ParentBridge ("we", "our", "the App") provides a co-parenting coordination platform. This Privacy Policy explains how we collect, use, store, and protect your information.

1. Information we collect

Account information

• Email address, first name, last name.
• Authentication credentials (hashed — never stored in plaintext).

Family & co-parenting data

• Family group membership and roles.
• Children's names and basic information, provided by parents.
• Custody schedules, swap requests, and calendar events.

Financial data

• Shared expense records (amount, merchant, category, date).
• Receipt images, attached by the parent as proof of purchase — stored encrypted and not processed by AI.
• Settlement and reimbursement records.

Communications

• Messages between co-parents, encrypted at rest.
• If you use Calm View on a message, its private AI summary (see Section 2).

Health data

• Children's health profiles, medications, and allergy information.
• Encrypted at the application level before storage, and never sent to any third-party AI service.

External co-parent contact data (Solo Mode)

When you add a co-parent who is not on the app as a contact, we store their display name, optional phone/WhatsApp numbers, per-channel relay opt-in flags, and any suppression entries for channels they've opted out of. This is used only to deliver the updates you log and to attribute their replies back to your family record. See Section 6.

The email address is provided by the co-parent themselves, not by you. You share an invite link; the co-parent opens it, enters their own email address, and explicitly consents to receive updates. When they do, we store — as the record of that consent — the email they entered, the date and time of consent, and the IP address from which they consented (consent audit and abuse prevention).

Relay & reply records

• A record of each relay we send (the channel, delivery status, and timestamps).
• Any reply email we receive is stored encrypted and automatically deleted within 30 days.
• Reply and invite links are single-use and expire automatically; we may log the originating IP address when a link is used, for security and abuse prevention.

Automatically collected

• Device type and operating system.
• Crash reports and error diagnostics — no personal information included.
• Anonymized usage patterns.

2. AI features & Calm View

ParentBridge offers one opt-in AI feature, Calm View. No message is ever sent to an AI service in the background.

• Calm View (Premium). When a recipient taps "Calm View" on an incoming message, only that message's text and your app language are sent to Google's AI to generate a private summary and a suggested neutral reply. No names, family identifiers, or children's information are included. Tapping the button is the consent for that single message — a per-use prompt confirms it first.

We keep your original message unchanged; the AI summary is stored separately alongside it. Receipt images and children's health data are never sent to any AI service.

3. How we use your information

4. Storage & security

• Encryption at rest: sensitive personal data — names and dates of birth, message bodies, calendar event titles and locations, expense merchants and notes, document names, medication and provider details, emergency info, and school and co-parent contact names — is encrypted at rest, with the encryption keys managed separately from the data. (Email addresses and phone numbers are kept in a usable form where it's necessary to sign you in or deliver a relay.)
• Access controls: strict, per-family access rules mean you can only see data for families you belong to.
• In transit: all traffic is encrypted using TLS (HTTPS).
• On your device: your login session and any offline changes are kept in your device's secure storage.
• Logs: our logs do not contain plaintext personal content such as message text, health details, or contact details.
• File isolation: uploaded files, such as receipts, are isolated per family.

5. Third-party services

6. External co-parents (Solo Mode)

A Solo Mode user may add their co-parent as a contact rather than inviting them to install ParentBridge. The contact has not created an account; the limited information above is stored solely to deliver relays on the in-app user's behalf. Because the external co-parent is still a data subject under GDPR/CCPA, we give them direct, no-account-required control over future contact.

For the email channel, no email is ever sent until the co-parent has opted in themselves: the in-app user shares an invite link through their own channel, and the co-parent enters their own address and consents on a ParentBridge page before any email is sent. We retain that consent (date, time, and IP address). The SMS and WhatsApp channels rely on the in-app user's legitimate interest, with the opt-out controls below.

Every relay tells the recipient

• That ParentBridge is the sender, and which in-app user initiated it.
• How to opt out of that channel (one-click email unsubscribe link; an unsubscribe link in every SMS).
• A link to this Privacy Policy.

How they opt out

• Email: the one-click unsubscribe link in any relay footer. Processing is immediate and channel-specific.
• SMS: tap the unsubscribe link in any relay text. Our SMS sender is alphanumeric and one-way, so STOP cannot be received — the link is the only opt-out.
• All at once: the in-app user can archive the contact, which invalidates pending reply links and stops every channel.

Once opted out, the address is added to a suppression list that persists even if a different contact later uses the same address. To have their information erased entirely, the external co-parent can ask the in-app user to delete the contact, or email privacy@parentbridge.space. We never send them marketing, and never sell or rent their information.

7. Children's data (COPPA)

• ParentBridge is used by parents/guardians, not by children directly.
• Children's data is entered and managed by authorized parents/guardians.
• We do not knowingly collect information directly from children under 13.
• Parents may request deletion of their children's data at any time; children's health data receives additional encryption.

8. Your rights

Under the GDPR you have the right to access, correct, delete, export (data portability), and restrict processing of your personal data, to object to processing based on legitimate interest, and to withdraw consent for optional features. To exercise these rights, email privacy@parentbridge.space. You also have the right to lodge a complaint with your local data-protection supervisory authority if you believe your data has been handled unlawfully.

9. Data retention

10. Data deletion

When you delete your account, we erase your personal information — your name, email address, and saved payment details — and disable your sign-in immediately, so you can no longer access the account.

We retain, with your name removed and shown as “Former Member”, the records you created that your co-parent and a court may rely on: messages you sent, expenses you logged, and custody schedule and handoff events. We keep these on the legal basis that they may be needed for the establishment, exercise, or defence of legal claims (GDPR Art. 17(3)(e)) and to preserve the shared co-parenting record. External co-parent contacts you created are deleted along with their reply links and delivery records — but channel suppressions are kept indefinitely so any opt-out stays in force. Any routine backups age out on our providers’ standard rotation.

11. Contact

For privacy inquiries, email privacy@parentbridge.space. We will notify you of material changes to this policy via in-app notification and email.