1. Information We Collect

Account information

When you create a DadOS account, we collect your email address. Providing a display name is optional — you can use the app without one.

Content you create in the app

DadOS stores the content you voluntarily add, including:

• Child first names and approximate ages (if you choose to add them — entirely optional)
• AI coach conversation messages
• Dad score entries
• Daily missions and debrief entries
• Memories you save
• Reminders you set

This content belongs to you. We store it so you can access it across sessions and devices.

Automatic and device information

When you use the app or visit the website, we may collect basic technical information such as your device type, operating system version, app version, and general usage patterns. This helps us keep the app stable and fix bugs.

AI coach interactions

When you use the Ask Coach feature, the text of your messages is sent to OpenAI's API to generate a response. See Section 4 for full details on how this works.

Marketing website email capture

If you submit your email on mydados.com (via our beta waitlist or launch notification form), we store your email address and the source of the submission (e.g., "homepage form") in a launch_emails table in our database. We don't collect any other personal information through the marketing site forms.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account, and authenticate you securely
• Operate and improve the DadOS app and its features
• Deliver AI coach responses via OpenAI's API
• Send you transactional emails (e.g., password resets, account notices) via Resend
• Send you marketing or product update emails if you've opted in — you can unsubscribe any time
• Diagnose technical issues, fix bugs, and improve performance
• Understand how the app is used in aggregate, to guide product decisions
• Comply with legal obligations

We do not use your personal data for advertising, sell it to third parties, or share it with anyone except as described in this policy.

3. Third-Party Services

We work with a small set of carefully chosen vendors. Here's who they are and what they do with your data:

Supabase

Our backend infrastructure — database (Postgres) and authentication — is hosted on Supabase in the us-west-1 region (United States). Your account data and app content are stored here. Supabase processes data on our behalf under a Data Processing Agreement. Supabase Privacy Policy.

OpenAI

When you use the AI Coach, your message text is sent to OpenAI's API (GPT-4). OpenAI does not use API-submitted data to train its models, per their API Data Usage Policy. Your conversation history is stored in our own database (Supabase), not at OpenAI.

Resend

We use Resend to send transactional emails (like password resets) and marketing emails (like beta updates and launch announcements). Your email address is shared with Resend for this purpose. Resend Privacy Policy.

Plausible Analytics

Our marketing website uses Plausible Analytics, a privacy-friendly, cookie-less analytics tool. Plausible does not collect any personal data, does not use cookies, and is fully GDPR-compliant. No personal information is shared with Plausible. Plausible Privacy Policy.

Cloudflare

Our marketing website is hosted on Cloudflare Workers/Pages. Cloudflare may process request metadata (such as IP addresses) as part of serving web content and providing DDoS protection. Cloudflare Privacy Policy.

Apple

The DadOS iOS app is distributed through Apple's App Store and TestFlight. Apple may collect certain data related to app installation, crashes, and purchases in accordance with their own privacy policy. If you purchase a subscription, payments are processed through Apple's in-app purchase system — we never see your payment card details. Apple Privacy Policy.

4. AI Coach — How It Works

The Ask Coach feature sends the text of your message to OpenAI's API. Here's what that means in practice:

• What goes to OpenAI: The text of your coach conversation messages (and enough context to give a coherent response).
• What OpenAI does with it: OpenAI uses the message to generate a response. Per OpenAI's API Data Usage Policy, data submitted via the API is not used to train OpenAI's models by default.
• What we store: Your full conversation history is stored in our database (Supabase) so you can review it later. You can request deletion of this data at any time.
• What the AI Coach is not: It is not a therapist, counsellor, medical provider, or crisis service. See our Terms of Service for important disclaimers. If you are in crisis, please contact emergency services or a crisis line.

5. Data Retention

We keep your data as long as your account is active. Specifically:

• Account data: Retained while your account exists. Deleted within 30 days of account deletion.
• App content (coach conversations, missions, debriefs, memories, scores, reminders): Retained while your account exists and deleted when you delete your account or request deletion.
• Marketing email addresses: Retained until you unsubscribe or request deletion.
• Logs and technical data: Typically retained for 30–90 days for debugging purposes.

After an account deletion request, we aim to remove your personal data within 30 days, except where we are required to retain it for legal or compliance reasons.

6. Your Rights

Depending on where you live, you may have certain rights regarding your personal data. We honour these regardless of jurisdiction — we just think it's the right thing to do.

Access

You can request a copy of the personal data we hold about you.

Correction

You can ask us to correct inaccurate or incomplete information.

Deletion

You can request that we delete your account and all associated personal data. You can also delete your account directly within the app.

Data portability

You can request an export of your data in a machine-readable format.

Opt-out of marketing emails

Every marketing email we send includes an unsubscribe link. You can also email us to opt out.

GDPR (EU/UK)

If you are in the European Economic Area or United Kingdom, you have additional rights under the GDPR / UK GDPR, including the right to object to processing and the right to lodge a complaint with your local supervisory authority.

CCPA (California)

If you are a California resident, you have the right to know what personal information we collect and share, the right to delete your personal information, and the right to opt out of the sale of personal information. We do not sell personal information.

How to exercise your rights

Email hello@mydados.com with your request. We'll respond within 30 days.

7. Children's Privacy

DadOS is strictly for adults (18+). It is an app for parents and caregivers — not for children. We do not knowingly collect personal information from anyone under the age of 13 (or under 16 where applicable under GDPR).

While users may optionally enter their child's first name and age to personalise the app's coaching, this information is entered by the adult user about their child — the child does not have an account and does not use the app.

If you believe that a child has somehow created an account or submitted personal information to us, please contact us immediately at hello@mydados.com and we will delete that information as quickly as possible.

8. Security

We take reasonable technical and organisational measures to protect your data. This includes:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Encryption at rest for database storage via Supabase
• Secure authentication via Supabase Auth (including hashed passwords — we never store plaintext passwords)
• Limited internal access to user data on a need-to-know basis

That said, no system is perfectly secure. We cannot guarantee that unauthorised access, disclosure, or data loss will never occur. If we become aware of a breach that affects your personal data, we will notify you as required by applicable law.

9. International Data Transfers

DadOS is operated from the United States, and we serve users in the US, UK, Canada, and Australia. Your data is primarily stored on servers in the us-west-1 region (United States).

If you are accessing DadOS from outside the United States, your data may be transferred to and processed in the US, which may have different data protection laws than your country. By using DadOS, you acknowledge this transfer.

For users in the UK and EEA, we rely on standard contractual clauses and adequacy decisions where applicable to lawfully transfer your personal data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we'll update the "Last updated" date at the top of this page and, where appropriate, notify you by email or via an in-app notification.

Your continued use of DadOS after a policy change constitutes your acceptance of the updated policy. If you disagree with a change, you may delete your account and stop using the service.

11. Contact

Questions, concerns, or requests about this Privacy Policy or your personal data? Reach us at:

DadOS
Email: hello@mydados.com
Website: mydados.com

We aim to respond to all privacy-related enquiries within 30 days.