Single Dad Space← Return to Home

Data Protection & Privacy

Privacy Policy

Last updated: September 2026. This policy explains how Single Dad Space collects, protects, stores, and handles your data.

Security and Privacy by Design

Your records belong solely to your account. We treat family, legal, and financial information with zero-compromise confidentiality.

Envelope Encryption

Journal entries and sensitive logs use AES-256-GCM encryption with dedicated per-user data keys.

Zero Co-Parent Link

Single Dad Space is not a joint messaging bridge. We never notify, share with, or ping your co-parent.

Isolated Vault Storage

Court documents and records are stored in private object storage with strict session verification.

1. Core Privacy Commitments

  • No advertisements or data sales: We do not sell, rent, monetize, or broker your personal information. Paid memberships directly fund our platform operations.
  • Ad pixels stay off the private app: Meta and Reddit pixels run only on public marketing pages (home, sign-up, sign-in, and subscribe) so we can measure ads. They are not loaded on Today, Kids, Journal, documents, community, or share links. We do not sell your data.
  • Protection of children: Kid photos, court documents, and journal entries belong to your account. They are not shown on the public feed. We do not generate pictures of children. Under no circumstances do we synthesize artificial child photos, video clones, or biometric models.
  • No search engine indexing: Private user data, child profiles, legal documents, and community posts are strictly gated behind authentication and never indexed by web crawlers.

2. Information We Collect

We collect only the information necessary to provide you with a dependable organizational toolkit and a verified community:

Account & Authentication Data

Your name, email address, password hash, and optional profile picture. Passwords are encrypted using modern cryptographic one-way hashing algorithms.

Custody & Family Records

Child profiles (given names, grades, schools, allergies, emergency contacts, homework tasks), repeating custody rotation schedules, and one-night schedule adjustments you set up.

Financial & Support Records

Child support obligations, payment due dates, and split expense notes you log. If you connect Budgey, budget categories and read-only balance summaries are accessed through authenticated MCP tokens.

Incident Journal & Files

Personal journal entries, drop-off observations, witness names, timestamped notes, and uploaded photos or documents (custody orders, school notices, insurance cards).

Advertising measurement (public pages only)

On the public site (home, sign-up, sign-in, subscribe) we load the Meta Pixel and Reddit Pixel so we can tell if ads led to an account or a paid membership. Those tools may receive the page URL, browser type, and ad click IDs. They are not loaded inside the private app. We do not send journal, kid, or document contents to ad networks.

Identity Verification Data

To access the verified community, members complete an identity check via Stripe Identity. Stripe processes the government ID and biometric selfie verification. Single Dad Space only stores the outcome signal (verification status and confirmed sex); we never store your raw government ID photos or facial biometric templates on our servers.

3. Technical Security & Encryption Standards

We implement comprehensive defense-in-depth security measures to protect sensitive custody and personal records:

Envelope Encryption at Rest

Journal notes and incident logs are encrypted using AES-256-GCM. Each user account has a unique Data Encryption Key (DEK) wrapped by a master key. Database administrators and raw storage dumps cannot view your entries in plaintext.

Isolated Object Storage

Documents and uploaded files are isolated in private object storage under strictly scoped user namespaces. Direct public access is disabled. File downloads require active session authentication or signed, short-lived URLs.

Magic-Byte File Validation

Every uploaded file is inspected at the binary level using magic bytes to verify its true file type (JPEG, PNG, WebP, PDF, or CSV), preventing malicious file execution or extension spoofing.

Transit Security & Rate Limiting

All communications are encrypted in transit using TLS 1.3. API endpoints are rate-limited to protect against brute-force attacks and automated credential stuffing.

4. Controlled Sharing & Lawyer Exports

Single Dad Space gives you granular tools to share records securely without exposing your whole account:

  • Scoped access: When generating a share link for family, counselors, or legal counsel, you select the specific documents included. Recipients cannot view any unselected records or browse community discussions.
  • Automatic expiration: Share links expire automatically after a set period (between 1 and 30 days, defaulting to 7 days).
  • Cryptographic token security: Secret share link tokens are hashed using SHA-256 before storage. Even in the event of an internal lookup, the raw secret URL token is never retained in the database.
  • Subpoena risk protection: Incident journal entries are excluded from share links by default to prevent unintentional disclosure during legal discovery.
  • Immediate revocation: You can revoke any active share link immediately from your account dashboard with a single click.

5. Data Retention & Account Deletion

You maintain complete authority over your personal records:

  • Active storage: We retain your data for as long as your account remains open and active to maintain your calendar history, court documents, and incident timelines.
  • Permanent account deletion: You can request complete deletion of your account at any time in Settings. Upon deletion, your account profile, personal encryption keys, journal entries, and uploaded files are permanently expunged from production systems.

6. Legal Disclosures & Subpoenas

We never voluntarily disclose your private records to third parties. We will only disclose account data if compelled by a valid, legally binding court order or subpoena issued by a court of competent jurisdiction. When legally permissible, we will notify you before complying with any court order so that you may seek appropriate protective orders.

7. Contact & Privacy Inquiries

If you have any questions, security concerns, or requests regarding your personal data or this policy, please contact our team directly at support@singledad.space.