Quick answer: processing location and storage are different decisions. Cloud analysis can use audio or transcribed text without retaining either. Local analysis can still produce summaries stored online. Check each step, not just the label.
This guide is for parents comparing gaming-monitoring privacy. It explains audio capture, analysis, and retention, using published vendor policies rather than lab tests. It does not rank detection accuracy or replace each game's setup guide.
What "cloud-based" monitoring means
Cloud processing means a server performs some analysis. The data sent can be audio or text, depending on the product:
- Your child talks in voice chat (Roblox, Fortnite, Discord, etc.)
- Audio from that conversation is captured on the device
- The tool sends audio or locally transcribed text to external servers for analysis
- The servers analyse that data for potentially concerning patterns
- If something is flagged, you get an alert
What this means for privacy: some conversation data leaves the device, but that does not necessarily mean an audio recording is uploaded or retained. Halo's published policy, for example, says audio stays local while transcript text goes to its processing service by default, is analysed in memory, and is discarded. Separately, Qustodio says its Gaming alerts audio is processed automatically and never stored or accessible to Qustodio. That statement alone does not describe every processing step. Read each vendor's actual data-handling terms.
Published examples worth comparing:
- Halo's default cloud analysis: local audio processing, transient text analysis on its service
- Qustodio Gaming alerts: Windows voice alerts with a published no-audio-storage statement
Common concerns with cloud processing:
- "My child's voice conversations are on someone else's server"
- "What if there's a data breach?"
- "Who else can access the audio?"
- "How long is it stored?"
Ask separately about audio, transcripts, account information, and alert summaries. A promise not to store recordings does not mean the service holds no information about your family.
Coverage changes over time. Qustodio's Gaming alerts announcement, published on 10 March 2026, extended its controls to voice conversations on Windows. An older comparison of text filtering alone will miss that change. Check a policy alongside the current feature list, not an old description of the brand.
What "on-device" monitoring means
Local processing means a step runs on the device. It does not specify what happens to every other step or to saved reports. Halo's published flow is one example, not a definition of all local monitoring:
- Your child talks in voice chat
- Audio from that conversation is captured on the device
- Speech is converted to text on the device itself. Halo says audio never leaves the device and is deleted after processing.
- The text is analysed for danger patterns. By default this happens on Halo's secure service; parents can switch to fully on-device analysis with one toggle.
- Either way, transcript text is discarded after analysis. Safety scores and paraphrased summaries are stored for the parent to review.
What this means for privacy: Halo's audio stays on the device; transcript text is analysed remotely by default. Optional local analysis requires a one-time model download. In either mode, safety scores and paraphrased summaries are stored in Supabase. The privacy policy says session data is retained while the account is active and can be removed by deleting the account. There is still stored information to protect.
Why the difference matters
A concrete policy check: we compared Halo's two analysis modes across three data types: raw audio, transcript text, and parent-facing reports. The problem we encountered was ambiguous shorthand: "audio stays on the device" can be mistaken for "no data leaves the device." Checking each data type separately resolves that ambiguity.
| Data type | Default cloud analysis | Optional on-device analysis |
|---|---|---|
| Raw audio | Transcribed locally; not uploaded | Transcribed locally; not uploaded |
| Transcript text | Sent transiently for cloud analysis; not retained as a raw transcript | Analysed locally; not uploaded as a raw transcript |
| Safety scores and paraphrased summaries | Stored for the parent | Stored for the parent |
For most parents, the question boils down to: "Do I want my child's voice conversations leaving their device?"
If you're comfortable with cloud processing:
- You trust the company's data handling practices
- You've reviewed their privacy policy and it meets your standards
- The monitoring accuracy and platform coverage justify the trade-off
- You understand whether audio or text is transmitted, and accept the published handling terms
If you prefer on-device processing:
- You don't want your child's voice on external servers under any circumstances
- You're concerned about data breaches or third-party access
- "Privacy-first" is a requirement, not a marketing term
- You want the monitoring company to literally never hear your child's voice
Neither approach is wrong. It depends on where your privacy line is.
The practical comparison
| Factor | Cloud analysis: questions to ask | Halo's published implementation |
|---|---|---|
| Where audio is processed | Check whether audio or already-transcribed text goes to the server | On the device itself |
| Audio stored? | Varies by vendor. Qustodio says never stored. | No. Audio never leaves the device. |
| Audio transmitted? | Depends on the product; cloud text analysis need not upload audio | Audio: never. Transcribed text goes to Halo's service by default (then discarded). Fully on-device option available. |
| What the company can access | Check who processes audio or text and who can view retained reports | Safety scores and paraphrased summaries are stored; transcript text is processed transiently in cloud mode. |
| Data breach risk | Depends on transmitted data, retained records, access controls, and security | No audio or transcript stored. Halo stores safety scores and paraphrased summaries, not recordings or raw text. |
| Bandwidth usage | Depends on whether audio or text is transmitted and how often | No audio upload. Cloud mode transmits text; local mode needs a model download. Reports still sync. |
| Battery / performance impact | Capture and network activity still use device resources; no benchmark in this guide | Device and workload dependent; no battery or frame-rate benchmark in this guide |
| Monitoring accuracy | Not established by processing location alone | No independent cloud-versus-local accuracy comparison established here |
| Platform coverage | Product-specific; Qustodio Gaming alerts currently covers Windows | iPhone, iPad, Mac, Windows (voice and text chat in any game) plus Discord on Mac and Windows |
| Price | Check the vendor's current plan and required features | See the current in-app offer before starting a subscription |
What "privacy-first" should mean (and what to watch for)
When a company says "privacy-first," ask these questions:
- Where is the audio processed? On-device or cloud?
- Is audio ever stored? If so, for how long? Where?
- Is audio ever transmitted? Even temporarily for analysis?
- Who can access the raw audio? Engineers? Support staff? Law enforcement?
- What happens if you delete your account? Is audio permanently removed?
- Has the company had a data breach? What was affected?
Keeping raw audio local can reduce what is transmitted. It does not answer every privacy question: a tool can still store summaries, safety scores, or account data. Ask what those records contain and how to delete them.
Temporary processing and retained recordings are not the same. Before choosing, open the privacy policy and write down what leaves the device, what remains stored, and how you delete it. If an answer is missing, ask the vendor rather than assuming that either architecture is private by default.
Frequently asked questions
Is cloud-based monitoring safe?
It depends on the company's practices. Cloud processing is standard across many industries. The concern specific to voice monitoring is that children's live conversations are sensitive data. If the company has strong encryption, short retention, and good security practices, the risk is lower. But the risk is never zero when data leaves the device.
Does on-device monitoring work as well as cloud?
Processing location alone does not tell you how accurately a tool detects concerning conversations. The model, supported device, audio quality, and context all matter. We have not independently benchmarked the two approaches. Compare the vendor's supported devices and limitations rather than assuming that local or cloud analysis is always better.
Will on-device monitoring lag my child's game or drain their battery?
Local analysis uses device resources. The impact depends on the hardware, model, game, and session length. This guide contains no battery or frame-rate measurements, so we cannot promise zero or minimal impact. Try a normal session on your child's device and compare battery use, heat, and gameplay before relying on it.
Can I use both approaches?
You can combine tools with different processing models, but check device compatibility and overlapping features first. Halo itself offers default cloud text analysis or optional local analysis. In both modes, safety scores and paraphrased summaries are stored for the parent.
Which approach do most parents prefer?
We do not have representative survey evidence establishing a majority preference. Choose based on your family's needs: device support, the conversations covered, what leaves the device, what is retained, and how you can delete it.
Sources
- Halo Safe. "Privacy Policy." halosafe.app
- Qustodio. "Gaming Alerts." qustodio.com
- Qustodio. "Gaming alerts now covers Discord." Audio-processing and retention statement.
Disclosure: We make Halo, which is discussed in this guide as an on-device monitoring tool. We have tried to be straightforward about every approach's strengths and limits.
Source check, : we compared the linked policies by data type, processing location, retention, deletion, and supported platform. These are vendor-stated practices, not a security audit or independent accuracy, battery, or performance test. This update separates cloud text analysis from audio uploads and retained summaries from raw transcripts. Report a changed policy to hello@halosafe.app.
This guide is for informational purposes only. No monitoring tool can guarantee a child's safety online. If you believe a child is in immediate danger, contact local law enforcement.
