Privacy Notice

This Privacy Notice explains how Cheyenne Lofthouse-Wolf LCSW ("we", "us"), operator of Parent Rescue Room (the "Service"), collects, uses, shares, and protects personal information. We are the data controller for the personal information described here.

Information we collect

• Account data — email address, password (stored as a salted hash), and any name or profile details you provide.
• Child & parenting context you provide — child first name, age, notes, journal entries, and behavior descriptions you enter to get personalized coaching. Enter only what you're comfortable sharing; never enter medical or clinical records.
• Usage data — pages viewed, features used, feature interactions, and timing, used to keep the Service working and improve it.
• Device & log data — IP address, browser type, device type, and rough location (city-level) inferred from IP.
• Support communications — the content of any message you send us.
• Payment data is collected directly by Paddle (see below); we do not store card numbers.

How we use it

• Provide, personalize, and maintain the Service (contract).
• Generate AI coaching responses relevant to your situation (contract).
• Process payments and manage subscriptions (contract).
• Detect fraud, abuse, and security incidents (legitimate interest).
• Improve the Service and understand which features help most (legitimate interest).
• Send account, service, and safety-related notices (contract / legal obligation).
• Send optional newsletter emails when you subscribe (consent).

Who we share it with

• Lovable Cloud — our hosting, database, and authentication provider.
• Paddle.com — our Merchant of Record for all subscriptions. Paddle handles payments, tax, invoicing, refunds, and related buyer support.
• AI model providers (Google Gemini and OpenAI, via the Lovable AI Gateway) — process the prompts and transcripts you submit to generate coaching responses and audio. Providers may retain content briefly for abuse monitoring per their policies. Do not enter regulated health information.
• Email delivery providers — used to send account, password, and newsletter emails.
• Authorities when required by law or to protect rights, property, or safety.

We do not sell your personal information, and we do not use your child's data for advertising.

Data retention

We retain account and content data for as long as your account is active. When you delete your account, we delete or anonymize your data within 30 days, except where we're required to retain records for tax, fraud-prevention, or legal reasons.

Your rights

Depending on where you live, you may have the right to access, correct, delete, port, restrict, or object to processing of your personal information, and to withdraw consent for optional processing. To exercise these rights, email support@parentrescueroom.com. You may also have the right to complain to a data-protection authority.

Security

We use technical and organizational safeguards including encryption in transit (TLS), encryption at rest, hashed passwords, row-level-security policies on the database, restricted service-role credentials, and audit logs. No system is perfectly secure — please use a strong, unique password.

Cookies

We use only essential cookies and browser storage needed to keep you signed in and to remember your preferences. We do not use advertising or third-party tracking cookies.

Children

The Service is for parents and caregivers (18+). We do not knowingly collect information from children directly. When a parent enters information about their own child, the parent is responsible for that content.

International transfers

Data may be processed in the United States and other countries where our providers operate. Where required, we rely on adequacy decisions, Standard Contractual Clauses, or equivalent safeguards.

Changes

We may update this notice from time to time. Material changes will be announced in the app or by email.

Contact

Cheyenne Lofthouse-Wolf LCSW · support@parentrescueroom.com