1. What we collect
Account details: your name, email address, password (stored only as a salted hash), optional phone number and profile photo, your language, time zone and notification preferences, and whether you signed in with Google or Apple. Legalfina's account service holds these.
Co-parent link details: who invited whom, when the link was created, the names of the child or children you choose to enter, and each parent's membership status (including whether an account has been deleted).
Message content: the subjects, messages, attachments and drafts you exchange with your co-parent. These are encrypted on your device before they reach us; we store only the encrypted form, together with metadata such as the time sent, the sending account and whether the message has been read.
Sage reviews: when you ask the Sage to review a draft, the draft text and the display names used in it are sent to us and to our AI model provider to generate the review (see section 4).
Billing: your subscription status and billing history. Card details are handled by our payment processor (Stripe, or Apple or Google if you subscribe through their stores) and never reach our servers.
Technical data: device type, app version, IP address, crash reports and basic usage events needed to run and secure the Service, plus the push-notification tokens you allow.
2. How we use it
We use this information to provide the Service (deliver your messages, keep your shared record, send the notifications you have asked for), to bill subscriptions, to answer support requests, to keep the Service secure and reliable, to send service announcements, and to meet our legal obligations.
We do not sell personal information, do not show advertising, and do not use the content of your messages or Sage drafts to train AI models or for any purpose other than providing the feature you asked for.
3. Encryption and security
Every message, subject, attachment and draft is encrypted on your device with a key that belongs to your link alone before it is stored. Legalfina's servers, Firebase (our database and real-time delivery layer) and our attachment storage hold only ciphertext.
Legalfina keeps each link key in custody so that both parents can always read the shared record on any device. The key is wrapped with a hardware-backed key management service (AWS KMS), is released only to an authenticated, active member of the link, and every release is logged. Our staff do not use link keys to read messages, except where the law requires us to (see section 5). When a link is permanently closed, its key is destroyed and the ciphertext can never be read again.
All connections use TLS. Accounts can be protected with two-factor authentication. On phones and desktops the link key is kept in the platform's secure storage (Keychain, Android Keystore or the operating system's protected storage).
No system is perfectly secure. If we learn of a breach affecting your personal information we will notify you and the relevant authorities as the law requires.
4. The Sage and AI processing
The Sage reviews the tone of a draft only when you ask it to, or when you have turned on automatic review in Settings → The Sage. To do this, the draft text and the names you have entered for your co-parent and child are decrypted on your device and sent over TLS to Legalfina, which forwards them to a third-party AI model provider under a contract that prohibits the provider from using the text to train its models and limits how long it may be kept.
Legalfina keeps the review result (scores, suggestions) so it can be shown to you; the result is stored encrypted in the same way as the draft it belongs to. Legalfina does not keep a separate plain-text copy of your draft once the review has been produced.
You can switch the Sage off at any time. When it is off, no message content is sent for review.
5. Who we share information with
Your co-parent: your name, profile photo, the content of the link you share and whether you have deleted your account. That is the point of the Service.
Service providers who process data on our behalf and under our instructions: Google Firebase (database, real-time delivery and push notifications), Amazon Web Services (key management, attachment storage, email delivery), our AI model provider (Sage reviews only), Stripe, Apple and Google (payments), and crash-reporting and email-delivery services. None of them receives your link keys.
Legal requirements: we may disclose information if required by law, subpoena or court order, or to protect the rights, safety or property of our users or the public. Because message content is encrypted with a key we only release to link members, what we can produce in response to a legal request is limited to the metadata and account details described above, unless the request lawfully compels us to release a link key.
A successor: if Legalfina is involved in a merger, acquisition or sale of assets, your information may be transferred, subject to this Policy.
6. Retention and deletion
Your shared record is kept for as long as either parent on the link has an account, because each parent is entitled to the record. Deleting your account (Settings → Privacy & Security → Delete account) deactivates it immediately and signs you out of every device, but keeps your account row and your side of the record so that your co-parent's history stays intact and so that you can return by signing in again with the same email.
Once both parents on a link have deleted their accounts, we delete the link's encrypted messages, attachments and events and destroy the link key. Two years after that, the remaining link records and the deleted accounts' personal details (name, email, phone, photo, sign-in identifiers) are anonymized so they can no longer identify anyone. Billing records are kept for as long as tax and accounting law requires.
Backups and logs are purged on a rolling schedule and are never used to restore a record that has been deleted.
7. Your rights and choices
You can view and change your profile, notification and Sage settings in the app at any time. You can ask us for a copy of your records by email, and you can delete your account as described above.
Depending on where you live (including California under the CCPA/CPRA and the EEA/UK under the GDPR), you may have the right to access, correct, port or delete your personal information, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. We do not sell or share personal information for cross-context behavioural advertising, and we do not discriminate against you for exercising your rights. To make a request, use our contact page (coparentsage.com/contact) and choose "Privacy & data request"; we may need to verify your identity first.
Remember that because the record is shared, a request to delete content you sent to your co-parent cannot be honoured while your co-parent's account exists; the retention rules in section 6 describe what happens instead.
8. Children
CoParentSage is for parents and guardians. We do not knowingly collect personal information from anyone under 18, other than the child's name a parent chooses to enter. If you believe a child has created an account, contact us and we will remove it.
9. Where your data is processed
Legalfina is based in California and our service providers store data in the United States. If you use the Service from elsewhere, your information is transferred to and processed in the United States, where privacy laws may differ from those of your country. We rely on standard contractual clauses or other lawful mechanisms where they are required.
10. Changes to this Policy
We may update this Policy. If a change is material we will tell you by email or in the app before it takes effect. The effective date at the top always shows the current version.
11. Contact
Legalfina, Inc., California, USA. Privacy questions and requests: coparentsage.com/contact (choose "Privacy & data request").