Privacy.
How DadHQ collects, uses, and protects your data.
1. Who we are
DadHQ is built by 288 Labs LLC, based in California, USA. Contact: privacy@288labs.com.
2. The short version
DadHQ is local-first. Your events, kids’ profiles, ideas, tasks, and notes live on your phone, not on our servers. The only data that leaves your device is what you send to AI brainstorm (only after you agree) and (if you subscribe) subscription state.
3. What we collect
Stored only on your device
- An optional display name you can set in Settings (never required)
- Events, dates, prep plans, plan notes, ideas, and house tasks you create
- Kids’ names, birthdays, and interests you enter
Sent to our servers only when you use AI brainstorm
- A random anonymous device identifier (not linked to your name or email)
- When you ask DadHQ to brainstorm activity or gift ideas: your kid’s interests (e.g. “trucks”, “dinosaurs”) and the occasion or vibe you picked (e.g. “birthday”). We never send your name, email, location, or your kids’ names. This only happens after you agree to the in-app AI consent prompt.
Device + telemetry
- App version, OS version, device model
- Anonymous usage events (screens viewed, features used) via PostHog
- Ad-measurement events (e.g. app installed, finished onboarding, started a subscription) sent to Meta so we can measure which ads brought people to DadHQ. We send the event name and, for a purchase, the amount — never a kid’s name, birthday, or interests, and never your name or email. Your device’s advertising identifier (IDFA) is included only if you allow tracking when iOS asks; if you don’t, measurement falls back to Apple’s privacy-preserving SKAdNetwork, which is not tied to your identity.
Subscriptions
- Subscription status via RevenueCat (no card numbers — Apple handles payments)
4. How we use your data
- Run the product (reminders are scheduled locally on your device; AI brainstorm generates activity and gift ideas)
- Improve the product (anonymized analytics)
- Measure our advertising — understand which ads led to installs and subscriptions, via Meta (see section 6)
We do not sell your data. We do not show ads inside DadHQ. We use Meta only to measure our own ad campaigns, not to serve you ads in the app. We do not use your content to train AI models, and our AI providers process it only to return ideas, under their own terms.
5. Third-party AI
When you use AI brainstorm, the interests and occasion above are sent to third-party AI providers that generate ideas. We route requests through OpenRouter, which may run them on models from providers such as Alibaba (Qwen), Meta (Llama), OpenAI, and Anthropic. The provider/model can change over time; the categories of data we send do not. These providers do not receive your name, email, location, or kids’ names, and they generate ideas only — they do not search the web or any store.
6. Sub-processors
The following services handle data on our behalf:
- Cloudflare — API hosting for AI brainstorm.
- OpenRouter — routes AI brainstorm requests to model providers (see section 5).
- Neon — database (US region).
- RevenueCat — subscription state.
- PostHog — anonymous analytics. Region: US.
- Meta Platforms — advertising measurement and install attribution. Receives ad-measurement event names (and purchase amounts), plus your advertising identifier only if you allow tracking. Never receives kids’ names, birthdays, or interests, or your name or email.
- Apple — App Store, payments, and (via SKAdNetwork) privacy-preserving ad attribution.
7. Children
DadHQ is for parents, not children. Kids’ details (names, birthdays, interests) are entered by you and stored only on your device. Only generic interest tags — never names or birthdays — are sent to AI brainstorm. We do not knowingly collect data from anyone under 13 (or 16 in some jurisdictions).
8. Retention
- On-device data — until you delete it (Settings → Delete all data wipes everything).
- Server logs — 30 days.
9. Your rights
Regardless of where you live, you may request access, correction, export, or deletion of any server-side data by emailing privacy@288labs.com. On-device data is under your control: Settings → Delete all data. EU / UK / EEA residents have rights under GDPR; California residents under CCPA. We honor both globally.
10. Security
All data in transit is encrypted (TLS). Server-side data is encrypted at rest. Access inside 288 Labs is restricted to a small number of authorized people.
11. Changes
We’ll post material changes here with a new date. For significant changes we’ll also notify you in-app.