Privacy Policy

Last updated: September 2026

What Shmira does

Shmira is a content-filtering browser extension and Windows companion app. It blocks explicit and social-media sites by domain, and — at its strictest filtering level — scans images on pages you visit before showing them, to filter out content that doesn't meet the standards you or your accountability contact set.

Image scanning

Images are first checked on your device using a built-in local model. For cases the local model can't confidently decide (images that appear to contain a person), the image is sent to Shmira's own server (api.getshmira.com), which forwards it to Google's Gemini API for a second opinion. That image is processed to return a classification. The extension caches scan results locally. Shmira's application does not save uploaded image files in its database. Video checks can also send titles, channel details, and thumbnails for analysis. See Google's Gemini API terms for how Google handles API requests.

What we store

• Accountability contact info — the email and phone number of the person who holds the admin password for a protected device, entered during setup. Used for setup links, password resets, approval requests, device notices, and support.
• Device state — filtering level, timezone, screen-time limits, and whether the software is currently installed and checking in.
• Screen-time records — domain or app names, dates, daily usage totals, time limits, allowed hours, and approved extra time. These records reveal which sites or apps have recorded activity and are available to the accountability contact.
• Approval requests — a short record of what was asked for (e.g. "more screen time"), descriptions and related request details, timestamps, and the accountability contact's decision. Requests can include site or video information.

Service providers process data needed to run Shmira: Cloudflare hosts the site/API and database, Google Gemini processes cloud analysis, Brevo delivers email, and Telnyx handles SMS. Optional support payments are processed by Stripe. We do not sell this information for advertising. Provider processing is governed by their applicable terms.

SMS & email

See our SMS opt-in policy for how consent to receive text messages is captured and how to opt out.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Data retention & deletion

Uninstalling marks a device removed; it does not automatically delete its contact, usage, or approval records. No automatic deletion period is currently configured for those records. To request deletion, email us at the address below.

Contact

Questions about this policy or your data: support@getshmira.com.