Privacy Policy

Effective date: April 20, 2026

Your privacy matters to us. This policy explains what we collect, how we use it, and your rights. If anything here is unclear, email us at hello@toydash.io.

1. What we collect

Account info: your name, email, phone, and password (stored hashed).
Delivery info: your delivery address and any notes you add for our drivers.
Family info you share during onboarding: your children’s first names, ages, and toy preferences. We use this only to pick age-appropriate toys for your home.
Billing info: payment is processed by Stripe. We store a subscription identifier and the last four digits of your card; we never see or store full card numbers.
Service activity: your delivery history, toy selections, damage/replacement notes, and messages you send us.
Basic web data: standard server logs (IP, user agent, timestamps) used for security and debugging.

2. How we use it

To run your subscription: deliver toys, schedule pickups, process payments, and send you account and delivery notifications.
To improve the service: understand which toys parents love, which age groups we need more of, and where our logistics can improve.
To keep the service safe: detect and prevent fraud, abuse, and data breaches.
To comply with the law and respond to legitimate legal requests.

3. How we share it

We do not sell your personal information. We share it only with trusted service providers we need to run the service:

Stripe — payment processing.
Quo (or our SMS provider) — delivery and pickup text notifications, only for numbers you opted in.
Hosting/infrastructure providers — to store and serve the application.
Law enforcement — only when legally required and only to the extent required.

4. Text messages

When you check the SMS consent box at signup, you agree to receive delivery reminders, pickup notifications, and account alerts at the phone number on your account. Message and data rates may apply. Reply STOP at any time to opt out of texts; opting out of texts does not cancel your subscription. Reply HELP for help.

5. Cookies and local storage

We use a login token stored in your browser to keep you signed in, and we store your plan selection locally while you complete signup. We do not use third-party advertising cookies or cross-site tracking.

6. Kids’ privacy

ToyDash is intended for parents and guardians. We do not knowingly collect personal information directly from children under 13. The family details you share during onboarding are provided by you, as the parent or guardian, and are used only to match age-appropriate toys.

7. How long we keep data

We keep your account and service history for as long as your account is active. After cancellation we keep records needed for tax, accounting, and fraud prevention (typically up to 7 years). You can request earlier deletion at any time (see Your rights below).

8. Your rights

You can:

Access a copy of your personal information.
Correct information that is inaccurate.
Delete your account and associated personal information (subject to legal/accounting retention).
Opt out of SMS (reply STOP) and marketing emails (use the unsubscribe link in any marketing email).

To exercise these rights, email hello@toydash.io from the email address on your account. We will respond within 30 days.

9. Security

We use industry-standard measures to protect your data in transit (HTTPS) and at rest (encryption where provided by our hosting). No system is 100% secure, and we cannot guarantee absolute security. If a breach ever happens, we will notify affected users and the applicable authorities as required by law.

10. Changes to this policy

If we make material changes, we will email the address on your account at least 14 days before the change takes effect.

11. Contact

Questions or requests: hello@toydash.io.