Qustodio Privacy Policy

Last Updated: November 9, 2026

Qustodio Technologies SLU (“Qustodio”, “we”, “us”), Roger de Flor 193, Bajos, 08013 Barcelona, Spain, is a provider of parental-control and online-safety products for families. This Privacy Policy describes how- as a Data Controller, we collect and process personal data in connection with your use of our products, services, apps and website (the “Services”). This Privacy Policy is part of our Qustodio Family Terms of Service.

SUMMARY

Qustodio is part of the Qoria group, a subsidiary of Aura Consolidated Group, Inc. (“Aura”); the Qoria group policy covers Qoria’s school and business products. If you use the Qustodio Service to see data about your usage of school devices collected by Linewize Inc. through its School Manager service, please read Section 7 below.

Qustodio processes the following types of personal data in relation to the Qustodio Services:

1. Your Subscription Data, collected for managing our relationship with you, including activation, support, invoicing, and upselling. This is described in Sections 1.1 and 2.

2. Your Device Data, collected from the devices associated with your account including data about devices, websites, and app usage associated with you, the Subscriber/Parent/Guardian. This is described in Sections 1.2 and 2 below.

3. Your Child’s Data, collected from the monitored devices associated with your accounts (“Monitored Devices”) including data about devices, websites and apps that the user of the Monitored Devices (“User”) uses, contacts, connections, messages and other communications, posted and received content, etc. This data is required in order to operate Qustodio’s parental controls and monitoring services. This is described in Section 4 below.

4. Website Data, collected when you access or use our Website, including contact information and browsing data, such as your IP address, the URL of the website you visited before or after our Website, browser type and cookie-related information. This is described in Section 1.2 below.

5. LineWize School Manager Data, collected as a sub-processor (or ‘service provider’) for Linewize, under the instructions of the school, solely for the purpose of presenting that data via the Qustodio user interface. This is described in Section 7 below.

A Note for Children and Teenagers

You may be reading this because a Qustodio app is set up on a device you use. In plain language: a parent or caregiver sets it up to help keep you safe online. Depending on what they turned on, the app can see things like the websites and apps you use, how long you use them, where the device is, and on some plans, messages and gaming audio. We keep this only for a very limited time (see Section 12), keep it secure, and do not sell / share it or use it to advertise to you. You have rights: to ask what we hold about you, to correct it, and to ask us to stop using it (unless the law says we must keep it), and to complain to a regulator.

Questions: DPO@Qustodio.com, or talk to your parents or guardian.

1. What Data Do We Collect About You (Subscriber/Parent/Guardian)?

1.1 Personal Data You Provide to Us (Subscription Data)

We may collect personal data about you to provide our Services, respond to your requests, and manage your account with us. We collect this data via forms on our websites and apps, when you contact us or register an account, and in our communications with you. Where service components go beyond the base service, we provide you with clear choices to decide if you want these additional functions.

• Account. Name, email, date of birth, timezone and telephone number when you register or update your account.
• Billing and Payment. Billing name and contact details; payment is handled by our payment providers and we do not store card details.
• Communications and Support. Data you provide when you contact support, complete forms, respond to surveys or give feedback.

1.2 Data Collected Automatically When You Use our Services (Device Data)

We automatically collect data about your use of our Services to monitor for problems and look for opportunities to make improvements. Some of this data is collected using cookies and similar technologies.

• Website Data and Your Device Data. IP address and approximate (IP-based) location, browser and device type, operating system and diagnostic data (e.g., what is being requested, data about the device and app used to make the request, timestamps, and referring URLs, etc.).

Please refer to our Cookie Policy for more information regarding how we use our cookies.

2. How Do We Use Your Data (Subscriber/Parent/Guardian)?

1. Provide, Maintain and Support the Services. We use your Subscription and Device Data for this purpose on the basis that it is required to fulfill our contractual obligations to you. Examples include:

• usage data about how much bandwidth you use and how long you use our Services in order to provide the services in accordance with a plan to which you have subscribed;
• usage and device data to determine whether certain items pose a potential security threat;
• usage data to troubleshoot a problem you report with our Services and to ensure the proper functioning of our Services.

2. Improve and Secure the Delivery of Services. Where applicable, we use your Subscription and Device Data to help ensure the effective delivery of our Services and communications to you as well as to our other customers and partners based on our legitimate interest. Example includes:

• enable participation in interactive features of our Services.

3. AI Features: As part of the continuous improvement of our Services, we use our internally developed and third party artificial intelligence (“AI”) systems to provide certain functionalities, subject to your plan purchased. In this context, we apply data minimization measures and, where possible, pseudonymize personal data before processing Your Device Data through these AI systems. You can deactivate these features at any time in the app’s platform control panel, as well as exercise your rights in accordance with Sections 13 and Section 14.

4. Process Billing and Payment required to fulfill our contractual obligations in order to manage invoices and payments.

5. Communicate with You via email, SMS, push notifications or other messaging about the Services or relevant updates. We may do this in order to fulfill our contract with you, because you consented to the communication, or because we have a legitimate interest in providing you with data about our Services. Examples include:

• to notify you about changes to our terms or this Privacy Policy;
• to promote and administer co-branded offers with trusted partners;
• communicate commercial promotions or inform you about additional Services or features that we think you may be interested in.

6. Advertise and Market our Services, including Targeted Advertising, through the use of Cookies. For more details on targeted advertising and cookies, please see Section 8 (Tracking Technologies & Cookies) and our Cookie Policy. Examples include:

• usage data to administer promotional activities such as sweepstakes, contests, offers, promotions and referral programs.

7. Conduct Measurement, Research, and Analytics, including to Improve our Services. Examples include:

• analyze certain usage, device, and diagnostic data to understand aggregated usage trends and user engagement with our services (and, for example, invest in technical infrastructure to better serve regions with increasing user demand);
• use device data to conduct spam, scam, threat, fraud and other scientific research to improve our detection capabilities;
• improve our artificial intelligence (“AI”), machine learning, and related technologies to enhance our Services;
• review customer feedback to understand what we could be doing better;
• confirm sales conversions and conduct lead generation activities;
• usage data such as who or what referred you to our services to understand how effective our advertising is.

8. Use Aggregated / Anonymized / De-Identified Data for Any Purpose. Examples include:

• improve our AI and machine-learning algorithms to enhance our Services;
• improve our Services and developing new Services;
• improve our web site or apps;
• establish user general attributes and profiles;
• share such aggregated / anonymized / de-identified data with third-party service providers to improve or promote our Services.

9. Security Purposes, including Prevent Harm or Liability. Examples include:

• use Subscription Data, Device Data to determine if an entity is engaging in abusive or unauthorized activity in connection with our Services;
• investigate security issues.

10. Comply with Law, Our Legal Obligations, and Enforce our Rights. If we share your Subscription and Device Data for these purposes and based on our legal obligation, we would limit the data shared to what is legally necessary, and challenge requests that we believe are unlawful, overbroad, or otherwise invalid. Examples include:

• to comply with legal process;
• to respond to valid law enforcement requests relating to a criminal investigation, or alleged or suspected illegal activity that may expose Qustodio, you, or any of our other users to legal liability.

3. Who Do We Share Your Data (Subscriber/Parent/Guardian) With and Why?

In some situations, Qustodio may share your Subscription and Device data with third parties who may collect, store, use, process and transfer the data for Qustodio. Qustodio employs oversight processes and controls to the secure sharing of personal data with only trusted parties. Some of these providers are based outside the European Union, please refer to Section 11, for more information on International Transfers.

In General, we may disclose your personal data in the following circumstances:

1. In Accordance with Your Instructions or Consent.

2. Third-Party Sub-Processors / Service Providers. We may disclose the data we collect to sub-processors / service providers to help us operate some aspects of our Services. We work with trusted third parties and partners. In these cases, we enter into appropriate confidentiality and data processing agreements with these third parties, review their security practices, and limit data sharing to the scope of the delivery of Services. Examples include:

• hosting or maintaining the infrastructure required to provide our Services;
• processing customer payments and billing;
• providing sales and customer support;
• providing analytics about our Services to help us understand how the Services are being used;
• delivering our marketing and advertising content;
• powering AI Features (see Section 2.3 for more details).

3. With our Parent company, Aura Consolidated Group, Inc., its Subsidiaries and our Corporate Affiliates to support delivery of the Services under applicable data-protection standards. We and our affiliated entities may also share data with third-party data controllers where such sharing is legally required, such as with the use of certain cookies and related tracking technologies for compliance with specific geographic laws.

4. For Security Research Purposes. Aggregated, de-identified, or anonymized data may be shared with selected reputable members of the cybersecurity industry for the purpose of security threat research and facilitating community efforts to improve online security.

5. App Store Data for Apple Store and Google Play purchases. Please see the respective Apple Store and Google Play privacy policies for more information.

6. School / Business Customers (Linewize School Manager). Where you register for Qustodio Services through an invitation from a school, your basic identification data (such as sign-up name, and email address) may be disclosed to your child’s school for the purpose of verifying your family status as Qustodio users and so that the school may engage and support you in relation to your child’s usage of school and home devices. See Section 7 for more details.

7. In Connection with a Business Transaction. If a corporate transaction occurs, for example changes to ownership or control of all or part of our Services, assets, or business, sale of a website, initial public offering, or an investment entity is conducting due diligence in connection with an acquisition or investment, then we may share data necessary to that corporate transaction subject to appropriate confidentiality and security measures.

8. Aggregated, De-Identified, or Anonymized Data. See Section 2.8 for more details.

9. To Comply with Legal Process and the Law. See Section 2.10 for more details.

10. To Enforce Our Rights and Prevent Fraud and Abuse. See Section 2.10 for more details.

4. What Data Do We Collect from Your Child (User)?

In order to use our parental controls and monitoring services, we collect and process the following data from your child (the user) (Child’s Data):

• Communications Data. Qustodio parental controls and monitoring services capture the content of communications associated with any accounts you expressly authorize Qustodio to access. This content is not retrievable by Parents or other users through the Services. The data collected is exclusively used to provide Qustodio parental controls and monitoring services alerts to parents and to improve the delivery of our Services to you.
• Device Data from Monitored Devices. When a Monitored Device is set up, and depending on configuration and plan that you (subscriber/parent/guardian) enable, Qustodio will process:
  • device navigation, such as the websites visited or apps used;
  • the times and days allocated to such uses;
  • amount of screen time used;
  • certain persistent identifiers such as IP addresses, device identifiers, timezone, device type, carrier network, and an internal identifier;
  • precise device geolocation;
  • contacts;
  • messages;
  • other communications and content;
  • (if enabled), gaming audio (see next section);
  • On iOS, device traffic is routed through our servers to deliver filtering; via the MDM profile we collect domain names, user agent, OS version, search URLs to categorize/filter and report activity;
• Gaming Voice Alert and Social Monitoring Features. If activated, these features automatically analyse content to flag potential harms by transcribing gaming audio. Device Data is pseudonymized beforehand and then automatically analyzed by our AI system only to classify content. However, pseudonymization does not extend to personal data that users voluntarily disclose while using the services. This processing is carried out solely for the purpose of providing the relevant services of flagging harmful messages or conversations. You may deactivate this feature at any time in the control panel.
  • Audio processing for Voice Alert is only carried out during gaming when the device user activates and uses the microphone. Qustodio does not listen to or review any audio processed.
  • The audio is not stored or retained; it’s processed for a short period for its transcription to enable alerts.
  • We do not use any biometric data or voice recognition technologies.
• Keystrokes. If you activate Qustodio parental controls and monitoring services and add the Qustodio keyboard to your minor child’s device, we will collect the keystroke patterns of the child’s device and the platforms, apps, and websites those keystrokes took place. You may deactivate this feature at any time in the control panel.

5. How Do We Use Your Child’s Data (User)?

When you install parental controls and monitoring services on any devices operated by your children, Qustodio processes your Child’s Data for the explicit purposes described below.

Sale or Sharing of Data: We never sell personal data from the Qustodio parental controls and monitoring Services and we do not share data with third parties for their own marketing or advertising purposes, or creating advertising profiles. Additionally, our app is not ad supported, and we do not share personal data from our app with third party advertising services, and we do not advertise third party products in the Qustodio parental controls and monitoring Services.

• To Provide, Maintain, Troubleshoot, and Support Our Services. We have a legitimate interest in processing your minor Child’s Data to deliver the parental controls and monitoring services you have enabled, and to support your exercise of parental responsibility for your child’s online safety. Examples include:
  • to generate and provide you with insights into your minor child’s online behaviors;
  • block content or applications on your minor child’s device that you find objectionable;
  • identify which websites visited or apps used, as well as the times and days allocated to such uses.
• For Measurement, Research and Analytics, including to Improve and Develop New Services. Where applicable, we have a legitimate interest in using your Child’s Data to continually improve and optimize our Services by using your Child’s Data to help ensure the effective delivery of our Services and communications to you, for measurement, research and analytics, including to plan for and develop new services. Examples include:
  • to enable participation in interactive features of our Services;
  • to analyze certain usage, device, and diagnostic data to understand aggregated usage trends and user engagement with our Services;
  • to use device and threat data to conduct scientific research to improve our detection capabilities.
  • Use of Persistent Identifiers: As described in Section 4, we may collect and process certain persistent identifiers, including IP addresses and device identifiers. We use these persistent identifiers solely for the purpose of supporting internal operations such as analytics, research, and to overall improve our Services. We do not use persistent identifiers for behavioral advertising or creating a profile on any specific individual. We ensure that persistent identifiers are not used for unauthorized purposes by implementing strict policies and procedures, including technical and administrative measures. We retain persistent identifiers only for as long as necessary to support our internal operations. For details about how Qustodio shares persistent identifier data with third party service providers, please refer to the “Who Do We Share Your Child’s Data (User) With and Why?” section below.
• To Use Aggregated, Anonymized, or De-identified Data for Any Purpose. We may take steps to aggregate, anonymize, or de-identify any personal data we process, and may use such data for any purposes, which includes but is not limited to: regulatory compliance; research and analysis; product development, improving our Services; and training our AI, machine learning, and related technologies to enhance our Services.
• For Legal Compliance, to Prevent Harm, or Liability. We comply with our legal obligations to protect an individual’s vital interests or because we have a legitimate interest in preventing harm or liability to Qustodio and our users. We may internally use your Child’s Data as required by applicable law, legal process, or regulation, which includes but is not limited to: enforce our legal rights, resolve disputes and complaints, investigate security issues, and monitor and prevent fraud and abuse.

6. Who Do We Share Your Child’s Data (User) With and Why?

When you install parental controls and monitoring services on any devices operated by your children, Qustodio shares the above categories of personal data as follows with sub-processors / service providers as part of our continuous improvement process of our parental controls and monitoring services:

• Technical Service Providers. We share this data with our technical service providers to enable us to make our Services available to you. These sub-processors / service providers are contractually restricted from using this data for their own independent business purposes.

• Where Legally Required. We do not share this data with third parties unless required to comply with our legal obligations; to comply with legal process; and to respond to valid law enforcement requests relating to a criminal investigation, or alleged or suspected illegal activity that may expose Qustodio, you, or any of our other users to legal liability. If we share your data for these purposes, we limit the data shared to what is legally necessary and challenge data requests that we believe are unlawful, overbroad, or otherwise invalid.

7. Linewize School Manager

If your child’s school uses Linewize School Manager, we process that data as a sub-processor (or ‘service provider’) for Linewize, solely for the purpose of presenting that data to you via our user interface, under the instructions of the school. The school is the Controller (or ‘Business’). For the specific services of Linewize provided in conjunction with Qustodio, in addition to the general terms outlined in this Privacy Policy, the following applies:

• If your child’s school subscribed to Linewize School Manager, you may be able to see data about your child’s usage of the school’s devices (“School Manager Data”) on the Qustodio Service.
• We treat all data we process under the same conditions as for our Qustodio Service.
• In order to present the School Manager Data via our user interface, we use certain IT service suppliers indicated above who process the data for us (e.g., support, data management and analysis and user experience management, etc.).
• We will store the School Manager Data until the school requests us to delete them.
• Please contact the school for more details on the school’s privacy practices. Should we receive any data subject rights request from you as it relates to Linewize or the school’s processing of personal data, we will forward such request to the school.
• Should you have any questions on how School Manager processes your child’s data, please contact us at Privacy@Qoria.com.

8. Tracking Technologies & Cookies

Our website uses cookies and similar technologies. Some of our uses of cookies and/or pixels, however, may be considered a “sale” or “share” under applicable laws and regulations. Please see the Cookie Policy for the current list and more details.

9. Security

To safeguard your personal data against unauthorized access, modification, loss, or misuse, we have implemented comprehensive technical and organizational controls. These protocols are designed by evaluating the current state of technology, the precise nature of the compiled data, and the specific risk factors associated with its storage. We maintain risk-appropriate physical, technical, and administrative protections, which feature robust access management alongside data encryption both at rest and during transit. Although absolute security cannot be guaranteed by any framework, in the event of a qualifying data breach, we will initiate necessary countermeasures and alert you alongside the appropriate regulatory bodies as legally required, adhering to a 72-hour notification window when applicable.

Security Queries: DPO@Qustodio.com.

10. Legal Basis for Our Processing

Where the EU/UK GDPR applies, we rely on the following lawful bases for each purpose described in Sections 2 and 5:

Your Data (Subscriber/Parent/Guardian)

Your Child’s Data (User)

11. International Transfers

We may transfer your personal data to countries other than the one in which you reside, including the United States, to operate the Services. We do this to facilitate our operations, and transferees include our parent company and affiliates such as Aura, sub-processors / service providers, and partners. For all entities outside the European Economic Area (EEA), we use appropriate safeguards: the 2021 EU Standard Contractual Clauses (with a necessary transfer impact assessment) and the EU–US Data Privacy Framework; for the UK, the UK International Data Transfer Agreement or Addendum, the UK Extension to the EU-US Data Privacy Framework; for Switzerland, the Swiss-US Data Privacy Framework. For more details about our sub-processors / service providers that carry out international data transfers, please see Appendix 1 or contact DPO@Qustodio.com.

12. Data Retention

We will only retain your Subscription and Device Data and your Child’s Data for as long as reasonably necessary to fulfil the purposes we collected it for, including (a) provide the Services to you, the parent or legal guardian, (b) for the purposes of satisfying any legal, accounting, or reporting requirements, and (c) to follow your instructions regarding data collected from the devices. Residual copies of personal data may be stored in backup systems for a limited period as a security measure to protect against data loss.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

• Generally, we will retain Your Subscription Data for the duration of your subscription (in active format) and for 5 years thereafter (blocked), for legal and/or administrative purposes.
• We will retain Your Device Data and Your Child’s Data for a period of 60 days (in an active format for your access) and for 12-month periods to provide our annual behavior report (in an active format, but inaccessible to you).
• We will retain your Website Data only for as long as necessary to fulfill the purposes for which we collected it, including compliance with any legal, accounting, or reporting requirements, or until you or we deactivate your account. After this period, the data will be retained (in a locked and secure manner) for the period required by legal and administrative liability, as well as to comply with legal obligations and other purposes set out above, which may be up to 5 years under applicable law. For cookies data retention periods please refer to our Cookie Policy.

If you wish to remove Your Subscription/Device Data and/or Your Child’s Data in your Qustodio Account, please initiate a Privacy Rights Request in either Section 13 or Section 14 of this Privacy Policy below. In addition, through the app’s platform control panel, you may delete all historical data saved at any time. This data will no longer be accessible and will be fully removed from our systems on the next back-up.

13. Your Global Privacy Rights

If you live in the EEA, United Kingdom, Australia, or elsewhere outside of the United States you may have certain legal rights in relation to you or your child’s personal data. Subject to exceptions provided by applicable law, you may be able to exercise some of these rights. These may include the right to:

• Request Access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
• Request Correction of the personal data. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
• Request Erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your data unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
• Object to Processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your data which override your rights.
• Request Restriction of Processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
• Request the Transfer of your personal data to you or to a third party (known as “data portability”). We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated data which you initially provided consent for us to use or where we used the data to perform a contract with you.
• Withdraw Consent at Any Time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain Services to you. We will notify you if this is the case.
• File a Complaint to the Supervisory Authority. You have the right to file a complaint to the applicable supervisory authority, such as the UK ICO or local EEA authority. Specifically, you may contact the Agencia Española de Protección de Datos (AEPD), in Calle Jorge Juan,6, 28001 Madrid (www.aepd.es) if you consider that we are violating applicable data protection laws. Before contacting the AEPD, please do not hesitate to contact us at DPO@Qustodio.com, we will be happy to discuss our data protection practices with you and clarify any doubts you may have.

How to Exercise. Click on ‘Your Privacy Choices’ at the bottom of the screen, email DPO@Qustodio.com, submit a support request within the Qustodio Services, or write to Qustodio Technologies SLU, Roger de Flor 193, Bajos, 08013 Barcelona, Spain. As permitted by law, we may ask you to verify your identity before taking further action on your request. You will not be penalized or discriminated against for exercising any of the privacy rights described above, including:

• deny you goods or services;
• charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
• provide you a different level or quality of goods or services;
• suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Anonymity Note. We are unable to directly assist with your inquiry or complaint anonymously. In order to identify you as a current or former customer of Qustodio and to verify the Services, we require sufficient data that allows us to reasonably verify you are the person about whom we collected personal data or an authorized representative, which may include, but is not limited to:

• contact data associated with the account;
• the user profile name;
• the name of one or more Monitored Devices;
• technical data (e.g., model ID, serial number, IMEI code, operating system, etc.);
• any other piece of personal data we determine in our sole discretion to be sufficient for verifying your identity to a reasonable degree of certainty.

Verification Note. We cannot respond to your request or provide you with personal data if we cannot verify your identity or authority to make the request and confirm the personal data related to you or your child. You do not need to create an account with us to submit a request to know or delete. However, we do consider requests made through your password protected account sufficiently verified when the request relates to personal data associated with that specific account. We will only use personal data provided in the request to verify the requestor’s identity or authority to make it.

14. Your Privacy Choices (United States)

Qustodio complies with all applicable United States laws and regulations related to our processing of you or your child’s personal data. Where acceptable by law, we may require you to verify your identity before we fulfill your request, even if you utilize an Authorized Agent to complete such a request on your behalf. For personal data we have about you, click on ‘Your Privacy Choices’ at the bottom of the screen, as you may be able to exercise the following:

• Delete: You can ask us to erase or delete all or some of your personal data (e.g., if it is no longer necessary to provide Services to you).
• Access: You can ask us for a copy of your personal data in machine readable form.
• Object to, or Limit or Restrict the Use: You may have additional rights to limit the use of your ‘sensitive personal data’, which may include precise geo-location data.
  • For any sensitive personal data that we collect, we will only use or disclose it to deliver the Services you subscribed to, either with your specific consent when required, or as otherwise permitted by law.
  • As we do not use or disclose ‘sensitive’ personal data for any other purposes, we do not offer you an option to ‘limit the use of sensitive personal data’ other than through the settings and controls available to you through our Services, your browser, or mobile device operating system.
  • You may also choose to discontinue the use of these Services.
• Opt out Sale or Sharing: You may also have the right to opt-out of the ‘sale’ of your personal data, or the ‘sharing’ of your personal data for targeted or cross-contextual behavioral advertising purposes.
  • Qustodio does not ‘sell’ personal data as that term is commonly understood, but we enable third party advertising services to utilize pixel tags and cookies on our website or through other tracking technologies in order for us to advertise our products and services on other websites or mobile apps. These third party advertising services are considered to be categorized as a ‘sale’ or ‘share’ for targeted or cross-contextual behavioral advertising. You can learn more about this in our Cookie Policy.
  • You can opt out of these ‘sale’ and ‘sharing’ activities by clicking ‘Your Privacy Choices’ or by emailing us at dpo@qustodio.com.
  • This page also describes how we honor opt-out preference signals (aka; ‘Global Privacy Control’) which you may configure through your browser. We do not respond to what is formerly known as ‘Do Not Track’ signals.
  • Some of our Services enable parents or guardians to register or otherwise enable Qustodio to process the personal data associated with children under the age of 16. We do not knowingly sell or share personal data related to children under 16 years of age. See Section 15 of this Privacy Policy.
• Opt out of Automated Decision-Making: Applicable frameworks may require opt-out rights, or in some cases human review mechanisms, when AI is used to make “significant decisions” producing legal or similarly significant effects on a user.
  • Qustodio does not make “significant decisions” within the meaning of these frameworks, and accordingly these opt-out obligations do not apply to AI Features. Qustodio does not determine your eligibility, approval, or denial, to any financial service, credit product, insurance, housing, employment, or healthcare.
  • Qustodio also does not use your personal data to create profiles about you to inform decisions that have legal or similarly significant effects. Our parental controls and monitoring services may provide you with details which you may use to make your own decisions regarding your child.
• Correct: You can edit some of your personal data through your account and settings. You can also ask us to change, update, or fix your data in certain cases (e.g., it’s inaccurate).
• Unsubscribe from Marketing: Click the link at the bottom of our marketing emails, reply STOP via SMS, or email us at dpo@qustodio.com.
• Appeal: Some states allow you to appeal a denial of your request.
  • Residents of Colorado, Connecticut, Delaware, Florida, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, or Virginia: If we deny your original request, you can appeal the denial by following the instructions listed in the denial communication, or by submitting an Appeal Request via email at DPO@Qustodio.com.
• Lodge a Complaint: You may lodge a complaint directly via email at DPO@Qustodio.com.

You Have the Right to Not be Discriminated Against. Qustodio will not penalize or discriminate against you for exercising your privacy rights. Qustodio may, however, be unable to provide certain Services if the processing necessary for those features is restricted.

15. Age Restrictions

Our Services are designed for use in a household environment by a parent or guardian to monitor a child’s device activity, so a child’s personal data may be accessible to the parent-administrator and to Qustodio in operating the Services. Account administration is for adults; account holders must be 18 or older (or the age of majority where they live). If we discover that we have collected personal data from a minor without appropriate consents, we will delete such data immediately. For certain regions, parental consent may be required for processing the personal data of children under the age of 16 or the legal age required under the applicable law. In such cases, those under the age of 16 may not use the Services without the consent or authorization of their parent or legal guardian. If you are over the age of 16 and believe your personal data has been provided without your consent, you may contact us by emailing us at DPO@Qustodio.com.

16. Privacy Policy Updates

We may revise this policy from time to time and we will notify you of any changes. Review it occasionally so that you keep up-to-date on our most current practices. We will put the “Last Updated” date at the top of each policy. For material changes, particularly to how we process children’s data, we will give active notice (email or in-app), and where a change requires consent, we will ask for it. If you disagree with such an update to this policy, you may cancel your account and exercise your Privacy Rights.

17. Contact Us

We expect this Privacy Policy to evolve over time and welcome feedback from our users about our privacy practices. If you have any questions or complaints about our privacy practices, you can contact us via email at dpo@qustodio.com, or by mail to the following address:

• Controller: Qustodio Technologies SLU, Roger de Flor 193, Bajos, 08013 Barcelona, Spain.
• DPO: DPO@Qustodio.com.

18. Archived Versions

• Current Version: October 15, 2026. Updated entire sections of the privacy policy for readability.
• [Add a dated list of prior versions, mirroring Aura’s “Archived Versions” log].

Appendix 1 — Sub-Processors / Service Providers

Current list of third parties processing your personal data (Subscriber/Parent/Guardian) as sub-processors / service providers for Qustodio (all outside the European Economic Area (i.e., United States), under regulatory permitted processing). For Your Child’s personal data sub-processors / service providers for Qustodio, please see Section 6.