Privacy Policy
Applies to the web app, marketing site, and related services operated as DeFi Daddy.
Operator: DeFi Daddy (“we”, “us”)
Contact: support@defidaddyapp.com
Mailing address: 5307 Victoria Drive #712, Vancouver, BC V5P 3V6, Canada
Effective date: September 15, 2026
1. Plain summary
DeFi Daddy is a read-only DeFi analytics and monitoring service. You can connect public wallet addresses so we can scan and monitor on-chain positions (for example health factor and borrow metrics) and optionally send alerts.
- We never ask for seed phrases, private keys, or transaction signing.
- Wallet addresses on public blockchains are public; your email, phone, and account details are personal information.
- If you link an account to wallet addresses, that association exists in our systems so we can provide the service.
- We use processors (hosting, email/SMS, payments) to run the service.
- We do not sell your personal information. We do not use your account data to publicly “deanonymize” or label your wallets as a product feature for other customers.
2. What we collect
Account & contact
- Email address and authentication credentials (password hashes or magic-link tokens — we do not store plaintext passwords)
- Optional phone number(s) if you enable SMS alerts
- Alert preferences (trackers, thresholds, channels)
Wallets & product usage
- Public blockchain addresses you add or paste for scan/monitor
- Chain selection and scan/monitor job metadata
- Product events needed to operate the service (e.g. login times, feature use, error logs)
- Technical data: IP address, browser/user-agent, device type (server logs)
Billing
- Subscription status and plan
- Payment metadata from our payment provider (e.g. Stripe customer/subscription IDs). Card numbers are handled by the payment provider, not stored by us as full PAN data
Sources of data
- You (signup, settings, pasted addresses)
- Public blockchains / indexers / price feeds
- Processors acting on our behalf (see §5)
We do not intentionally collect government ID, precise GPS, biometric templates, or private keys.
3. How we use data
| Purpose | Examples |
|---|---|
| Provide the service | Accounts, scans, dashboards, continuous monitoring |
| Alerts | Email/SMS when configured thresholds are met |
| Billing | Trials, subscriptions, invoices, fraud/abuse prevention |
| Security & integrity | Rate limits, abuse detection, debugging, audit logs |
| Communications | Service notices, support replies; marketing only if you opt in |
| Legal | Comply with law, enforce Terms, protect rights |
4. Legal bases (where applicable)
Depending on your location, we rely on one or more of: contract (to provide the service you request), legitimate interests (secure/improve the service), consent (e.g. SMS alerts, optional marketing), and legal obligation.
5. Processors & sharing
| Category | Examples (current / planned) | Why |
|---|---|---|
| Hosting | DigitalOcean or similar | Run the app and databases |
| Resend | Account and alert email | |
| SMS | Twilio | Alert texts you opted into |
| Payments | Stripe (cards); none until crypto checkout is enabled (shelved) | Membership / subscriptions |
| Analytics | Only if we add a tool later — we will update this Policy | Product improvement |
| On-chain data providers | RPC nodes, indexers, public price APIs | Scans and live metrics |
We may disclose information if required by law, or to protect DeFi Daddy, our users, or the public from fraud/security threats.
International transfers: servers or processors may be outside your province/country (including the US). We take reasonable steps appropriate to the transfer context.
6. Retention
| Data | Typical retention |
|---|---|
| Account profile | While account is open + reasonable wind-down after deletion |
| Wallet addresses you added | While linked to your account; remove on delete/unlink |
| Scan/monitor job history | Then delete or anonymize — 90 |
| Alert logs / SMS content | Minimize; metadata as needed for abuse/support — 90 |
| Billing records | As required for tax/accounting |
| Server logs | Short rolling window unless needed for security investigation |
7. Your choices & rights
Depending on applicable law (including Canadian PIPEDA-style rules and, if you are in the EEA/UK, GDPR-style rights), you may request to:
- Access / correct your personal information
- Delete your account and associated personal data (subject to legal retention)
- Export a copy of account data we hold
- Withdraw consent for SMS/email alerts (see §8)
- Object to or restrict certain processing
Contact support@defidaddyapp.com. We may need to verify the account owner. Where required by law, we aim to respond within 30 days.
Account deletion: use in-product delete when available, or email support. Public on-chain history cannot be erased from the blockchain.
8. Alerts (email & SMS)
- Alerts are optional and require affirmative opt-in stating the purpose.
- SMS: frequency varies with markets and your settings; message & data rates may apply.
- Text STOP to cancel SMS; HELP for help (see consent copy).
- Email: unsubscribe or settings toggle for non-transactional mail; security/billing mail may still send.
9. Children
DeFi Daddy is not directed to anyone under 18 (or higher age of majority required in your region). We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.
10. Security & breaches
We use reasonable administrative and technical measures (access controls, TLS on the public site, secret management for API keys). No method of transmission or storage is 100% secure.
If we become aware of a breach affecting your personal information, we will notify you and/or regulators as required by applicable law.
11. Cookies & similar tech
We use essential cookies/session storage for login and security.
We may also use the Meta Pixel (Meta Platforms, Inc.) on our marketing or landing pages to measure visits, conversions, and campaign performance. Meta may receive page-view and event data (for example pages visited, buttons clicked, and referral parameters) subject to Meta’s terms. You can limit ad personalization via your Meta/Facebook account settings and browser controls. We do not use the Pixel for social posts while Social remains frozen; measurement on the website is separate from posting.
If we add other analytics or advertising cookies, we will update this Policy and, where required, request consent.
12. Changes
We may update this Policy. Material changes will be posted with a new effective date and, where appropriate, notified in-product or by email. Continued use after the effective date constitutes acceptance where permitted by law.
13. Contact
Privacy / support: support@defidaddyapp.com
Operator: DeFi Daddy
Mailing address: 5307 Victoria Drive #712, Vancouver, BC V5P 3V6, Canada