Dad Proof Privacy Policy
- Everything you record in Dad Proof is stored on your phone. We can't see it.
- You don't need an account. If you choose to make one (for agency sharing or backup), we keep your email address.
- Shared records and backups are encrypted on your phone before upload. Our servers hold only scrambled data we can't read.
- No ads, no tracking, no analytics, and we never sell or rent your information.
- You can delete everything at any time.
1. Who we are
Dad Proof ("the app", "we", "us") is provided by Owen N. Cherry Sr., 113 Udall Dr, Great Neck, NY 11020. Contact us at dadsproof01@gmail.com.
This policy explains what information the app handles, where it goes, and the choices you have. It covers the Dad Proof mobile app and the web page that caseworkers use to view records you share.
2. Information that stays on your phone
Everything you enter is stored in a private database inside the app on your device, and your photos and files are copied into the app's private storage. This includes:
- payments, receipts, barcodes, payees and amounts, and child support or alimony orders;
- visits, conversations, screenshots, evidence (posts, messages, photos, videos, audio, documents), and notes about the other parent or others involved;
- your children's names and, if you add them, birthdays;
- memories, such as drawings, report cards, photos and videos;
- alerts such as court dates and notices, with their reminders;
- your settings (language, currency, how the app is set up).
We don't receive any of this. It leaves your phone only if you share a PDF yourself, give an agency access, or turn on encrypted backup (below). Reminders for alerts are scheduled on your phone and don't go through our servers.
If you use the app inside Expo Go (for testing), the data lives in Expo Go's storage on your phone instead.
Bank and card statements
If you import a bank or card statement file, it's read on your phone and is never uploaded. Only the transactions you choose to add are saved, as payments, on your phone. The rest of the statement isn't kept.
Phone permissions
- Camera: to photograph receipts, notices and evidence, and to scan barcodes.
- Photos and files: to attach pictures, videos and documents you pick.
- Notifications: for reminders about your alerts.
The app doesn't ask for your location or contacts, and doesn't record from the microphone. You can change these permissions at any time in your phone's settings.
3. Information we keep if you create an account
An account is optional and is only needed for agency sharing and encrypted backup. You sign in with a one-time code sent to your email address, so there is no password to store.
Your account
- Your email address and an account ID.
- Basic sign-in records kept by our database provider (such as when you last signed in).
Agency sharing
When you invite a caseworker, lawyer or agency to view your records, we store:
- the person's name, agency and email address that you enter;
- which sections you chose to share, when the share starts and ends, and whether you revoked it;
- an encrypted copy of the shared records and photos. They're encrypted on your phone with a key that is only in the link you send. Browsers never send that part of a link to a server, so we can't decrypt the records;
- an access log of each time the invited person opened the records, with their email address and the time. You can see this log in the app.
Evidence, memories, alerts and alimony records are never included in agency shares.
Encrypted backup
If you turn on backup, your records and files are encrypted on your phone with a recovery key that only you have, then uploaded. We store the encrypted files and their sizes and dates. We can't read your backup or reset your recovery key. If you lose the key, the backup can't be restored.
People you share with
If someone shares records with you, we use your email address to send you a sign-in code and to check you're the invited person. We log each time you open the records, and the person who shared them can see that log.
4. What we don't do
- We don't show ads or use advertising or analytics tools in the app.
- We don't track you across other apps or websites.
- We don't sell, rent or trade your information.
- We don't use your records to train AI models or for any purpose other than providing the features you use.
Apple and Google may collect crash reports and usage statistics about apps on your phone under their own privacy policies and your phone's settings.
5. Service providers
We use a small number of providers to run the optional online features. They process data only on our behalf.
| Provider | What for | What they handle |
|---|---|---|
| Supabase | Accounts, database and file storage for sharing and backup | Email addresses, share details, access logs, encrypted files. Hosted in the United States. |
| Supabase's email service | Sending sign-in codes | Email addresses |
| Netlify | Hosting the caseworker viewer page | Standard web request information such as IP address. The page never sends the encryption key to the host. |
6. How long we keep things
- On your phone: until you delete it or delete the app.
- Shared records: the encrypted copy is deleted from our servers when you revoke the share or it ends. The share details and access log are kept so you can see them, until you delete your account.
- Backups: until you turn backup off, delete it, or delete your account.
- Your account: until you delete it.
7. Deleting your information
- Everything on your phone: delete records in the app, or delete the app.
- Your backup: Settings → Backup → delete backup.
- Your whole account: Export → Share with an agency → Delete my account. This revokes every share, deletes all encrypted copies, photos and backups, and deletes your account and its logs from our servers.
You can also email us at dadsproof01@gmail.com and we'll delete your account within 30 days.
8. Security
Shared records and backups use AES-256-GCM encryption, done on your phone. Our database only lets your account manage your own shares and backups, and only lets the invited email address open a share, and only while it's active. Sign-in uses one-time email codes.
Some things are outside our control:
- Anyone who can unlock your phone can open the app. Use a screen lock.
- Once someone you share with has opened your records, they can print or save a copy. Revoking stops future access but can't undo copies already made.
- Anyone who has both your link and access to the invited email inbox could open a share. Send links only to the right person.
9. Children
Dad Proof is for adults. You may record information about your own children, and you control it. The app isn't directed at children, and we don't knowingly create accounts for anyone under 18. If you think a child has created an account, contact us and we'll delete it.
10. Legal requests
We only give information to authorities when the law requires it. Because your records are on your phone, and anything on our servers is encrypted with keys we don't have, the most we could provide is account details: your email address, share details (recipient, dates, sections) and access logs. Where the law allows, we'll tell you before responding.
11. Your rights
Depending on where you live (for example under the GDPR in the EU, the UK GDPR, or California's CCPA/CPRA), you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or limit how it's used. Most of your information is already on your phone and under your control. For anything we hold, contact us at dadsproof01@gmail.com. You can also complain to your local data protection authority.
Where the GDPR applies, we process account information to provide the features you ask for (performing our contract with you), and access logs for the legitimate interest of keeping shared records secure and accountable.
12. International transfers
If you use the online features, your account information and encrypted files are stored in the United States, which may be outside your country. Where required, we use legal safeguards such as standard contractual clauses.
13. Future features
If we add new features that handle information differently (for example, connecting directly to a bank), we'll update this policy and ask for your permission in the app before anything is collected.
14. Changes to this policy
If we change this policy, we'll update the date at the top and, for important changes, tell you in the app before they take effect.
15. Contact
Owen N. Cherry Sr. (Dad Proof)
113 Udall Dr, Great Neck, NY 11020
dadsproof01@gmail.com