Privacy Policy
ParentBridge is operated by an individual (a sole proprietor) established in the European Union / EEA, who acts as the data controller under the EU General Data Protection Regulation (GDPR). There is no registered company. For any privacy request or question, contact privacy@parentbridge.space.
Contents
ParentBridge ("we", "our", "the App") provides a co-parenting coordination platform. This Privacy Policy explains how we collect, use, store, and protect your information.
1. Information we collect
Account information
- Email address, first name, last name.
- Authentication credentials (hashed — never stored in plaintext).
Family & co-parenting data
- Family group membership and roles.
- Children's names and basic information, provided by parents.
- Custody schedules, swap requests, and calendar events.
Financial data
- Shared expense records (amount, merchant, category, date).
- Receipt images, attached by the parent as proof of purchase — stored encrypted and not processed by AI.
- Settlement and reimbursement records.
Communications
- Messages between co-parents, encrypted at rest.
- If you use Calm View on a message, its private AI summary (see Section 2).
Health data
- Children's health profiles, medications, and allergy information.
- Encrypted at the application level before storage, and never sent to any third-party AI service.
External co-parent contact data (Solo Mode)
When you add a co-parent who is not on the app as a contact, we store — on your behalf — their display name, optional email and phone/WhatsApp numbers, per-channel relay opt-in flags, and any suppression entries for channels they've opted out of. This is used only to deliver the updates you log and to attribute their replies back to your family record. See Section 6.
Relay & reply records
- A record of each relay we send (the channel, delivery status, and timestamps).
- Any reply email we receive is stored encrypted and automatically deleted within 30 days.
- Reply links are single-use and expire automatically.
Automatically collected
- Device type and operating system.
- Crash reports and error diagnostics — no personal information included.
- Anonymized usage patterns.
2. AI features & Calm View
ParentBridge offers one opt-in AI feature, Calm View. No message is ever sent to an AI service in the background.
- Calm View (Premium). When a recipient taps "Calm View" on an incoming message, only that message's text and your app language are sent to Google's AI to generate a private summary and a suggested neutral reply. No names, family identifiers, or children's information are included. Tapping the button is the consent for that single message — a per-use prompt confirms it first.
We keep your original message unchanged; the AI summary is stored separately alongside it. Receipt images and children's health data are never sent to any AI service.
3. How we use your information
| Purpose | Legal basis |
|---|---|
| Provide co-parenting coordination features | Contract performance |
| Store receipt images attached to expenses (proof of purchase) | Contract performance |
| Summarize an incoming message you choose to run through Calm View | Consent (per use) |
| Generate expense reports (PDF) | Contract performance |
| Send push notifications about schedule changes | Consent |
| Relay updates to an external co-parent (Solo Mode) | Legitimate interest of the in-app user + opt-out for the recipient |
| Attribute an external co-parent's replies to the family record | Legitimate interest of the in-app user |
| Apply STOP / unsubscribe / suppression to prevent further contact | Legal obligation (CAN-SPAM, TCPA, GDPR right to object) |
| Crash reporting, fraud prevention, and security | Legitimate interest / legal obligation |
4. Storage & security
- Encryption at rest: sensitive personal data — names and dates of birth, message bodies, calendar event titles and locations, expense merchants and notes, document names, medication and provider details, emergency info, and school and co-parent contact names — is encrypted at rest, with the encryption keys managed separately from the data. (Email addresses and phone numbers are kept in a usable form where it's necessary to sign you in or deliver a relay.)
- Access controls: strict, per-family access rules mean you can only see data for families you belong to.
- In transit: all traffic is encrypted using TLS (HTTPS).
- On your device: your login session and any offline changes are kept in your device's secure storage.
- Logs: our logs do not contain plaintext personal content such as message text, health details, or contact details.
- File isolation: uploaded files, such as receipts, are isolated per family.
5. Third-party services
| Service | Data shared | Purpose |
|---|---|---|
| An AI provider (Google) | The text of a message you run through Calm View | Generates the summary / suggested reply. No names or identifiers, and never receipts or health data. |
| Cloud infrastructure providers | Your application data | Hosting, authentication, and file storage |
| An SMS / WhatsApp delivery provider | An external co-parent's number and a brief update summary | Delivering relayed updates (first names only — never medical details or full records) |
| An email delivery provider | An external co-parent's email and a brief update summary | Sending and receiving relayed updates by email |
| A crash-reporting provider | Diagnostic / error data | Stability and bug fixing (no personal data) |
| The app stores (Apple App Store / Google Play) | Purchase information | In-app purchase verification |
| External calendar feeds you add | Only the calendar URL you paste | One-way, read-only import of events |
6. External co-parents (Solo Mode)
A Solo Mode user may add their co-parent as a contact rather than inviting them to install ParentBridge. The contact has not created an account; the limited information above is stored solely to deliver relays on the in-app user's behalf. Because the external co-parent is still a data subject under GDPR/CCPA, we give them direct, no-account-required control over future contact.
Every relay tells the recipient
- That ParentBridge is the sender, and which in-app user initiated it.
-
How to opt out of that channel (one-click email unsubscribe;
STOPfor SMS/WhatsApp). - A link to this Privacy Policy.
How they opt out
- Email: the one-click unsubscribe link in any relay footer. Processing is immediate and channel-specific.
- SMS / WhatsApp: reply STOP, UNSUBSCRIBE, CANCEL, END, or QUIT; START or UNSTOP re-enables the channel.
- All at once: the in-app user can archive the contact, which invalidates pending reply links and stops every channel.
Once opted out, the address is added to a suppression list that persists even if a different contact later uses the same address. To have their information erased entirely, the external co-parent can ask the in-app user to delete the contact, or email privacy@parentbridge.space. We never send them marketing, and never sell or rent their information.
7. Children's data (COPPA)
- ParentBridge is used by parents/guardians, not by children directly.
- Children's data is entered and managed by authorized parents/guardians.
- We do not knowingly collect information directly from children under 13.
- Parents may request deletion of their children's data at any time; children's health data receives additional encryption.
8. Your rights
Under the GDPR you have the right to access, correct, delete, export (data portability), and restrict processing of your personal data, to object to processing based on legitimate interest, and to withdraw consent for optional features. To exercise these rights, email privacy@parentbridge.space. You also have the right to lodge a complaint with your local data-protection supervisory authority if you believe your data has been handled unlawfully.
9. Data retention
| Data type | Retention |
|---|---|
| Account, messages, expenses, health & activity records | Until you delete your account |
| External co-parent contacts | Until archived/deleted or erasure requested |
| Channel suppressions (STOP/unsubscribe) | Indefinitely — to honor opt-out forever |
| Reply links | Single-use; expire automatically |
| Reply emails we receive | Deleted within 30 days |
| Crash / diagnostic reports | Kept only as long as needed for debugging |
10. Data deletion
When you delete your account, your personal data is removed from our live systems immediately. Messages you have sent to a co-parent are anonymized rather than deleted, so their record of the conversation stays intact. External co-parent contacts you created are deleted along with their reply links and delivery records — but channel suppressions are kept indefinitely so any opt-out stays in force. Any routine backups age out on our providers' standard rotation.
11. Contact
For privacy inquiries, email privacy@parentbridge.space. We will notify you of material changes to this policy via in-app notification and email.