CueProtect

Privacy

Last updated November 3, 2026. This covers the CueProtect app for iPhone and Android and cueprotect.com.

Photos of letters, texts and other images

• When you check a photo, it's sent once to the CueProtect service to be read and checked. Hidden details such as location are removed from the photo first.
• CueProtect doesn't keep your photos or what they say. After the check, they're gone from our service.
• To read and check images, CueProtect uses Claude, an AI service from Anthropic. Before your first photo is sent, the app asks your permission to share it with Anthropic. Anthropic receives the image for that check and may keep it for a limited time under its commercial data terms. CueProtect itself doesn't keep it.
• Photos can contain names, addresses or account numbers. You can cover anything you'd rather not share before taking the photo.
• The words of a letter stay on your phone until you start a new letter.
• CueProtect never opens links or calls numbers found in your images.

Calls

• If your family set up call screening, the Calls area shows the calls and messages it screened. It opens only with your PIN, or your fingerprint or face if you turn that on. Your fingerprint or face is checked by your phone and never sent to us.
• No call audio is recorded. A short call history (time, number if shown, who the caller said they were, what happened, and whether warning signs were found) is kept encrypted for up to 30 days. Messages callers leave are kept encrypted until you delete them or 30 days pass.
• If you set a family code word, it is stored encrypted and used only to check callers who say they are family. The screener never says it.
• More detail: call screening privacy.

AlarmCue

• AlarmCue texts the few people you choose, with your location, when you ask it to. It does not call 911 or any emergency service.
• Your location is used when you send an alert or turn on Watch my trip. During a trip, your circle sees your location only if the trip triggers a check-on-me alert. Ending the trip deletes its location data. See the AlarmCue privacy and texting terms for trip details. The app asks your phone's permission first. The live location link stops updating after one hour. Until the alert is deleted, it still shows the last place your phone was seen, unless you said you are safe. No location is kept longer than two days.
• The names and mobile numbers of the people you add are stored encrypted. Each person must reply YES to be added and can reply STOP at any time.
• Someone in your circle can pass on a view-only copy of your alert link, for example to a police officer. It shows the same map and stops working the same way.
• If you ask your circle to call you after a scam check, they get one text saying a message asked you for money. The message itself is not sent to them.
• If you add your own mobile number for the daily check-in or for checking texts, it is stored encrypted and nothing is sent to it until you reply YES. Reply STOP to turn it off. For the daily check-in we keep only the times it was sent and answered.
• Texts and screenshots you send to CueProtect to check are handled like photos in the app: photo data is removed, they are checked by Anthropic’s Claude AI service, and we don’t keep them.
• We don't sell or share phone numbers or locations, and we don't use them for marketing.
• More detail: AlarmCue privacy and texting terms.

iPhone app analytics

• The iPhone app includes Meta's software development kit (SDK). It tells Meta that the app was installed and opened, along with basic device information such as the phone model and app version, so we can measure how people find CueProtect.
• It does not receive your name, phone number, location, photos, mail or anything you type, and we turn off Meta's advertising ID collection.
• Meta handles that information under its own privacy policy.

Optional feature usage analytics

To understand which CueProtect features are used and improve reliability, CueProtect may send limited feature-use events to PostHog. These events include actions such as setting up AlarmCue, adding a trusted contact, or starting an alert or trip. The data uses a pseudonymous identifier generated by CueProtect and does not include your name, telephone numbers, precise location, messages, photos, call transcripts, safety codes, or alert links. Incoming screening call counts are tracked in aggregate rather than linked to a caller. We do not use this data for advertising or sell it. To ask about this data, email support@cueprotect.com.

Error reports

When something breaks in CueProtect (a page error or a server error), a short report is sent to Sentry so we can fix it: what went wrong, where in our code, the page's address and your browser or device type. It never includes your photos, letters, texts, phone numbers, calls, email address or IP address. Sentry keeps these reports for up to 90 days.

What we don't do

• No ads, and we don't sell your information.
• No account or login is needed to check mail or images.

Website sign-ups

If you sign up on cueprotect.com, we keep your email, and your first name and who you'd like to protect if you give them, encrypted on our server. We use them only to email you about what you asked for. We don't sell or share them, and the CueProtect apps don't collect them. Email support@cueprotect.com to be removed at any time.

Questions

Email support@cueprotect.com. CueProtect is part of CueVerse, from KiddoCue LLC.