Effective Date: September 15, 2025
Hello Dad! During your time with DadHack, you'll discover how to level up your dad game and build better habits that support your family goals. It's a very personal journey! To give you the best support, we collect personal information from you along the way.
This Privacy Policy ("Policy") describes how LifeHack, LLC, ("LifeHack," "we," "our," or "us") collects, uses, discloses, and otherwise processes your personal information when you use our DadHack Services (use of our Site, Mobile App, and other interactions you may have with us). This includes your choices and rights regarding your personal information. This Policy forms a part of Terms of Service and terms used but not defined in this policy are defined in the Terms of Service.
First things first, you have to be at least 18 years old to use DadHack. Do not use these Services if you are under the age of 18. Our Services are not designed nor otherwise intended for children or anyone under 18.
Age Verification: We verify your age during account creation by requiring your date of birth in our assessment process. If we discover that someone under 18 has provided us with personal information, we will immediately delete their account and associated data. The ages of your children that you may provide are used solely to customize parenting advice (as advice for a 2-year-old differs significantly from advice for a 15-year-old) and are voluntarily provided by you.
While our Policy might be comprehensive, we hope you do read it. These quick topics might help!
• What information does DadHack collect? DadHack collects information from you directly when you create an account, use our Services, and through third parties.
• How does DadHack use the information it collects? DadHack uses your information to provide you with our Services, show you relevant ads and content, and improve the quality of our Services.
• Does DadHack sell my information? While DadHack does not expressly "sell" information to others, certain uses of Functional Cookies and/or Targeted Advertising Cookies on our website to collect, use, and disclose information may constitute "sales" or "sharing" of personal information or the use of personal information for "targeted advertising" purposes under applicable privacy laws.
• How does DadHack share my information? DadHack shares your information with service providers, business partners, and other third parties to provide you with our Services.
• Does DadHack permit users to choose whether they receive personalized ads and marketing content? Yes.
We follow data minimization principles - we only collect personal information that is necessary to provide and improve our Services. We regularly review our data collection practices to ensure we're not collecting excessive information.
We may collect personal information directly from you, automatically through your use of the Services, and from third-parties.
Personal Information We Collect Directly from You
Account and Profile Information. This includes your name, email address, general location information (country/zip code), profile image or photo (if you choose to provide one), username and password, date of birth, and gender.
Assessment Data. We collect information through our DadHack ONE assessment and other evaluation tools that help us understand your current situation as a father. This includes your responses about:
• Energy levels, confidence, balance, and self-care practices
• Parenting effectiveness and emotional regulation
• Mental health indicators including stress, anxiety, and depression symptoms
• Substance use patterns
• Health conditions and medication use
• Family dynamics and relationship status
• Work-life balance challenges
Social determinants of health including:
• Education level and employment status
• Health insurance coverage and access to healthcare
• Primary language spoken at home
• Race and ethnicity (optional)
• Internet access and digital resources
• Social support availability
• Financial stress indicators
• Access to medical care and appointments
This assessment data includes sensitive personal information about your mental health, physical health, social circumstances, and family situation. We collect this social determinants data to provide personalized support that addresses barriers you may face in parenting and accessing resources. We use enhanced protections for this sensitive data as described in the "How We Protect Your Information" section.
For European Users: We obtain your explicit consent before collecting sensitive assessment data. You can withdraw this consent at any time in your account settings, though this may limit some Service features.
Information About Your Children. While DadHack users must be 18 or older, our Services collect information about your minor children to provide personalized parenting support. This includes:
• Your children's ages and developmental stages
• Health conditions or diagnoses (e.g., ADHD, autism, learning differences)
• Behavioral patterns and challenges
• School and academic information
• Social and emotional development
• Photos that may include your children (if you choose to share them)
Enhanced Protections for Children's Data: We treat information about your children with special care:
• This data is never sold, shared for marketing, or used for behavioral advertising
• Access is restricted to essential personnel only
• Data is encrypted with additional security layers
• You can delete all children's data immediately upon request
• We do not create profiles about your children for any purpose other than providing parenting support
• Children's health information is stored separately with enhanced encryption
• We comply with COPPA principles even though we collect data from parents, not children
You maintain full control over this information as described in "Your Privacy Rights" section.
Parenting and Family Data. Certain features of our Services allow you to voluntarily share information about your parenting journey, including:
• Parenting challenges and goals
• Family composition and dynamics
• Parenting strategies you're implementing
• Dad categories and focus areas
• Family activities and milestones
• Progress photos and achievements
• Co-parenting arrangements and custody information
Communications with DadHack. This includes your email address, name, and any other content provided when you communicate with us, including exchanges with our personnel and Support Center chatbot.
Communications posted on social media pages, community forums, and online discussion groups. This includes posted content and related contact information you provide when interacting with our social media pages, online discussion groups, or public-facing community forums sponsored by or affiliated with DadHack.
Information you exchange with other DadHack users. We may receive the personal information you exchange with other DadHack users (like your name, email address, parenting entries, photos, dad goals, and achievements) through our user messaging channel via the "Dad Community" feature.
Research and Survey information. This may include information you provide if you participate in research and surveys, such as contact information, feedback, and other information you choose to provide.
Events and Registration Details. This may include information related to your participation in our events (if any) as may be collected when you register for such events.
Preferences and Other Requests. This may include information about your preferences, including communication preferences, preferences related to your use of the Services, and any other preferences or requests you provide when interacting with us.
Payment information. If you pay for a Premium Subscription through our website, you may be asked to provide payment information. This information is not directly collected or stored by DadHack but instead, is collected by a third party payment platform LifeHack uses to facilitate the transaction.
DadHack may collect Usage and Device Data. This may include details about your browser, operating system, or device (such as your cookie identifiers, internet protocol (IP) address, mobile advertising identifier, and other unique identifiers), internet service provider, mobile carrier, general location information (including inferred location based off of your IP address), actions that you take while using the Services, information about how you interact with the Services, including the frequency and duration of your activities, information about the links you click, and other information about how you use the Services.
DadHack may collect information, such as usage and device data, from you automatically through cookies and other tracking technologies (collectively, "Cookies") we use to enhance your experience when you use our Services.
We use Cookies for a variety of purposes, including to make our site work, ensure security, and prevent fraud (Required Cookies); to provide enhanced functionality and analyze usage to improve our website (Functional Cookies); and to provide you with personalized content and advertisements (Targeted Advertising Cookies).
What are Cookies? "Cookies" are small text files that are placed on your device when you visit certain websites. Like many other online service providers, we (and our third-party service providers and partners) use cookies and other similar technologies (e.g., pixels, web beacons, local storage objects, log files, software development kits, etc.) on the Services for various purposes. We collect information through cookies through those we set directly ("First-Party Cookies") and those set by third parties ("Third-Party Cookies").
Managing your Cookie Preferences. Depending on the country where you reside, you have choices with respect to Cookies. For example, by modifying your browser preferences, you have the choice to accept all cookies, to be notified when a cookie is set, or to reject all cookies. If you choose to reject all cookies, some of our Service's features may not work properly. You can adjust your preferences and provide or withdraw your consent as described in the Managing your Marketing and Personalized Advertising Preferences section below.
For European Users: We will present you with a cookie consent banner on your first visit that allows you to:
• Accept all cookies
• Reject non-essential cookies
We only set cookies after obtaining your consent, except for strictly necessary cookies required for the Service to function.
Service providers. Our service providers may provide us with your information to enrich our Services.
Research partners. We may collect information for research purposes and surveys we conduct.
Marketing and advertising companies. This includes third parties who may disclose information about your interests, demographic information, and information about the marketing and advertisements you have seen or clicked on.
Business partners. We may partner with other businesses to offer the Services.
Information provided by other DadHack users. We may receive personal information about you provided by other DadHack users through the "Dad Community" feature.
Social media platforms. You may choose to log in to the Services through certain social media platforms.
Information Collected from Connected Device Data. Certain connected devices, such as fitness trackers, smartwatches, and/or wearables, that integrate with the Services, may allow us to collect Parenting and Family Data with your permission.
With your permission, we may also collect relevant data from your device's health and fitness repository, such as Apple's HealthKit or Android's Google Health Connect. The information you provide to HealthKit is then governed by the Apple Terms and Conditions and Privacy Policy. The unique information you choose to send from HealthKit is not used by DadHack for marketing and advertising or transferred by DadHack to third parties for marketing and advertising. The information you provide to Google Health Connect is then governed by the Android Terms and Conditions and Privacy Policy. The unique information you choose to send from Google Health Connect is not used by DadHack for marketing and advertising or transferred by DadHack to third parties for marketing and advertising.
DadHack uses artificial intelligence (AI) to provide personalized parenting support through our AI advisors and recommendation systems.
How AI Works in DadHack:
• Our AI advisors analyze your interactions, assessment data, and family information to provide personalized advice
• AI conversations are stored to improve your experience and maintain conversation context
• We do not currently collect or store voice recordings - all voice interactions are transcribed to text immediately
• AI-generated advice is based on aggregated parenting research and best practices
• We use social determinants of health data only to improve support and recommendations, never to restrict access to features or discriminate in service delivery. Our AI is designed to help address barriers, not create them
IMPORTANT DISCLAIMER ABOUT AI-GENERATED ADVICE:
• DadHack's AI provides general parenting support and suggestions only - it is NOT a substitute for professional medical, psychological, or psychiatric care
• Our AI cannot diagnose, treat, cure, or prevent any medical or mental health conditions
• AI-generated content may contain errors, inaccuracies, or inappropriate suggestions - always use your own judgment
• For any serious concerns about your child's health, development, behavior, or safety, immediately consult qualified professionals
• In case of emergency or crisis, contact emergency services (911) or crisis hotlines immediately
• You are solely responsible for decisions you make based on AI suggestions - DadHack assumes no liability for actions taken based on AI advice
• Our AI is not trained to detect or respond to child abuse, neglect, or safety emergencies
Important Note About Child Safety: DadHack and its AI advisors are not mandated reporters of child abuse or neglect. We are not qualified to assess child safety concerns and our systems are not designed to detect signs of abuse or neglect. If you have concerns about a child's safety or wellbeing, please contact:
• Emergency situations: 911 immediately
• Child abuse concerns: Childhelp National Child Abuse
Hotline: 1-800-422-4453
• Your local Child Protective Services
• Your child's doctor, teacher, or other mandated reporter
While we may suspend accounts that violate our Terms of Service, we do not monitor conversations for child safety issues and cannot provide intervention services.
Third-Party AI Services: We use third-party AI service providers to power our AI features. These providers include:
• Bedrock for natural language processing and conversation
• Google Cloud AI for analytics and pattern recognition
These AI providers:
• Process your data according to our data processing agreements
• Are prohibited from using your data to train their general AI models
• Maintain industry-standard security and privacy protections
• Process data on servers located in the United States
Human Review:
• Our team may review AI conversations for quality assurance and safety monitoring
• Reviews are conducted by trained personnel under confidentiality agreements
• We use these reviews to improve AI accuracy and prevent harmful content
Your Control Over AI Features:
• You can delete your AI conversation history in your account settings
• You can opt out of AI-powered recommendations while still using core features
• You can request that your data not be used for AI improvement purposes
Current Voice Features: DadHack currently does NOT collect, store, or process voice recordings or voice biometric data. If you use voice features in the app, your voice is immediately transcribed to text by your device, and only the text transcript is sent to our servers. We do not receive or store any audio files or voice biometric identifiers.
If we introduce voice recording features in the future, we will update this policy and obtain appropriate consent as required by applicable biometric privacy laws.
DadHack collects sensitive personal information to provide personalized support. This includes:
Categories of Sensitive Information:
• Mental health and emotional wellbeing data from assessments
• Stress, anxiety, and depression indicators
• Substance use patterns and recovery information
• Physical health conditions and medications
• Children's medical diagnoses and special needs
• Relationship and family dynamics information
Enhanced Protections for Sensitive Data:
• Encryption at rest and in transit using industry-standard protocols
• Access limited to authorized personnel with legitimate business needs
• Separate storage with additional security layers
• Regular security audits and penetration testing
• Immediate deletion upon account closure (except as legally required)
Use Restrictions: We NEVER use sensitive personal information for:
• Marketing or advertising purposes
• Sale to third parties
• Training general AI models
• Any purpose other than providing and improving our Services
Consent Requirements: In certain states, we obtain explicit opt-in consent before collecting sensitive personal information. You can withdraw consent at any time through your account settings.
Please note that we may aggregate, de-identify, or anonymize information so that it will no longer be considered personal information under applicable law. We may use and disclose de-identified information for purposes consistent with those described in this Policy or as otherwise permitted by applicable law.
Provide our Services. We use your personal information in connection with the provision, administration, and management of the Services, including managing your account, providing troubleshooting and technical support, and otherwise running our day-to-day operations.
Communicate with You. We use your personal information to communicate with you, including responding to your questions and requests. We may also use your personal information to send you communications to request information, seek your feedback, or provide you with administrative information, such as changes to our terms, conditions, and policies.
Respond to your Requests to Exercise your Rights. We use your personal information to respond to your requests to exercise your rights over your personal information.
Send You Promotional and Marketing Materials. We use your personal information to send you newsletters and other promotional communications, including information about DadHack's new offerings, features, offers, events, webinars, and other information.
Targeted Advertising and Cross-Device Tracking.
Targeted Advertising. We engage in targeted advertising. This means that you may see advertisements that are targeted and personalized to you on the Services and/or you may see advertisements for DadHack on third-party services based on information that we have collected from and about you. If you'd like to opt out of such advertising, see how to change your preferences under the Managing your Marketing and Personalized Advertising Preferences section below.
Cross-Device Tracking. We and our third-party partners may use the information we collect to help us identify other devices that you use (e.g., a mobile phone, tablet, computer, etc.).
Analyze usage of our Services, Ad Performance, and Research. We engage third-party analytics providers to help us analyze traffic to evaluate usage of the Services and to understand the performance of our advertisements.
Enhance and Personalize our Services. We use your personal information to improve and enhance our Services through AI and machine learning technologies, personalize content and features to your interests and goals, and test out new features and updates to our Services.
DadHack uses automated systems to:
• Generate personalized parenting recommendations based on your assessment data and social determinants of health
• Match you with relevant content and resources
• Suggest habit-building activities
• Filter community content for safety
Fair and Non-Discriminatory Use: We use your social determinants of health data (education level, employment status, insurance coverage, etc.) only to:
• Identify and help address barriers to parenting success
• Provide more relevant resources and support
• Customize advice to your specific circumstances
• Connect you with appropriate community resources
We NEVER use this data to:
• Deny or restrict access to features
• Charge different prices based on your circumstances
• Discriminate in any way
• Share with insurers or employers
You have the right to:
• Understand the logic behind automated decisions
• Request human review of automated decisions
• Opt out of certain automated decision-making through your account settings
Our automated systems do not make decisions with legal or similarly significant effects without human oversight.
Plan and Manage Events. We use your personal information to assist with event planning activities.
Maintain Security and Protect Rights. We use your personal information to help monitor and maintain the security of the Services and our business operations.
Satisfy Our Legal Obligations. We use your personal information to comply with applicable legal and regulatory obligations.
Manage pre-litigation or litigation matters. We use your personal information to defend our rights and interests.
Carry Out Internal Operations. We use your personal information to conduct financial, tax, and accounting audits and assessments of our operations.
Carry Out Sales and Business Transactions. We may use your personal information in connection with business transactions.
We disclose personal information to the categories of recipients described below:
Our Business Partners. We may partner with other businesses to offer the Services and disclose your personal information to those business partners as necessary or appropriate for the purposes listed in this Policy.
Our Service Providers. We disclose your personal information to third parties that provide essential services for our app to function:
Core Service Providers:
• App Distribution Platforms (Apple App Store, Google Play Store): Process downloads and payments; may collect device information and usage analytics according to their own privacy policies
• AI Language Model Providers (Bedrock, Google Cloud AI): Process your conversations and assessment responses to generate personalized advice under strict data processing agreements
• Cloud Infrastructure (Amazon Web Services or similar): Provide secure data storage and hosting
• Payment Processors (Stripe or similar): Handle subscription payments (we never see your full payment card details)
• Analytics Providers (Google Analytics): Help us understand app usage patterns with anonymized data
• Customer Support Tools: Assist with user support requests
All service providers are contractually required to:
• Protect your information with industry-standard security
• Use your data only to provide services to DadHack
• Delete your data upon termination of services
• Not use your data for their own purposes or AI training
Third-Party AI Service Providers. We disclose certain personal information to AI service providers to power our AI features:
• Bedrock: Processes conversation data and assessment responses to generate personalized advice
• Google Cloud AI: Analyzes usage patterns to improve recommendations
These providers are bound by data processing agreements that:
• Prohibit use of your data for their own purposes
• Require deletion of data upon termination
• Mandate security standards equivalent to our own
• Restrict data use to providing services to DadHack
Other DadHack Users. We may disclose your personal information to other DadHack users in the context of specific features that are social in nature as part of the Services. Please review your Settings to understand what information is being shared with your "Dad Community."
Community Features and User-to-User Sharing: The Dad Community feature allows you to:
• Share achievements and milestones with other dads
• Post questions and advice in forums
• Send direct messages to other users (if enabled)
Default Privacy Settings:
• Your profile is private by default
• Community posts are visible only to logged-in users
• Direct messaging is opt-in only
What Others Can See:
• Your username and profile photo (if provided)
• Content you choose to post publicly
• Your participation badges and achievements (if sharing is enabled)
Managing Community Privacy:
• Adjust sharing settings in your Privacy Center
• Block or report inappropriate users
• Delete your posts (note: quoted content may remain visible)
Our Marketing and Advertising Partners. We may disclose your personal information, including device and browser information and activity and usage information, to our marketing and advertising partners.
Our Analytics Providers. We may disclose your personal information to parties that assist us in performing analytics.
Our Research Partners. We may disclose your personal information to our research partners.
Relevant Third Parties in Connection with Business Transactions or Reorganizations. If we or our affiliates are or may be acquired by, merged with, or invested in by another company.
Law Enforcement and Regulatory Authorities. We may disclose your personal information to comply with applicable legal and regulatory obligations.
Other Parties. We may disclose your personal information to other parties at your direction or with your consent or as it may be justified under applicable law.
We retain your personal information only as long as necessary to provide our Services and fulfill the purposes outlined in this Policy.
Retention Periods by Data Type:
• Account data: 30 days after account deletion
• AI conversation logs: As needed to maintain conversation context and improve services
• Assessment data: 2 years from last update
• Children's information: Until child reaches 18 or account deletion (whichever is earlier)
• Community posts: 30 days after deletion request
• Marketing data: Until opt-out + 30 days
• Payment/tax records: 7 years (legal requirement)
Backup Retention:
• Backup copies may exist for up to 90 days after deletion
• Deleted data in backups is flagged and not restored to production systems
• Backups are encrypted using the same standards as primary data (AES-256)
• Access to backups is strictly limited to authorized personnel for disaster recovery only
• We cannot selectively delete data from backups, but deleted data is never reactivated
Legal Holds: We may retain data longer if subject to legal hold, investigation, or litigation requirements.
De-identified Data: We may create de-identified or aggregated data from your personal information that cannot reasonably identify you. We may use this data for:
• Improving our Services and AI models
• Research and analytics
• Understanding parenting trends and challenges
• No individual user can be identified from this data
• De-identified data is not sold to third parties
Account Inactivity: We reserve the right to delete accounts that have been inactive for 24 months or longer. Inactive accounts and associated data may be permanently deleted without prior notice.
Expedited Deletion: You can request expedited deletion of sensitive data by contacting support@dadhack.ai with "EXPEDITED DELETION" in the subject line.
You have the ability to manage your DadHack account and your preferences as described below.
Marketing Communications: If you no longer wish to receive marketing and promotional communications from us, you may:
• Change your email preferences in your account settings
• Unsubscribe from communications by following the "unsubscribe" instructions
Cookie Preferences: You can manage your cookie preferences by visiting "Cookie Preferences" in our footer below.
Browser "Do Not Track" Signals: We honor "Do Not Track" (DNT) browser signals. When we detect a DNT signal, we do not collect tracking information or serve targeted advertisements to that browser.
Personalized Advertising Preferences: You can opt out of targeted advertising:
• On your browser by visiting "Cookie Preferences" in our footer
• Through our app by visiting the Privacy Center under the "More" menu
Managing Your Targeting Advertising Preferences through Third Parties: You can learn more about ad-serving companies and the options available by visiting the websites for the Network Advertising Initiative, the Digital Advertising Alliance, and the European Interactive Digital Advertising Initiative.
LifeHack is headquartered in the United States. When you use DadHack from outside the United States, you are transferring your personal information to the US, which may have different data protection laws than your country.
For European Users (GDPR): We transfer data from the EEA/UK/Switzerland to the United States using appropriate safeguards:
• Standard Contractual Clauses (SCCs): EU-approved legal mechanisms for all data transfers
• Technical Measures: Encryption, pseudonymization, and access controls
• Contractual Commitments: Requiring US processors to meet EU standards
For Users in Other Countries: We comply with applicable local laws for international data transfers. By using DadHack, you consent to the transfer of your information to the United States.
Important Notice: The United States does not have an "adequacy decision" from the European Commission. This means the US is not considered to provide the same level of data protection as the EEA. However, we implement the safeguards described above to protect your data to EU standards regardless of where it's processed.
Your Rights Regarding International Transfers:
• Request a copy of our safeguards (SCCs)
• Object to transfers based on legitimate interests
• Withdraw consent for optional transfers
• File a complaint with your local authority
Contact support@dadhack.ai for questions about international transfers.
We may offer public-facing interactive features, community forums, or discussion blogs on the Services. Any information you post to public-facing sections may be publicly viewable. You have no expectation of privacy in content you submit through such features.
In the event of a data breach that compromises your personal information, we will:
• Notify affected users within 30 days of discovering the breach
• Communicate via email and/or in-app notification to your registered contact information
• Provide the following information:
• Date and time of the breach
• Types of information involved
• Steps we've taken to address the breach
• Actions you can take to protect yourself
• Contact information for questions
• Credit monitoring services (if applicable for the type of breach)
• Notify appropriate regulatory authorities as required by law
We maintain incident response procedures and conduct regular security audits to minimize breach risks.
We maintain technical, organizational, and administrative safeguards to protect personal information:
Security Measures Include:
• Encryption at rest and in transit (AES-256 and TLS 1.3)
• Multi-factor authentication for administrative access
• Regular security audits and penetration testing
• Access controls and principle of least privilege
• Security incident response procedures
• Employee training on data protection
• Background checks for personnel with access to sensitive data
• Continuous monitoring to detect potential breaches promptly
Enhanced Security for Sensitive Data:
• Separate encrypted storage for health and mental health data
• Additional access logging and monitoring
• Quarterly security reviews
• Compliance with industry standards (SOC 2 Type II in progress)
Despite our efforts, no information security measures can guarantee absolute security.
Alternative Formats: This privacy policy is available in alternative formats for users with disabilities. Contact support@dadhack.ai to request an accessible version.
Contact Us
If you have any questions or concerns regarding this Policy or our privacy practices, you may contact us at support@dadhack.ai, or write us at:
LifeHack, LLC
ATTN: Privacy/Legal
1025 Westhaven Blvd., Suite 250
Franklin, TN
Your Privacy Rights
Depending on where you live, the laws of your country, state, or province may grant you certain privacy rights over your personal information, including:
Right to Access and Data Portability. The right to confirm whether we are processing your personal information and to obtain a copy in a portable format.
Right to Deletion. The right to request that we delete your personal information (subject to certain exceptions).
Right to Correction. The right to request that we correct inaccuracies in your personal information.
Right to limit or opt-out of certain types of processing. This includes:
• The "sale" of your personal information
• Processing for "profiling" and "targeted advertising" purposes
• Automated decision-making
Right to opt-in to processing of sensitive information. Some states require opt-in consent for sensitive information processing.
Right against discrimination. We will not discriminate against you for exercising your legal rights.
Right to appeal decisions. You may appeal privacy rights decisions by submitting a request to support@dadhack.ai with "APPEAL" in the subject line.
As a parent using DadHack, you have specific rights regarding data about your children:
• Access all data we have about your children
• Delete data about your children at any time
• Update or correct information about your children
• Export data about your children in a portable format
• Restrict processing of your children's data to essential services only
State-Specific Children's Data Protections:
• California (Age-Appropriate Design Code): We implement age-appropriate privacy protections and do not use children's data in ways that are materially detrimental to their wellbeing
• Connecticut: Enhanced protections for minors' data with strict consent requirements
• Maryland & Nevada: Special protections for children's online data
• All States: We never sell children's personal information or use it for targeted advertising
When your child turns 18, they may independently request access to or deletion of data collected about them as a minor. We will verify such requests before taking action.
Separated/Divorced Parent Rights: Both parents with legal custody have equal rights to access and manage children's data. In cases of sole custody, we may require documentation before granting access.
How to Exercise Your Rights:
• Authorized Representative: You may submit requests through an authorized agent at support@dadhack.ai
• Questions: Contact our Data Protection Officer at support@dadhack.ai
California Residents (CCPA/CPRA)
Categories of Personal Information Collected:
• Identifiers (name, email, IP address)
• Demographics (age, gender, race/ethnicity)
• Commercial information (subscription history)
• Internet activity (browsing history, app usage)
• Geolocation data (general location)
• Professional information (employment status)
• Education information
• Sensitive personal information (health data, mental health indicators)
Business Purposes for Collection:
• Service delivery and personalization
• Security and fraud prevention
• Legal compliance
• Analytics and improvement
• Marketing (with consent)
Categories of Recipients:
• Service providers
• AI technology providers
• Analytics partners
• Advertising partners (only with consent)
"Sale" or "Sharing" of Personal Information: We do not sell personal information for monetary consideration. However, our use of advertising cookies may constitute "sharing" under CCPA. You can opt out via our Cookie Preferences.
Financial Incentives: We offer a free tier of DadHack that may be considered a "financial incentive" under California law. Here's how it works:
• The Offer: Free access to basic features including limited AI conversations, basic habit tracking, and community access
• Value Calculation: The approximate value is $5-10/month based on the proportional cost of infrastructure, AI processing, and features provided compared to our premium tier
• Your Rights: You can opt-in to the free tier by creating an account. This incentive is not contingent on providing any optional data
• Withdrawal: You can delete your account at any time without penalty
• No Data Sale Requirement: Participation in the free tier does not require you to consent to sale or sharing of personal information
Other State-Specific Rights
Colorado, Connecticut, Virginia, Utah: Residents have similar rights to California residents, including rights to access, delete, correct, and opt-out of targeted advertising.
Washington (My Health My Data Act): Enhanced protections for health data with required consent for collection and sharing.
Nevada: Right to opt-out of sale (though we do not sell personal information).
European Economic Area, UK, and Switzerland (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
Legal Basis for Processing: We only process your personal information when we have a legal basis:
• Consent: For sensitive data (health, mental health), marketing communications, and cookies
• Contract Performance: To provide the DadHack Services you've requested
• Legitimate Interests: For security, fraud prevention, Service improvement, and business operations (balanced against your rights)
• Legal Obligations: To comply with applicable laws
• Vital Interests: In rare cases involving safety
Your Additional GDPR Rights:
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Restrict Processing: Request we limit how we use your data in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Withdraw Consent: Withdraw consent at any time (doesn't affect prior lawful processing)
• Right to Lodge a Complaint: File a complaint with your local supervisory authority
• Right to Know About Automated Decision-Making: Understand and challenge automated decisions
International Data Transfers: Your data is transferred from the EEA/UK to the United States. We ensure appropriate safeguards through:
• Standard Contractual Clauses (SCCs): EU Commission-approved contracts with all US processors
• Supplementary Measures: Additional encryption, access controls, and contractual commitments
• Risk Assessments: Regular evaluation of data protection in destination countries
You can request a copy of our SCCs by contacting support@dadhack.ai.
Data Protection Officer: While not legally required to have a DPO, you can contact our privacy team at support@dadhack.ai for any GDPR-related queries.
Retention Periods: We retain EU/UK data only as long as necessary for the purposes collected:
• Active account data: Duration of service + 30 days
• After account deletion: 30 days (except legal requirements)
• Marketing consent: Until withdrawn + 30 days for suppression
• Legal claims: Up to applicable statute of limitations
Special Categories of Data (Sensitive Data): We collect special categories including health and mental health data. We only process this with your explicit consent, which you can withdraw anytime. This data receives our highest level of protection.
Children Under 16: In the EEA/UK, parental consent is required for users under 16. Our Services are only available to users 18 and older, exceeding this requirement.
Cross-Border Complaints: EU/UK residents can file complaints with:
• Your local data protection authority
• The Irish Data Protection Commission (if we have EU operations)
• Through our support team for direct resolution
Canada (PIPEDA)
We comply with PIPEDA requirements including:
• Obtaining meaningful consent
• Limiting collection to stated purposes
• Providing access to personal information
• Implementing appropriate safeguards
Changes to This Privacy Policy
We may update this Policy from time to time. If we make material changes, we will notify you via email or prominent notice in the Services at least 30 days before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated Policy.