Privacy Policy

What Fabric does

Fabric helps parents or guardians manage a child device's standard SMS/MMS texting and cellular calling boundaries. Fabric is not a messaging relay, social network, or hosted calling service. Child texts and phone calls use the device, Android, carrier, and recipient systems. Fabric does not host child chat content or voice calls.

Information we collect

Fabric collects only the information needed to provide account setup, pairing, policy sync, protection status, and deletion support.

• Parent and child phone numbers used for phone verification, account recovery, pairing, support, and account deletion requests.
• Family and child profile information, such as family name, child display name, app pairing status, and policy settings created by the parent.
• Device and app status, such as app identifier, app version, default SMS or dialer role status, required permission status, applied policy version, coarse health status, and recent heartbeat time.
• Encrypted policy, request, and metadata envelopes that allow parent and child apps to sync contact approvals, group review status, requests, and protection state.
• Push notification routing identifiers for parent wake-up notifications, such as Firebase installation or registration identifiers.

Information Fabric may access on the device

Depending on which Fabric app you use and which Android permissions or default-app roles you grant, Fabric may access SMS/MMS, contacts, phone, call log, voicemail, notification, camera, and related device data. This access is used only for Fabric's child safety and communication-boundary features.

SMS/MMS message bodies, call audio, voicemail audio, voicemail transcripts, and detailed call logs remain on the child device unless Android, the carrier, the recipient, or another app handles them outside Fabric. Fabric does not store SMS/MMS bodies, call audio, voicemail audio, voicemail transcripts, or detailed child communication logs.

What developers can see

Fabric is designed so Off By One Labs developers cannot read family policy contents, child contact lists, message content, call content, voicemail content, or child communication details stored in Fabric. These items are encrypted before they are sent to Fabric and are decrypted locally by the paired parent or child app.

The primary account information visible to Off By One Labs for support and deletion purposes is the verified phone number associated with a parent or child app account.

How we use information

• To verify parent and child app phone numbers.
• To create and recover parent-managed family accounts.
• To pair parent and child apps.
• To sync encrypted parent policy settings to child apps.
• To route encrypted child requests and metadata back to the parent app.
• To show protection health, such as missed heartbeats, lost default-app roles, blocked permissions, or stale policy versions.
• To process support, export, and deletion requests.
• To keep the service secure, reliable, and compliant with applicable law.

Sharing

We do not sell personal information. We do not share personal information for advertising. We do not share child communication content with third parties.

Data may be processed by service providers that help operate Fabric, such as cloud hosting, SMS verification, push notification delivery, and app platform services. These providers process information only as needed to provide those services to Fabric. We may also disclose information if required by law, legal process, safety, security, or a business transfer with appropriate notice.

Security

Fabric uses HTTPS for data in transit. Sensitive policy, request, recovery, and child metadata payloads are encrypted before being stored by Fabric. Fabric stores encrypted envelopes and routing metadata but does not receive the keys needed to read the encrypted family policy or child communication metadata.

Retention and deletion

We keep account and service data only as long as needed to provide Fabric, comply with law, resolve disputes, maintain security, or complete deletion and support workflows.

Parents may request account and associated data deletion from inside the app or by contacting support@offbyonelabs.io. Please include the verified phone number associated with the account so we can locate the correct records. When a child profile is deleted, Fabric deletes that child's server-side profile, pairing records, policy snapshots, requests, device records, and encrypted child metadata envelopes. Child devices may still retain local SMS/MMS, call, voicemail, contact, and app data until the device owner resets the app, changes default apps, deletes local records, or uninstalls the app.

Children and parents

Fabric is intended to be set up and managed by a parent or guardian for child safety. Parents control family setup, child pairing, contact approvals, budgets, and deletion. If you believe a child is using Fabric without appropriate parent or guardian involvement, contact us.

Carrier and Android systems

Fabric Messages and Fabric Phone use standard Android, carrier SMS/MMS, voicemail, and cellular calling systems. Carriers, Android, recipient devices, recipient apps, backups, and emergency or telecom systems may process communications independently of Fabric.

Changes

We may update this Privacy Policy as Fabric changes. If we make material changes, we will update the effective date and provide notice as required by law or app platform policy.