Effective date: 16 September 2026
TripleIT Safeguard is a web-filtering service for school-managed Apple devices. The school deploys and configures Safeguard through its device-management system and controls the filtering policy applied to its devices. This policy explains the information handled by the Safeguard iPhone and iPad app and its supporting service.
Safeguard may handle the following information when it is enabled by a school:
Safeguard does not collect page content, passwords, keystrokes, complete URLs, URL paths or query strings, or search terms. It does not include advertising or third-party behavioural analytics.
The information is used only to:
Safeguard does not sell personal information, use it for advertising, or track people across apps or websites owned by other companies.
Information is available to authorised administrators of the school that manages the device and to TripleIT where necessary to operate and support the Safeguard service. It may also be processed by infrastructure providers used to securely host and deliver the service. Information is not shared with data brokers or advertising networks.
TripleIT may disclose information where required by law or where reasonably necessary to protect the security and integrity of the service.
Hostname activity is retained for the period selected by the school, from 1 to 365 days; the default is 30 days. Expired activity is removed automatically at least every six hours. Managed-device, policy, health, and administrative records are retained while needed to provide, secure, and administer the service, or as required by the school or applicable law.
Safeguard uses encrypted HTTPS connections, access-controlled administration, hashed enrollment and device credentials, and cryptographically signed policy documents. The on-device data provider is separated from the control provider and cannot send captured network content off the device.
No method of storage or transmission can be guaranteed to be completely secure, but Safeguard is designed to minimise the information collected and to limit access to authorised purposes.
Safeguard does not provide consumer accounts to students and does not ask students to submit personal information. The school determines which managed devices receive Safeguard and administers the associated filtering and reporting settings. Questions about a school’s use of Safeguard should first be directed to that school’s IT or privacy contact.
For information associated with a school-managed device, contact the school that manages the device. You may also contact TripleIT about Safeguard privacy or security through the TripleIT contact page.
This policy may be updated if Safeguard’s features or data practices change. The effective date at the top of this page will be updated when changes are published.