Privacy Policy

DadSpark is a private, one-to-one messaging app between a parent and their child.

Last updated 28 September 2026

Who we are

DadSpark is operated by Domenic Bueti. For any question about this policy or about your data, write to [email protected].

What we collect

Data	Why
Name	Shown to the person you are connected with
Email address	Signing in and account recovery
Age	Children only. Checks the minimum age, and lets the connected adult recognise who redeemed their invite code
Messages and photos	The content you send within a connection
Payment status	Whether a subscription is active. Card details are handled by Stripe and never reach us
Saved and reacted items	What you star into your Memory Vault, and hearts on messages
Nicknames	What you call the person you are connected with. Private to you — they never see it

Adults are not asked for an age

We used to ask everyone. Because a self-reported age is verified by nothing, displaying it created the impression of a check that does not happen. We no longer collect it from adults. A child's age is still collected, because it is the minimum-age gate.

If you turn on notifications

We store a device token so notifications can reach your phone, along with your time zone, your chosen delivery hour, your notification preferences, and a record of what we have already sent so we do not send it twice.

What we do not collect

• Location
• Contacts or address book
• Browsing or search history
• Advertising identifiers
• Any behavioural or cross-app tracking data

Who else sees it

Three service providers, each for a single purpose:

• Supabase — stores the database and uploaded photos, hosted on AWS in the United States
• Stripe — processes payments. Stripe receives your name, email and payment details directly; we never see or store card numbers
• Google Firebase — delivers push notifications to your device
• Resend — sends account emails such as sign-in verification and password resets

No advertising networks. No analytics providers. No data brokers. Nothing is sold, and nothing is shared for advertising.

Children and safety

DadSpark is for ages 13 and up. It is not a social network.

• No discovery. There is no user search, no public profiles, no suggestions and no directory. A child cannot be found by a stranger.
• No group spaces. No group chats, channels, comments or shared feeds. Every conversation is between exactly two people.
• Both people must agree. A connection needs an invite code shared directly, and then explicit approval from both sides. If a code is forwarded or seen by someone it was not meant for, the person who created it still has to approve whoever redeemed it.
• A child may be connected to exactly one adult, and an adult to at most five children. Both limits are enforced in the database, not just in the app.
• No advertising and no behavioural tracking of any kind.
• Either person may end the connection or delete their account at any time.

What we do not do. DadSpark does not verify anyone's identity, age, or relationship to anyone else. The adult role is chosen at sign-up. We do not confirm that an adult is a child's parent or guardian, and we do not claim to. The protections above are structural: they limit what any account can do, rather than validating who is behind it.

We do not knowingly collect information from anyone under 13.

Keeping it safe

• Encrypted in transit and at rest.
• Database access rules mean you can only ever read your own data and the connections you are part of. Messages cannot leak between connections.
• Every database function requires an authenticated caller.
• Photos are stored privately and are reachable only by the two people in a connection.
• The minimum age of 13 is enforced by the database, not only by the app.

What you can do

• Download your data — Settings → Download your data. You get your profile, your connections, every message in both directions, your subscription and notification history, and links to your photos.
• Delete your account — Settings → Delete account. See below for what this does.
• Edit your profile — change your display name and photo at any time.
• Control notifications — five independent toggles, plus quiet mode.

Deleting your account

When you delete your account, your sign-in credentials are destroyed immediately and permanently. There is no recovery, and signing up again with the same email creates an entirely new account.

Messages you have already sent remain with the person you sent them to. A message is shared content — one person wrote it, the other received it and may have saved it. Deleting one side of a conversation would remove something belonging to someone who did not ask for it to go. This is the same convention used by ordinary messaging services, where leaving a conversation does not erase the other person's copy.

If you are the subscriber, deleting your account also cancels the subscription.

Changes

If this policy changes in a way that materially affects you, we will say so in the app. The date at the top always reflects the current version.

Contact

DadSpark is operated by Traybek Consulting Inc., Ontario, Canada.

For anything at all, including privacy requests and account deletion:
[email protected]