Watch over the phone, not behind their back

Decide what the worry is

Every family that comes to this category has a worry, and it is almost never "I want to monitor my child". It is something narrower. A ten-year-old walks to school for the first time. An eleven-year-old joins a group chat with thirty people in it. A thirteen-year-old has started being awake at one in the morning. A fifteen-year-old has a new friend nobody has met. Write yours down in a sentence before you look at a single feature list, because the sentence tells you which tool you need and, more usefully, which ones you do not.

"Walks to school" is a Places problem: one saved place with an arrive alert, and perhaps a left-early alert for the afternoon. It is not a messages problem. "Group chat with thirty people" is a headers problem: you want to know when a new sender appears and whether the volume at midnight is unusual, and you do not need the words. "Awake at one in the morning" is a bedtime routine and nothing else. "A new friend nobody has met" is the one case where the keyword groups for meeting alone and grooming language earn their place, and even then they work on notification lines, not on a transcript.

The reason this matters is load. Every rule you switch on produces something to read, and every thing to read is a small withdrawal from a finite account of attention. A parent with twelve rules reads none of them properly by the third week. A parent with two reads both, every time, and acts on them. Pick the two.

Judging a vendor

Parental monitoring is sold with a lot of confidence and not much accuracy. Three questions sort the honest products from the rest. First, does the website say what the app cannot do? Android has not allowed a third-party app to read inside WhatsApp or Snapchat for years; what any app sees is the notification preview, and only when the child has previews switched on. A vendor who says "read all messages on all apps" is either describing a rooted phone or describing notification lines and dressing them up.

Second, how is it paid for? A monthly subscription creates a quiet incentive to keep you monitoring after the reason has passed, because cancelling feels like giving something up. GuestSpy takes no card. Every account starts with 10 days of full access, the core set stays free for as long as you use it, and extra access days and the advanced tools are earned with small jobs for us: a feedback survey, a bug report with a screenshot, a vote on what to build next, checking a translation, telling another parent. We will never offer days in exchange for an app-store review, because that would make the reviews worthless. The pricing page lists each task and what it earns.

Third, where does the child stand? Look for any promise that the child will not know the app is there, and walk away if you find one. A product built to hide from the person carrying the phone is built for a purpose that is not parenting, and the design decisions that follow from it, no icon, no notices, no consent, are the ones that break trust in a family. Then check whether the child app can be installed on the device you have: GuestSpy's child app is Android 9 or newer, there is no iPhone version yet, and we say so here rather than after you have made an account.

Which build to install

Google Play does not permit apps in this category to read message bodies, record calls, scan photos, use the camera on request or capture audio. So the child app comes in two builds. The Google Play build carries everything in the everyday set: location and Places, budgets, routines, app limits and blocking, the website filter, the notification-based alerts and keyword groups, weekly reports and tasks. The direct-download build, which you install as an APK from our site, adds SMS and call logs with content, call recording where the phone allows it, photo and video review, the remote camera, ambient audio and email subject lines.

Start with the Google Play build unless you have a specific reason not to. It updates on its own, it asks for fewer permissions, and the everyday set is what you will use on a wet Wednesday in February. If a concern arises later that genuinely needs message bodies, install the direct build on top; pairing and rules carry over. Two things to know first: Android will warn that the app came from outside the store, which is correct and expected, and every feature the direct build adds still sits behind a consent switch that only the phone can accept. The build on its own unlocks nothing.

Before you choose	Google Play build	Direct build
Everyday set: location, budgets, routines, blocking, filter, alerts, reports, tasks	Included	Included
Message and call headers, new-sender flags	Included	Included
Message bodies, call recording, email subjects	Not available	Consent switch on the phone
Photo and video review, camera, audio	Not available	Consent switch on the phone
Keeps itself updated	Automatically	Panel prompts you
Install warning from Android	None	"Unknown source", once

The conversation

Have it before the install, with the phone on the table and the Transparency screen open, so the list your child hears is the real one rather than "I can see everything". Go through what will be on, what will stay off, and what happens when something changes: it shows on their phone, and you will mention it anyway. Then let them ask. The three questions that always come are "can you read my messages", "can you see where I am all the time" and "can you see my photos". The honest answers are: not unless the bodies switch is on, and you will know because you have to accept it; the last fix and 30 days of history, but not a live feed; and only in the direct build, only with the photo switch on, and only the ones the phone flags.

Being able to answer precisely is what separates a child who shrugs from a child who feels watched. Vague monitoring feels total. Specific monitoring feels like a rule, and children live inside rules all day. With a teenager, offer something back: the camera and audio tools stay off unless both of you agree, for example. That is a small concession on your side and a large one on theirs, because it means the phone is not a device that can be switched into a listening post from another room.

Tell them what you will look at, tell them what you will not, and keep to the second list harder than the first.

If the child is older and the monitoring is a response to something that happened, say that too. "After last month we are going to have message headers on until the summer" is a sentence a fourteen-year-old can argue with, and an argument is far better than a discovery.

Rules that hold

A rule holds when the child can predict it. That means it is written somewhere they can see, it fires at the same time every day, and it does the same thing each time. GuestSpy prints tonight's bedtime in the child's app for this reason, and the wind-down warning fires ten minutes before a budget ends for the same reason. A rule that depends on a parent's mood, or on whether anyone remembers to enforce it, is not a rule; it is a negotiation that restarts every evening.

Set the budget from evidence. Pair the phone, turn on nothing but location and a bedtime, and wait for the first Sunday report. It will show the real figure: perhaps two hours and ten minutes on a school day, mostly video. A budget of ninety minutes set after that number is a cut the child can see and understand. A budget of ninety minutes set on day one, before anybody knew the real figure, is an insult or a joke depending on the child.

Use the ask. When the budget runs out, the child can request more time with a reason, and you answer with Give 20 minutes, Not tonight or Offer a task. "Offer a task" is the one to reach for most. It converts a dead end into a trade, Load the dishwasher for 20 minutes, and it hands the child a way to get what they want that does not involve wearing you down. Families who use the task answer tell us the asking itself drops off after a month, because the child already knows the price.

Three rules that are almost always right

• A bedtime routine, set a little later than you would like and kept without exception on school nights.
• "Ask me first" for new installs, which turns every app download into a thirty-second conversation instead of a discovery.
• The website filter with SafeSearch on, which the child will never notice until it stops something and offers "Ask to allow".

Living with alerts

An alert is a promise to interrupt you, so the number of them should be small. Start with arrive and left-early at School, and the crisis keyword group, and send everything else to the daily email digest. Push notifications for every blocked site or every new sender will have you muting the panel inside a fortnight, at which point the one alert that mattered gets muted with the rest.

Expect false positives and treat them lightly. The bullying group will match a joke between friends. The meeting-alone group will match a plan to meet at the cinema. The left-early alert will fire for a dentist appointment you forgot. Each of these is a few seconds to look at and mark handled, and the handled-by name means the other parent does not look at it twice. What you are buying with the false positives is the one true positive, and that trade is worth it only if you keep the total low enough to keep reading.

When a crisis word matches, the phone shows the child a helpline alongside raising the alert to you. We think that part is more important than the alert. A child who typed something frightening at midnight gets a number to call before a parent has even woken up, and a parent who reads the alert in the morning knows the child was not left alone with it.

Their privacy and yours

Monitoring a child is a privacy decision about two people. On the child's side, the rule we suggest is to look at the least that answers the worry. Headers answer "who is messaging them" without reading a single word. The video index answers "how much are they filming" without watching anything. The Wi-Fi history answers "did the phone settle somewhere" without a map. Each of these exists because the fuller version costs trust that you will want later.

On your side, the panel is a place where a great deal about your family is written down, so treat the account like a bank login. Turn on two-factor authentication under Security. Look at the sessions list once in a while and sign out anything you do not recognise. Give a second parent their own login rather than sharing one, so that every action carries a name. Location history is deleted after 30 days, logs after 90, flagged media after 14, and nothing in the account is sold or used for advertising; export and full deletion are both in the panel and neither requires an email to us. The privacy policy sets out each retention period.

A word on the law, because it comes up. For a parent or legal guardian supervising their own minor child, on a phone the family provides, with the child aware of it, monitoring of this kind is lawful in most countries. Ages and details vary by place, so check yours. GuestSpy is not for monitoring another adult, and using it that way is against our terms.

Loosening and stopping

The point of a rule is to become unnecessary, and the mark of a good one is that it has stopped firing. Review the set every school term. If the left-early alert has not fired since October, it has done its job and can probably go. If the budget has not been exceeded in a month, raise it or remove it and see what happens. If message headers were turned on because of one incident, set a date for turning them off and keep to it, because a child who sees a rule relaxed on schedule learns that rules are temporary responses to problems rather than permanent features of being a child.

Loosen in the reverse of the order you tightened. Bodies first, if they were ever on. Then headers. Then app blocks. Then the budget. Leave location and a bedtime until last, partly because they are the least intrusive and partly because most teenagers quietly prefer to keep both: location because their friends' parents have it too, bedtime because it gives them something to blame.

When it is time to stop entirely, unpair from the Devices page. Collection ends immediately, the phone shows that it is no longer paired, and the Transparency screen goes blank. Export anything you want to keep, delete the rest, and tell your child you have done it. That last sentence is the whole of this guide in miniature: the monitoring only ever worked because they knew about it.