Settings of the BEAM app (Android, iPhone or iPad), follow the steps on our Delete your account page, or email support@glowjar.io. Deleting in the app permanently deletes your family's data from our database right away and signs out paired kid devices. Email requests are completed within 30 days. If you signed in with Apple, we also tell Apple to disconnect BEAM from your Apple ID.
• One child. Remove the child's profile in the app, or email support@glowjar.io. The profile disappears from your family right away. It and everything linked to it (photos, learning history, screen-time records, paired devices) are permanently deleted 30 days later. Until then, email us if you removed a child by mistake.
• Backups. To protect against mistakes, our database backups and our photo storage keep deleted data for 7 days. After that it is gone for good.
• Server logs. Our servers keep technical logs to run and secure BEAM. They include IP addresses and may include first names, and are deleted after 30 days.

We may keep data longer only where the law requires us to keep certain records.

When a child's profile or a whole account is deleted, we may keep anonymous, aggregated statistics derived from it, such as how often children of a given age completed an activity. They contain no names, email addresses, photos or account identifiers, can't be linked back to your family, and are used only to improve BEAM. If you choose to tell us why you're deleting your account, we keep your answer without your name, email or any link to your account.

Changes to this policy

If we change this policy, we'll post the new version here and update the date at the top. If a change significantly affects how we use your family's data, we'll also tell you in the app or by email.

Contact

Glow Jar Ltd, Israel. Questions about this policy or your data: support@glowjar.io.