Privacy Policy

Last updated: 7 March 2026

1. Who We Are

Unhinged Dad ("we", "us", "our") is operated by an individual developer / sole trader based in the United Kingdom. This privacy policy explains how we collect, use, and protect your information when you use the Unhinged Dad application and website (the "Service").

For data protection enquiries, contact us at: emg.assets@gmail.com

2. What Data We Collect

2.1 Chat Messages

When you use Unhinged Dad, the messages you type are sent to our AI provider (xAI / Grok API) for processing. We do not store your chat messages on our servers. Each conversation is stateless — when you close the app, your messages are gone. The AI provider may process messages in accordance with their own privacy policy.

2.2 Payment Information

If you subscribe to a paid tier, payment is processed by Stripe. We do not see or store your full card details. Stripe provides us with a transaction reference, subscription status, and the last four digits of your card for display purposes.

2.3 Device & Technical Information

We may automatically collect:

  • Device type and operating system
  • Browser type and version
  • IP address (anonymised for analytics)
  • App version
  • General location (country-level, derived from IP)

2.4 Cookies & Analytics

We use essential cookies for the Service to function (e.g., locale preference, session management). We may use privacy-respecting analytics to understand how the Service is used. We do not use third-party advertising trackers.

2.5 What We Do NOT Collect

In our MVP, there is no account creation. We do not collect your name, email address, or any personally identifying information beyond what is described above. The Service is designed to be stateless and privacy-first.

3. How We Use Your Data

We use the data described above to:

  • Provide and improve the Service (AI-powered parenting advice)
  • Process payments and manage subscriptions via Stripe
  • Understand usage patterns to improve the product
  • Comply with legal obligations

4. AI Data Processing

Important: Unhinged Dad uses artificial intelligence (xAI Grok API) to generate responses. Your chat messages are sent to xAI's servers for processing.

  • We send only the current conversation context (no historical data)
  • xAI processes messages according to their privacy policy
  • We do not use your messages to train our own AI models
  • Conversations are not linked to any personal identity

AI Content Disclaimer: All responses are AI-generated and intended for entertainment purposes only. They do not constitute professional parenting, medical, psychological, or legal advice. AI-generated content may be inaccurate, inappropriate, or unsuitable for your specific situation.

5. Affiliate Links

The Service may include affiliate links to products via Amazon Associates (UK and ES programmes). If you click an affiliate link and make a purchase, we may earn a small commission at no extra cost to you. Amazon's own privacy policy and cookie policy apply to your interactions with Amazon.

6. Data Sharing

We do not sell your personal data. We share data only with:

  • xAI — to process chat messages (as described in Section 4)
  • Stripe — to process payments
  • Hosting providers (Vercel) — for Service delivery
  • Law enforcement — only if required by law

7. Your Rights (GDPR & UK DPA 2018)

If you are in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018:

  • Right of access — request a copy of your personal data
  • Right to rectification — correct inaccurate data
  • Right to erasure — request deletion of your data
  • Right to restrict processing — limit how we use your data
  • Right to data portability — receive your data in a structured format
  • Right to object — object to data processing
  • Right to withdraw consent — at any time, where consent is the legal basis

Since Unhinged Dad is stateless and does not create user accounts, most personal data is transient and not retained. For Stripe subscription data, contact us and we will assist with your request.

Legal basis for processing: Legitimate interest (providing the Service) and contract performance (processing payments for subscriptions).

You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).

8. Data Retention

  • Chat messages: Not stored. Discarded after each session.
  • Payment data: Retained by Stripe as required for financial/legal obligations.
  • Analytics data: Aggregated and anonymised; retained for up to 24 months.
  • Technical logs: Retained for up to 30 days for debugging and security.

9. Data Security

We use industry-standard security measures including HTTPS encryption, secure API communications, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Unhinged Dad is intended for adults (18+). We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us immediately.

11. International Data Transfers

Your data may be processed outside the UK/EEA by our service providers (xAI in the US, Stripe in the US, Vercel globally). Where transfers occur, they are protected by appropriate safeguards including Standard Contractual Clauses (SCCs) or adequacy decisions.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact Us

For any privacy-related questions or to exercise your data protection rights, contact us at: emg.assets@gmail.com