Monitoring app and GDPR

About a year ago me and friend of mine created smartphone monitoring app/s with website, subscription and everything, we have about 50 customers with about 150 devices. About a half of the customers are located in EU, main servers are located in US and backup are in EU (Frankfurt).

About the app, lets say you have a young kid who has a smartphone and you want to know, with who he chats, what he watches on yt, what sites he visits and etc.

We are not registered as business, after we pay for servers we make enough for a dinner and a movie. It's nothing serious.

Because we do not make enough to quit our day jobs let alone hire lawyer is there way our app can survive in EU or do we have to block access?

Drop it. It's a gordian knot. You have 25+ different jurisdictions. Some are very harsh on privacy laws.

The problem I see with your application is the consent. You need specific consent by a party, say it's a legal guardian. I'm not sure if legally, in all EU countries, a parent can monitor a 16 or 17-year old's mobile. What happens if a parent installs your app to a 16 year old and leave it there when he turns 18?

From what you're saying it's not even worth pursuing, I mean you basically need a expert's law advice in every one of the 25+ EU countries.

Short answer. It does.

Get legal advice now!

As long as you are looking into GDPR and how it affects your business you can evolve it over time rather than completely change everything by the 25th.