Privacy Policy
Last updated: June 2026
1. What we collect
Account info you provide (name, email, optional phone, profile photo); content you create (messages, events, expenses, documents, recordings, professional notes); minor children's information you choose to enter (first name, date of birth, allergies, school) for parenting coordination; payment metadata processed by Stripe (we never see full card numbers); device identifiers (push notification tokens, app version, OS); and basic operational telemetry (sign-in events, error reports) needed to run the service.
2. How we use it
To operate the service, secure your account, deliver notifications, process payments, generate court-ready reports you request, run AI tone analysis on messages you send through our composer, and improve the product. We do not sell your personal information. We do not use your content to train third-party AI models. Tone analysis runs on Lovable AI Gateway providers (Google Gemini / OpenAI) and is governed by their no-training enterprise terms.
3. Call recordings
If you start a recorded call, all participants are notified in-app and must consent before the recording begins. Recordings are encrypted at rest, retained for the period configured by your Circle (default 90 days, max 1 year for Pro), and then permanently deleted. Court-export downloads include a chain-of-custody manifest.
4. Device permissions
Camera and microphone are requested only when you start or join a call. Photo library is requested only when you upload a document. Push notifications are requested after sign-in so we can deliver message, call, and reminder alerts. You can revoke any of these in OS settings.
5. Sharing
Content inside a Circle is shared only with the co-parents and invited professionals you grant access to. Subprocessors: Lovable Cloud (Supabase) for data hosting, Stripe for payments, Daily.co for video calls, Cloudflare for delivery, Google/OpenAI for AI features. The full list lives on our Security page.
6. Retention & deletion
You can delete your entire account at any time from Settings → Account → Delete my account. Deletion is immediate and irreversible; subscriptions are cancelled, profile and owned data are removed, and shared content authored by you is anonymized to 'Removed user'. Backups roll off within 30 days.
7. Your rights (GDPR / CCPA)
Access, export (machine-readable JSON via support), correction, deletion, restriction, and objection. EU/UK residents may lodge a complaint with their supervisory authority. California residents have the right to know, delete, correct, and opt out of sale (we do not sell). Email privacy@thecoparentcircle.com.
8. Children
The service is intended for adults 18+. We do not knowingly collect personal information directly from children under 13. Information about minor children entered by their parents is used solely to coordinate parenting and is protected with the same safeguards as parent data. If you believe a child has signed up directly, contact us and we will delete the account.
9. International transfers
We process data in the United States and the European Union. Cross-border transfers from the EU/UK rely on the Standard Contractual Clauses.
10. Security
Encryption in transit (TLS 1.2+) and at rest (AES-256). Row-level security isolates each Circle. Audit logs record sensitive actions. See the Security page for details and how to report vulnerabilities.
11. Changes
We will post the updated date at the top of this page and notify you in-app for material changes.
12. Contact
Privacy questions: privacy@thecoparentcircle.com. Data Protection Officer: dpo@thecoparentcircle.com.
This policy is provided for transparency about our current practices. We recommend reviewing it with qualified counsel for your jurisdiction before relying on it as a binding legal document.