Privacy Policy
Last updated: 8 August 2026
At My Dad's Voice, privacy and data security are central to the way the service is designed. This policy explains the information used to provide each communication space, how that information is handled, and the controls available to subscribers and caregivers.
My Dad's Voice is operated from South Africa and is designed to support compliance with the Protection of Personal Information Act, 2013 (POPIA). Where other data-protection laws such as the GDPR apply, we aim to meet the obligations that apply to our role and the service being provided.
1. Information we collect
To provide a personalised communication space, we may process:
- Account and subscriber data: names, email addresses, subscription records, payment references and secure access credentials. Payment-card details are handled by the payment provider and are not stored by My Dad's Voice.
- Communication-board content: custom phrases, predictive words, email contacts, website shortcuts and configuration preferences.
- Family content: messages, photographs, audio or voice recordings, videos or links, and documents uploaded or shared by authorised users.
- Support and contact information: information you submit when contacting us, together with basic request information used for security and abuse prevention.
2. Tenant isolation and how we protect your information
Each SaaS communication space is provisioned with its own tenant database and protected per-tenant file storage. This architecture is designed to prevent one customer space from accessing another customer's data.
We do not routinely inspect or analyse private content for advertising or profiling. Limited authorised technical access may be necessary for security, backups, troubleshooting, legal obligations, or support requested by the account holder.
3. How we use your data
Information is used only as reasonably necessary to:
- Provision and maintain the private communication space.
- Provide communication-board functions, speech output, routing, messages and media.
- Manage approved family contacts and caregiver controls.
- Process subscriptions, payment status and account administration.
- Provide security, backups, service monitoring and technical support.
- Respond to support, privacy and data-deletion requests.
4. Third-party sharing and service providers
- No data selling: we do not sell, lease or trade personal information, family photographs or messaging history for marketing purposes.
- Essential service providers: hosting, email-delivery and payment providers may process the minimum information required to operate those services. They are used to provide infrastructure, communications and billing rather than to advertise to users.
5. Cookies and technical information
The service uses essential session cookies and technical request information required for secure sign-in, caregiver sessions, demo sessions, fraud/abuse prevention and reliable operation. We do not need advertising cookies to provide the core service.
6. Data retention and deletion
Caregivers can remove editable content such as phrases, messages and media using the controls made available by their plan. A subscriber may also request permanent deletion of the tenant account and its primary data.
Deletion from the live service is intended to be permanent. Limited copies may remain in protected operational backups until the applicable backup-retention period expires. We may also retain narrowly required billing, audit or legal records where law or legitimate security requirements require this.
7. Security
We use administrative and technical safeguards intended to protect communication spaces against unauthorised access, alteration and loss. These include tenant isolation, protected storage, encrypted transport, secure platform administration and caregiver-managed access controls. No internet service can promise absolute security, so we continually review the platform as it develops.
8. Your privacy rights
Subject to applicable law, you may have rights to request access to personal information, correction of inaccurate information, deletion, restriction or objection to certain processing. Account holders may contact us to exercise these rights or to ask how their data is handled.