MyGuardz Privacy Policy

We are Brombul d.o.o., a limited liability company incorporated under the laws of the Republic of Croatia, registered office Rudeška cesta 246, 10000 Zagreb, Croatia, EUID HRSR.081145083, VAT number HR10843547902. We are the creators and owners of MyGuardz. In this policy we are "we", "us" or "our".

For the personal data described in this policy we are the data controller - except for the handling of an Alarm forwarded under Guard Cover, where we and the Response Partner are joint controllers. Section 8.2 explains what that means and what it means for your rights.

Capitalised terms have the meanings given in our Terms of Service.

How to reach us about anything in this policy: team@myguardz.com

This policy applies when you use the MyGuardz App, the MyGuardz Web, or any service reachable through them. It covers:

• data about you, as a User;

• data about other people you add - Circle members, Household members, people whose Homes you Support;

• data about people who receive an invitation from you but have not joined.

If you were added by somebody else and want to know what we hold about you, contact team@myguardz.com. You do not need an Account to ask.

We deliberately treat three different kinds of location data differently, and they are not interchangeable.

​

Level 1 - Whether you are home. Shown to your Household.

If you turn location sharing on in the app, your device tells us when it crosses a virtual boundary around the address of a Home on your Account, and your Household sees a small icon: in, or out. It updates as you come and go.

• It is not your coordinates. It is a single yes/no about one address.

• We do not keep a history of it. It is a current state, updated when your device tells us it changed.

• It is what makes "tell me if the home is empty" work.

• It is off unless you turn it on, it is a single setting covering every Home on your Account, and you can turn it off at any time - in the app, or by revoking location permission in your phone settings.

• It requires background location access, because your phone has to notice the boundary when the app is not open.

Legal basis: your consent.

​

Level 2 - Where you are. Shown to your Circle.

Your continuous location, shared only while an Alarm is running.

Setting a Stay With Me Timer does not share your location. Nothing is shared while a Timer runs normally. Sharing begins if an Alarm is raised - because the Timer expired without a check-in, or because you raised one - and it stops when the Alarm is closed.

Your Circle can see it during that window and not outside it.

Legal basis: performance of our contract with you - it is the service you asked for. In an emergency we may also rely on vital interests. Where your device requires it, we also rely on your consent to the operating system permission.

​

Level 3 - Where you are. Given to the Response Partner.

Your continuous location, shared with the Response Partner's Control Room only when an Alarm has been forwarded under Guard Cover, and only for as long as that Response takes.

Legal basis: performance of our contract with you for Guard Cover. In an emergency we may also rely on vital interests. The Response Partner relies on its own bases for the records it keeps afterwards - see §8.2.

​

What we never do

We do not build a location history. We do not profile you by where you go. We do not sell location data, and we do not share it with advertisers, data brokers or analytics companies.

Account data
Your name, mobile number, email address and age. We need your name and number so the people in your Circle know who they are helping; your email so you can recover your Account and receive notices; your age to confirm you are old enough (see §12).

Your Homes
The address of each Home you add. We need it to tell you whether Guard Cover is available there, to draw the boundary that powers the Presence Indicator, and - if a Call-Out is made - to say where.
A Home address is shared with your Household, and with the Response Partner only when an Alarm for that Home is forwarded under Guard Cover. It is only visible to your Circle during an active Alarm.

Location data
As set out in §3.

Your Circle, Household and invitations
The names and contact details you give us for people you invite. If they accept, they become Users in their own right. If they do not, we keep the invitation until you revoke it, and then delete it.
When you give us someone else's details, you are telling us you have their permission. Please make sure you do.

Alarm and Timer data
The fact that a Timer was set and its duration; whether you checked in; that an Alarm was raised and by what - you, the Timer, a Household member or a Connected Device; who joined the Alarm Chat and when; and the messages and images sent in it.
Timers run on our servers rather than on your device, so we hold the record of a Timer from the moment you set it, whether or not your phone is reachable.

Device and usage data
Device identifier, device type and settings, operating system, app version, language, crash reports and diagnostic data, and - on the MyGuardz Web - IP address, browser, pages viewed and time of access.

Connected Device data
The webhook or integration you configured, and the notifications it sends us. We do not access your device, your cameras or your smart-home account beyond the notification you set up.

Payment data
If you buy Guard Cover: the record of what you bought, when, for which Home or trip, and what you were charged. We do not see or store your full card number - payment is processed by Stripe.

Support correspondence
What you send us, and our replies.

When you register; add or edit a Home; invite someone to your Circle or Household; accept an invitation; set or extend a Timer; check in; raise or close an Alarm; send a message or image in an Alarm Chat; connect a device; buy Guard Cover; make a payment; verify your identity; contact support; or simply open the app.

Contract

We process personal data to provide the MyGuardz Service, including your Account, Timers, Alarms, Alarm Chats, live location sharing during Level 2 and Level 3 situations, Homes, Households, and Guard Cover. Without this information, we cannot provide the Service.

​

Consent

We rely on your consent for the Presence Indicator (home/away status), location permissions granted through your device operating system, and profile photographs. You can withdraw your consent at any time.

​

Legitimate interests

We process personal data where necessary to maintain the security and reliability of the platform, prevent fraud and abuse, investigate reports, resolve incidents, fix faults, and improve the Service. Before relying on this basis, we consider and balance your rights and interests. You have the right to object to this processing.

​

Legal obligation

We process and retain certain information to comply with applicable laws, including accounting, tax, and regulatory requirements, and to respond to lawful requests from public authorities.

To provide the service. To identify you, run Timers, raise and route Alarms, open Alarm Chats, share location at the level and for the duration described in §3, show your Household a Presence Indicator, check Guard Cover availability at your address, forward an Alarm to a Response Partner, and take payment.

​

To keep MyGuardz safe. To detectand prevent fraud, abuse and misuse - including the misuse of another person's location - to investigate reports under §8 of the Terms, and to enforce those Terms.

​

To support you. To answer your questions and resolve problems.

​

To improve the product. Usually with aggregated or anonymised data. Where personal data is needed for troubleshooting or testing, we rely on legitimate interests and use the minimum required.

​

To tell you things you need to know. Service messages, changes to these documents, receipts and invoices. These are not marketing and you cannot opt out of them while you hold an Account.

Marketing. We do not send marketing emails.

Other Users - because you asked us to

• Your Circle see your name, that an Alarm is running, your Live Location during it, and what is said in the Alarm Chat.

• Your Household see your Presence Indicator for that Home, and can raise an Alarm for it.

• People whose Circle you have joined see your name and that you joined their Alarm Chat.

• People you invite see your name and mobile number in the invitation.

The Response Partner
When an Alarm is forwarded under Guard Cover, we pass it to the Control Room of the Response Partner covering your area. The MyGuardz App tells you which company that is, and gives you their details, before you buy Guard Cover.
From the moment an Alarm is forwarded, we and the Response Partner are joint controllers of your data for the handling of that Alarm. They decide, in their own professional judgement, whether to make a Call-Out, and they keep their own record of what happened.
What is shared, and only for that Response: your name, contact number, Live Location or Home address, and any details you have configured to accompany an Alarm.
We do not give them your Alarm Chat, your Circle's details, or the personal data of any Household member under 18.
The Response Partner is separately a controller, on its own account, for the records it must keep after a Response - for its licensing, its insurance, the safety of its own staff, and any investigation or dispute. We do not control those records and we cannot delete them on your behalf. Their privacy notice explains what they keep and for how long, and it is linked in the MyGuardz App.
If there is a dispute about a Response, we may share the record of the request in order to resolve it.

Our processors
We use carefully selected service providers to help us operate MyGuardz, including hosting, storage, push notifications, SMS verification, payment processing, identity verification, diagnostics, and support. They process personal data only under our instructions, under contract, and only for the purposes needed to provide the service. We keep an up-to-date list of our main service providers, their role and processing location, and we can provide it on request.

Authorities
We disclose data to law enforcement or a public authority where we are legally required to, or where it is strictly necessary to prevent, detect or prosecute a crime, or to protect someone's life. We ask for a lawful basis before disclosing, and we tell you unless we are prohibited from doing so.

Business transfer
If our business is sold or merged, data may transfer to the acquirer, who will remain bound by this policy or a policy no less protective. We will tell you first.

Who we never share with
Advertisers. Data brokers. Anyone buying data.

We do not use solely automated decision-making that produces legal or similarly significant effects for you.

Your data is held in the European Economic Area.

Transfers to the United Kingdom. The Response Partner for the United Kingdom, and its Control Room, are in the UK. Transfers of personal data from the EEA to the UK are permitted under the European Commission's adequacy decisions, which were renewed on 19 December 2025 and run to 27 December 2031. If that adequacy is withdrawn or lapses, we will put Standard Contractual Clauses in place.

​

Where a processor is outside the UK or EEA, we transfer data only where an adequacy decision applies, or under Standard Contractual Clauses (with the UK International Data Transfer Addendum where UK data is involved), together with any additional safeguards the transfer requires. You can ask us for details of the safeguards for any specific transfer.

We retain Alarm Chat records for a limited period after an Alarm is closed for evidential purposes and to support the resolution of complaints or disputes. After that period, the records are permanently deleted unless continued retention is necessary for the establishment, exercise, or defence of legal claims, compliance with legal obligations, or requests from competent authorities.

We may access, scan or retain a communication for longer where it is necessary to investigate a report of abuse, to prevent fraud or a threat to safety, to comply with a legal obligation, or to provide support you have asked for. We may block or review content we reasonably believe is malicious, is spam, or presents a risk to you or another User.

We have no access to anything you say outside MyGuardz - a phone call, a text message or another app.

You must be 18 or over to hold an Account, be in a Circle, Support another person or Home, or buy Guard Cover.

A person under 18 may be added to a Household only by an adult User who is their parent or legal guardian, or who has that person's verifiable consent. The adult who adds them controls the child's use of MyGuardz and has the contractual relationship with us; the child does not.

Where a Household includes a person under 18, we do not share their personal data with a Response Partner.

If we learn that we hold a child's data without valid consent, we delete it. If you believe we hold data about a child in error, tell us at team@myguardz.com and we will act promptly.

We keep personal data only for as long as necessary to provide the service, maintain the security and integrity of MyGuardz, comply with legal obligations, resolve complaints and disputes, process payments, and establish, exercise, or defend legal claims.

Different categories of data are retained for different periods depending on their purpose and the nature of the service provided. For example:

• Account information is retained while your Account remains active and for a limited period thereafter.

• Home information is retained while associated with an active Home and for a limited period thereafter.

• Presence information is generally maintained only as a current status and is not retained as historical records.

• Live Location data is retained only for the period necessary to provide the requested Service.

• Timer, Alarm, Guard Cover, payment, support, security, and diagnostic records may be retained for longer where necessary for operational, evidential, legal, regulatory, fraud-prevention, safety, accounting, or customer-support purposes.

• Alarm Chat records are retained in accordance with Section 11.

We may retain information for longer where:

• required by applicable law;

• necessary to comply with a request from a competent authority;

• necessary to investigate fraud, abuse, security incidents, or threats to safety; or

• necessary to establish, exercise, or defend legal claims.

• When personal data is no longer required for these purposes, we delete it or irreversibly anonymise it.

We encrypt data in transit and at rest. Access is restricted to staff who need it and is logged. Your passcode is stored only in hashed form and is never visible to us - which is why a valid email address on your Account matters, since without one you cannot recover access.

We use reputable cloud service providers that maintain recognised security certifications, including ISO/IEC 27001 or equivalent standards, and we periodically review our security arrangements.

No system is perfectly secure. If a breach occurs that is likely to result in a high risk to your rights and freedoms, we will tell you without undue delay, and we will notify the relevant supervisory authority within 72 hours as required.

You have the right to:

• be informed - this policy;

• access your data and receive a copy;

• rectify anything inaccurate - most of it you can correct yourself in the app;

• erase your data, in the circumstances the law provides;

• restrict processing in certain circumstances;

• object to processing based on legitimate interests, and to direct marketing at any time;

• portability - receive the data you gave us in a machine-readable form, or have it sent to another controller;

• withdraw consent at any time, without affecting processing already carried out on that basis;

• not be subject to solely automated decisions with legal or similarly significant effects.

To exercise any of these, email team@myguardz.com. We respond within one month, and will tell you if we need longer because a request is complex. We do not charge, unless a request is manifestly unfounded or excessive.

​

Requests about an Alarm handled under Guard Cover.

Because we and the Response Partner are joint controllers for that handling, you may make your request to either of us. Email us and we will act on what we hold and pass on the rest.

​

Withdrawing location consent.

You can turn location sharing off in the app, and revoke location permission entirely in your phone settings. Some features will stop working - the Presence Indicator, "tell me if the home is empty", and Live Location during an Alarm. Timers and Alarms will still notify your Circle, but without a location.

​

Complaints.

If you are unhappy with how we have handled your data, please tell us first - we would rather fix it. You also have the right to complain to a supervisory authority:

• UK: Information Commissioner's Office, ico.org.uk

• Croatia: Agencija za zaštitu osobnih podataka (AZOP), azop.hr

• Or the authority in your country of residence.

We will keep this policy up to date, and the date at the top always shows when it last changed. If we intend to use your data for a purpose we have not described here, we will tell you before we start, and where the law requires it we will ask for your consent.

Material changes are notified at least 15 days in advance, by email or in the app.

Brombul d.o.o., Rudeška cesta 246, 10000 Zagreb, Croatia

Everything in this policy: team@myguardz.com