Sensible Privacy Policy

Effective Date: February 2026 Last Updated: February 2026

Overview

Sensible ("we," "our," or "us") provides a parental monitoring service that allows parents to view their children's conversations with AI assistants (such as Claude, ChatGPT, Gemini, and Character.AI). This Privacy Policy explains how we collect, use, store, and protect information when you use our Chrome extension and web dashboard.

Important: Sensible is designed for parents to monitor their minor children's AI conversations. By using Sensible, you confirm that you are the parent or legal guardian of any child whose conversations are monitored.

1. Information We Collect

1.1 Parent Account Information

When you create a Sensible account, we collect:

• Email address
• Password (encrypted)
• Account creation date

1.2 Child Profile Information

When you add a child to monitor, we collect:

• Child's name or nickname (as entered by parent)
• A unique link code for device pairing

1.3 Device Information

When the Chrome extension is linked to a child's profile, we collect:

• Browser type and version
• Operating system
• Device token (randomly generated identifier)
• First connection and last activity timestamps

1.4 Conversation Data

When your child interacts with supported AI platforms, we capture:

• The child's messages (prompts) sent to the AI
• The AI's responses
• Platform identifier (e.g., Claude, ChatGPT, Gemini, Character.AI)
• Timestamp of the conversation
• Conversation thread/session identifiers

1.5 Safety Analysis Data

We automatically analyze conversations for safety concerns and store:

• Whether a conversation was flagged for review
• Severity level (low, medium, high, critical)
• Categories of concern (if any)
• Brief explanation of why content was flagged

2. How We Use Your Information

2.1 Primary Purpose

We use collected information solely to:

• Display your child's AI conversations to you (the parent)
• Alert you to potentially concerning content
• Allow you to manage linked devices

2.2 Safety Analysis

Conversations are analyzed using AI (Claude by Anthropic) to identify potentially harmful content including:

• Self-harm or suicide references
• Violence or threats
• Sexual content
• Illegal activities
• Cyberbullying
• Personal information sharing

This analysis happens automatically when conversations are captured. We do not use conversation content for any other purpose.

2.3 What We Do NOT Do

• We do NOT sell your data to third parties
• We do NOT use conversation data for advertising
• We do NOT share data with third parties except as required for the service (see Section 5)
• We do NOT train AI models on your child's conversations
• We do NOT retain data longer than necessary (see Section 4)

3. Chrome Extension Permissions & Limited Use Disclosure

3.1 Permissions Required

The Sensible Chrome extension requires the following permissions:

• Host permissions for supported AI platforms (e.g., claude.ai) to capture conversation data
• Storage to maintain the device link token locally
• Background service worker to capture conversations in real-time

3.2 Limited Use Compliance

Sensible's use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements:

1. Limited Use: We only use data to provide the parental monitoring service described in this policy
2. No Sale: We do not sell user data
3. No Advertising: We do not use data for advertising purposes
4. No Unauthorized Transfer: We do not transfer data to third parties except as necessary to provide the service, comply with law, or as part of a merger/acquisition with user notice
5. Human Access: Human access to data is limited to responding to support requests (with your consent), security investigations, legal compliance, and internal operations where data is aggregated and anonymized

4. Data Retention & Deletion

4.1 Retention Periods

• Conversation data: Retained for 90 days, then automatically deleted
• Alert data: Retained for 90 days, then automatically deleted
• Account data: Retained until you delete your account
• Device data: Retained until the device is revoked or account is deleted

4.2 Immediate Deletion

When you revoke a device:

• The device can no longer send new data
• Historical conversations from that device are retained for the 90-day period (for your reference)
• Device tokens are invalidated immediately

4.3 Account Deletion

You may request complete deletion of your account and all associated data by contacting us at hello@getsensible.app. Upon deletion:

• All parent account data is deleted
• All child profiles are deleted
• All conversation and alert data is deleted
• All device records are deleted

This process is completed within 30 days of request.

5. Data Sharing & Third Parties

5.1 Service Providers

We use the following third-party services to operate Sensible:

Provider	Purpose	Data Shared
Supabase	Database hosting & authentication	All stored data (encrypted)
Anthropic (Claude)	Safety analysis of conversations	Conversation text (for analysis only)
Vercel	Web application hosting	Account data, session tokens

These providers are contractually obligated to protect your data and use it only for providing their services to us.

5.2 Legal Requirements

We may disclose information if required by law, such as:

• In response to a valid subpoena or court order
• To protect the safety of a child
• To prevent fraud or security threats

5.3 Business Transfers

If Sensible is acquired or merged with another company, your data may be transferred. You will be notified via email before any such transfer, and this Privacy Policy will continue to apply until updated with your notice.

6. Children's Privacy (COPPA Compliance)

6.1 Parental Consent

Sensible is designed for use by parents to monitor their children. We do not collect data directly from children — all data collection is initiated by:

1. The parent creating an account and child profile
2. The parent installing the extension on their child's device
3. The parent providing the link code to connect the device

By linking a device to a child's profile, the parent consents to the collection of that child's AI conversations for parental monitoring purposes.

6.2 Child Notice

We recommend (and the extension displays) a notice to the child that their conversations are being monitored. The extension shows a small indicator when active.

6.3 Parental Rights Under COPPA

As a parent, you have the right to:

• Review your child's collected data via the dashboard
• Delete your child's data by removing their profile or contacting us
• Revoke consent by unlinking devices or deleting the child's profile
• Refuse further collection by uninstalling the extension

6.4 Age Limitations

Sensible is intended for monitoring children ages 17 and under. We do not knowingly collect data from adults who are not parents/guardians using the service.

7. Data Security

7.1 Technical Measures

We implement industry-standard security measures including:

• Encryption in transit: All data transmitted via HTTPS/TLS
• Encryption at rest: Database encryption for stored data
• Access controls: Role-based access with principle of least privilege
• Authentication: Secure password hashing, session management
• Device tokens: Randomly generated, revocable authentication tokens

7.2 Operational Security

• Regular security reviews
• Limited employee access to production data
• Audit logging of sensitive operations (e.g., unmasking conversations)

7.3 Breach Notification

In the event of a data breach affecting your personal information, we will:

• Notify affected users within 72 hours of discovery
• Notify relevant authorities as required by law
• Provide information about the breach and steps taken

8. Your Rights & Choices

8.1 Access & Portability

You can access all your data through the Sensible dashboard. You may request a complete export of your data by contacting us.

8.2 Correction

You can update your account information and child profiles directly in the dashboard.

8.3 Deletion

You can:

• Revoke individual devices (stops future collection)
• Delete child profiles (removes all associated data)
• Delete your account (removes all data)

8.4 Opt-Out

You can stop all data collection by:

• Uninstalling the Chrome extension from monitored devices
• Deleting your Sensible account

8.5 California Residents (CCPA)

California residents have additional rights:

• Right to Know: Request details about data collected
• Right to Delete: Request deletion of personal information
• Right to Non-Discrimination: Equal service regardless of privacy choices
• Do Not Sell: We do not sell personal information

To exercise these rights, contact us at hello@getsensible.app.

8.6 European Residents (GDPR)

If you are in the European Economic Area, you have additional rights:

• Right to Access: Obtain a copy of your data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive data in machine-readable format
• Right to Object: Object to certain processing activities

Our legal basis for processing is:

• Consent: You consent when creating an account and linking devices
• Legitimate Interest: Providing the parental monitoring service you requested

To exercise these rights or lodge a complaint, contact us at hello@getsensible.app or your local data protection authority.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes:

• We will update the "Last Updated" date at the top
• We will notify you via email for significant changes
• Continued use of the service after changes constitutes acceptance

10. Contact Us

If you have questions about this Privacy Policy or our data practices:

Email: hello@getsensible.app

For data protection inquiries specifically: Data Protection Contact: hello@getsensible.app

11. Summary Table

Data Type	Collected	Purpose	Retention	Shared With
Parent email	Yes	Account access	Until deletion	Supabase (hosting)
Child name	Yes	Profile identification	Until deletion	Supabase (hosting)
Device info	Yes	Device management	Until revoked	Supabase (hosting)
Conversations	Yes	Parental visibility	90 days	Supabase, Anthropic (analysis)
Safety flags	Yes	Alert parents	90 days	Supabase (hosting)

This privacy policy was last reviewed on February 2026.