Privacy Policy

1. Who We Are

Unhinged Dad ("we", "us", "our") is operated by EMG Labs Limited, a company registered in England and Wales (Company No. 17040637). Registered address: 58 The Bittoms, Kingston Upon Thames, England, KT1 2AP.

For data protection enquiries, contact us at: hello@unhingeddad.app

2. What Data We Collect

2.1 Chat Messages

When you use Unhinged Dad, the messages you type are sent to our AI provider (xAI / Grok API) for processing. We do not store your chat messages on our servers. Each conversation is stateless — when you close the app, your messages are gone. The AI provider may process messages in accordance with their own privacy policy.

2.2 Payment Information

If you subscribe to a paid tier, payment is processed by Stripe. We do not see or store your full card details. Stripe provides us with a transaction reference, subscription status, and the last four digits of your card for display purposes.

2.3 Device & Technical Information

We may automatically collect:

• Device type and operating system
• Browser type and version
• IP address (anonymised for analytics)
• App version
• General location (country-level, derived from IP)

2.4 Cookies & Analytics

We use essential cookies for the Service to function (e.g., locale preference, session management). We may use privacy-respecting analytics to understand how the Service is used. We do not use third-party advertising trackers.

2.5 What We Do NOT Collect

When you sign in with Apple or Google, we receive a unique identifier and, optionally, your email address, which we use solely to maintain your account and subscription status. We do not collect your name unless you provide it. We do not sell your personal information or share it with third-party advertisers.

3. How We Use Your Data

We use the data described above to:

• Provide and improve the Service (AI-powered parenting advice)
• Process payments and manage subscriptions via Stripe
• Understand usage patterns to improve the product
• Comply with legal obligations

4. AI Data Processing

Important: Unhinged Dad uses artificial intelligence (xAI Grok API) to generate responses. Your chat messages are sent to xAI's servers for processing.

• We send only the current conversation context (no historical data)
• xAI processes messages according to their privacy policy
• We do not use your messages to train our own AI models
• Conversations are not linked to any personal identity

AI Content Disclaimer: All responses are AI-generated and intended for entertainment purposes only. They do not constitute professional parenting, medical, psychological, or legal advice. AI-generated content may be inaccurate, inappropriate, or unsuitable for your specific situation.

5. Affiliate Links & Affiliate Revenue

The Service participates in the Amazon Associates Programme in multiple territories (including the UK, US, Canada, Australia, Germany, France, Italy, Spain, the Netherlands, Sweden, and Japan). The Service is an affiliate advertising programme designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon. When product suggestions contain Amazon links, those links include an affiliate tracking tag. If you click an affiliate link and make a qualifying purchase, we receive a commission from Amazon at no additional cost to you. We also localise Amazon links so they open the Amazon storefront in your region — this means some of your device or browser locale information is used to decide which Amazon domain to link to. Once you click through to Amazon, Amazon's own privacy policy and cookie policy apply to your interactions with Amazon, including any cookies Amazon sets for attribution. Affiliate revenue is a material source of funding for the Service alongside subscription revenue — we disclose this openly so you can make an informed decision about whether to click.

6. Data Sharing

We do not sell your personal data. We share data only with:

• xAI — to process chat messages (as described in Section 4)
• Stripe, Apple, and Google — to process web and in-app subscription purchases and validate receipts on their respective platforms
• Hosting & infrastructure providers (Vercel, AWS Cognito, Supabase) — for Service delivery, authentication, and data storage
• Law enforcement — only if required by law
• Amazon (via the Amazon Associates Programme) — only when you choose to click an affiliate link. Amazon receives standard browser/device information from the click-through and our affiliate tracking tag for commission attribution. We do not send Amazon your chat content, account identifiers, or subscription data.
• Analytics & error-monitoring providers (PostHog, Sentry) — to understand aggregated usage patterns and diagnose crashes; configured to avoid collecting chat content

7. Your Rights (GDPR & UK DPA 2018)

If you are in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018:

• Right of access — request a copy of your personal data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data
• Right to restrict processing — limit how we use your data
• Right to data portability — receive your data in a structured format
• Right to object — object to data processing
• Right to withdraw consent — at any time, where consent is the legal basis

Since Unhinged Dad is stateless and does not create user accounts, most personal data is transient and not retained. For Stripe subscription data, contact us and we will assist with your request.

Legal basis for processing: Legitimate interest (providing the Service) and contract performance (processing payments for subscriptions).

You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).

8. Data Retention

• Chat messages: Not stored. Discarded after each session.
• Payment data: Retained by Stripe as required for financial/legal obligations.
• Analytics data: Aggregated and anonymised; retained for up to 24 months.
• Technical logs: Retained for up to 30 days for debugging and security.

9. Data Security

We use industry-standard security measures including HTTPS encryption, secure API communications, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Unhinged Dad is rated 12+ and intended for parents and adults. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us immediately.

11. International Data Transfers

Your data may be processed outside the UK/EEA by our service providers (xAI in the US, Stripe in the US, Vercel globally). Where transfers occur, they are protected by appropriate safeguards including Standard Contractual Clauses (SCCs) or adequacy decisions.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact Us

For any privacy-related questions or to exercise your data protection rights, contact us at: hello@unhingeddad.app