DadPlease is operated out of Australia. This policy explains what we collect, why, how we store it, and what you can do about it. Written in plain English. Any ambiguity, assume we meant “as little as we can while still running the product.”
What we collect
- Sign-in details — email address (required), Google account ID (if you sign in with Google). Password is not stored; Supabase handles it.
- Pregnancy profile you enter— estimated due date, partner's first name, whether this is your first kid, your chosen care provider type, and the concern chips you picked during onboarding. Optionally, “hard constraints” you add later (e.g., dietary restrictions).
- Ask messages — the questions you type, plus the AI responses and the structured cards the AI generates. Saved cards are pinned to the week they belong to; message history is retained until you delete your account.
- Usage telemetry — anonymous page views and performance metrics via Vercel Analytics (no cookies). Error reports via server-side logging if you opt in at the application level later.
- Standard request logs — IP address, user agent, request timestamps. Held by our hosting and auth providers; we do not persist these ourselves.
Why we collect it
- To provide the service — tailor the weekly brief, Ask responses, and plan.
- To comply with legal obligations — Australian Privacy Act 1988, where applicable.
- To debug failures and improve the product — always from aggregated or anonymised data, never individual user prying.
We do not sell your data. We do not use your messages to train third-party models.
Who processes it
- Supabase — hosts our database and handles sign-in. Data stored in Singapore region.
- Anthropic— we send your Ask question and relevant context (your profile, FSANZ food-safety reference, your most recent saved-card titles) to Claude in order to generate a response. Per Anthropic's policy at the time of writing, they retain API inputs for up to 30 days for trust & safety and do not train their models on it.
- Vercel — hosts the app and collects anonymous performance metrics.
- Google— only if you use “Sign in with Google.”
Where it is stored
Primary storage: Supabase, Singapore region (ap-southeast-1). Row-level security ensures one user's data is never visible to another. The database is encrypted at rest; connections use TLS in transit.
How long we keep it
- Your pregnancy profile and saved cards: until you delete your account.
- Ask message history: until you delete your account. (We may offer per-conversation deletion in a future version.)
- Anonymous telemetry: aggregated after 30 days; individual events not retained long-term.
Your rights under the Australian Privacy Act
- Access — request a copy of your personal information by emailing michael@aiplease.com.au.
- Correction — profile fields are editable in Settings; for other corrections, email us.
- Deletion — click Delete accountin Settings. It cascades through the database and removes everything we hold about you, immediately. No soft-delete hold, no “we'll get to it.”
- Portability— we'll provide a JSON export on request.
- Complaints — email us first. If unresolved, you may complain to the Office of the Australian Information Commissioner.
Cookies and tracking
We set first-party authentication cookies so you stay signed in. We do not set advertising or cross-site tracking cookies. Vercel Analytics is cookieless.
Children
DadPlease is not intended for users under 18. We do not knowingly collect data from minors. If you believe we have, contact us and we will delete it.
Security
We apply reasonable, industry-standard protections — encryption in transit and at rest, row-level security, short-lived sessions, and least-privilege service keys. No system is perfectly secure; if a breach occurs, we will notify affected users and the OAIC in line with the Notifiable Data Breaches scheme.
Changes
We will update this policy as the product evolves. Material changes will be announced via email and in-app. The date at the top of this page reflects the latest version.