Space Hugs Privacy Policy

Plain-language policy, version 2026-10-28. This policy describes the app exactly as built.

The short version

Space Hugs is set up and controlled by a parent or legal guardian (or an authorized teacher). The account belongs to the adult — never to the child. We collect the minimum an adult gives us to send one encouraging message a day, we show no ads, and we never sell personal information.

What we collect, and why

• The adult's email address — to create and sign in to the account.
• The adult's account PIN — stored only as a one-way cryptographic hash; we cannot read it.
• For each child profile, only three things: a first name or nickname (used to personalize the daily message), an age band (5–8, 9–12, 13–17, or 18+, used to pick suitable wording), and a daily delivery time and time zone (used to send the message at the right moment).
• Settings the adult chooses — which of the three characters delivers the messages, whether delivery goes to the child's device or the adult's phone, what the messages should focus on for this child (for example, building confidence or staying calm — the adult guides the app), and pause on/off.
• An optional message the adult writes — if the adult writes a personal message, we store it and show it to the child about once a week, in place of a library message.
• Push notification information — when the adult turns on notifications, the device gives us a push address and encryption keys so we can deliver the daily notification. The notification itself never contains the message text.
• Delivery records — which message was sent on which date and whether it was marked as seen. We keep recent records so a message never repeats within 30 days; older detail is deleted or aggregated after 90 days.

What we never collect

No surname or exact birth date. No school, address, photo, contacts, or precise location. No health information or diagnosis. Nothing is collected from the child directly — children do not have accounts, do not sign in, and are never asked to type, reply, or complete anything in the app.

What we do not do

• No advertising, and no advertising trackers.
• No selling or sharing personal information for marketing.
• No behavioral profiling of children.
• No social features: no friends, comments, chat, or public profiles.

The adult is in control

The account holder can at any time: review and edit each child profile, pause or resume delivery, delete a child profile (which stops its deliveries and removes its device link and personal message), and delete the whole account from inside the app. Account deletion removes the account, child profiles, paired devices, push subscriptions, and personal messages.

Security

Data travels over encrypted connections (HTTPS). PINs are stored only as salted one-way hashes. Push subscriptions and delivery records are treated as protected operational information.

Not medical care

Space Hugs provides encouragement only. It is not medical, mental-health, emergency, or therapeutic care, and it is not a substitute for professional help.

Changes and contact

If this policy changes in a way that matters, we will update this page and note the new version and date here. Questions: spaceracerdealer1@gmail.com.