Co-parent Privacy Policy

Information We Collect

• Your email address. You sign in with a sign-in link sent to that email address, so there is no password. Your email address is your account.
• Your name, if you give one. The app asks for a name that the other members see, and you can skip it.
• What you add: shared lists (their names, members and split), expenses and payments (what they were for, the amount, the date, who paid, the split and their status, with every change), receipts, comments and notes, to-dos, things (their names, who has them and the history of hand-overs) and photos of things.
• People you invite. When you invite someone to a list or thing, we store their email address and send them an email with your name and the name of the list or thing.
• Reports and blocks. When a person reports something in Co-parent, we store the report: who reported it, who and what was reported, the reason, the details they wrote and a copy of the reported text. We get each report by email. When a person blocks someone, we store the block: both email addresses and when it was made.
• Suspensions. If we suspend an account that breaks the terms, we store its email address and when we suspended it. A suspended address cannot sign in.
• Your phone. A push token, so that we can send you notifications, and whether the phone is Android or iPhone.
• AI assistant keys. If you create a key, we store its name, what it can do, when it was made, last used and expires, and a hash of the key.
• Usage, crash and error data. App usage events (Firebase Analytics) and crash and error reports (Firebase Crashlytics), described under "Service Providers" below.
• Server logs. Our server logs each request: your IP address, which app or browser made it (the user agent), the time, and which record it asked for, by its id and not its content.
• Support messages. If you email hello@ppv.digital or use the support form, we receive your name, email address and message.

Co-parent has no location permission and does not read your contacts. Photos you add in the app are saved without their location and camera details (EXIF data). A photo sent through an AI assistant key is stored as the assistant sent it. Google AdMob and Firebase Analytics work out an approximate location, such as your city, from your IP address.

Who Can See What

Everything on a shared list or thing is visible to all of its members: their names and email addresses, expenses, payments, receipts, comments, to-dos and the history of changes.

Photos of a thing are visible to the members of that thing, like receipts, and nothing scans them.

When you add someone to a list or thing, they can see everything on it, including what was added before they joined.

A member can export a list's approved expenses to a spreadsheet (CSV) and share it outside Co-parent.

Your lists and things can be seen by their members, by any AI assistant that a member connects (see "AI Assistant Keys"), and by people at PPV Enterprises LLC, who look at them only to run Co-parent, to fix a problem, to act on a report, or when the law requires it.

Information About Children

Co-parent is for adults, but it is about children. Parents may enter information about their children: a child's name in a list or thing name, an expense for a doctor, a therapist or a school, or a to-do.

Information about your children can be seen by the members of that list or thing, by any AI assistant that a member connects, and by people at PPV Enterprises LLC in the cases listed under "Who Can See What". We use it only to run Co-parent, to fix a problem, to act on a report, or when the law requires it.

Information about your children is never used for ads: Co-parent puts nothing from your lists into an ad request.

How We Use Your Information

• To sign you in and keep your account
• To store your lists, things and to-dos, and to show them to their members
• To send sign-in links, invitations and notifications
• To keep Co-parent safe: to stop abuse and to act on reports
• To find and fix crashes and errors
• To answer your messages

We do not use what you add to Co-parent for advertising.

Emails and Notifications

We send email through Amazon SES, part of Amazon Web Services: your sign-in links, and an invitation when someone adds you to a list or thing.

Notifications go through Google Firebase Cloud Messaging and, on iPhone, Apple Push Notification service. They receive your phone's push token and the text of each notification, and Firebase gives the app an installation ID.

A notification can show names, amounts and the start of a comment, and your phone may show it on the lock screen.

You can turn notifications off in your phone's settings. The reminder is scheduled on your phone and sends nothing to us.

AI Assistant Keys

In Settings > AI assistant you can create a key and give it to an AI assistant. The assistant can then read your lists, things and to-dos, and act for you as far as the key allows.

What the assistant reads includes what the other members added: their names, amounts and comments. The company that runs your assistant receives that data under its own privacy policy, not ours.

Changes made with a key show "(via assistant)" in the history.

To stop an assistant, remove the key in Settings > AI assistant. It stops working at once.

We store only a hash of each AI assistant key, never the key itself.

Service Providers

These companies process data for us to run Co-parent:

• Amazon Web Services (AWS) runs our server and stores your data in the us-east-1 (Northern Virginia) region in the United States: the database (DynamoDB), photos and receipts (S3) and logs (CloudWatch). Amazon SES, part of AWS, sends our email.
• Google Firebase Cloud Messaging, and Apple Push Notification service on iPhone, deliver notifications, as described above.
• Google Firebase Analytics receives app usage events, such as that an expense was added or a to-do was marked done, with yes-or-no details only, plus an app-instance ID. Firebase Analytics also records some events on its own, such as app opens, sessions, time in the app and the screens viewed. With each event, Firebase Analytics receives the device model, operating system version, app version and language, and an approximate location, such as your city or country, worked out from your IP address. Firebase Analytics does not link any of this to your name or email address. Firebase Analytics never receives names, email addresses, amounts, descriptions, comments or photos. Firebase Analytics does not collect the advertising ID, its data is not used for personalized ads, and Google signals is turned off.
• Google Firebase Crashlytics receives crash and error reports with your device model, operating system, app version and an installation ID; email addresses are removed from crash and error messages before they are sent.
• Google AdMob shows the banner ads, and Google's consent tool asks for your choice about ads where the law requires it. See "Ads and No Sale" below.
• Cloudflare Email Routing receives email sent to hello@ppv.digital and delivers it to the mailbox where we read it.
• When you use the support form on our website, AWS stores your name, email address and message and deletes them automatically after 90 days, and Amazon SNS, part of AWS, emails us a copy.

Ads and No Sale

Co-parent is free and shows small banner ads from Google AdMob. Co-parent asks AdMob for non-personalized ads only, and it never puts anything from your lists, things or to-dos into an ad request.

To show and measure ads and to prevent fraud, Google AdMob receives your IP address, a device identifier (on Android, the advertising ID) and basic device and app information.

Co-parent does not ask to track you across other companies' apps and websites.

Google explains how it uses this data in How Google uses information from sites or apps that use its services.

We do not sell your personal data.

Security

Data travels between the app and our server over HTTPS. On our servers, AWS encrypts the database and the photo storage at rest.

Your session is a random value that the app keeps in your phone's secure storage. Signing out ends it.

No system is perfectly secure, and we cannot promise that data will never be lost or exposed.

Data Retention

• Your account (your email address and name) is kept until you delete your account.
• Lists, things and everything on them are kept while your account and the list or thing exist.
• When a photo or receipt is deleted or replaced, our versioned storage keeps the old copy for up to 30 days, so that a mistake can be undone, and then deletes it for good.
• Database backups keep up to 35 days of history, so deleted data leaves the backups within 35 days.
• Sign-in links expire after 15 minutes.
• Sessions end after 30 days, or when you sign out.
• Server logs, which hold IP addresses, are kept for 30 days.
• Abuse-control counters, which hold only a hash of your email address or IP address, count requests in periods of 15 minutes to one day and are then deleted automatically, usually within a few days.
• Firebase Analytics and Crashlytics data is kept under the retention settings of our Firebase project, and ad data under Google's policies.
• Messages sent with the support form are kept for 90 days and then deleted automatically, usually within a few days.
• Reports are kept for 1 year, also after an account they name is deleted, and then deleted automatically, usually within a few days.
• Blocks are kept until you unblock the person or delete your account. A block that someone else made stays until that person removes it or deletes their own account, also after you delete yours.
• When you leave a shared list or thing, we keep a record that you left it, with your email address, until the list or thing is deleted or you delete your account.
• After you delete your account, we keep a one-way hash of your email address for 31 days, so that old sign-ins and assistant keys stop working. It is then deleted automatically, usually within a few days.
• Emails sent to hello@ppv.digital, and the emailed copy of each support-form message and each report, stay in our mailbox until we delete them.

Deleting Your Account

Delete your account in the app with Settings > Delete account. If you cannot open the app, email hello@ppv.digital from the address you sign in with. We may first ask you to confirm from that address. We delete the account within 30 days and reply when it is done.

Deleted: your name and email, your sign-in on every phone, your assistant keys, your comments, the receipts and photos you added, and every list and thing that only you use. This includes the replies and the "I don't agree" notes you wrote, and the phones registered for your notifications. You are also removed from every list and thing you share with others.

Stays for the others: the money lines in lists you share. They keep the amount, date, description, split and state, and show you as "Former member". Their balances do not change. They lose the receipts you added.

Things you share, and the to-dos in lists you share, stay for the others too and show you as "Former member".

We finish the deletion within 30 days. Database backups keep up to 35 days of history, so deleted data leaves the backups within 35 days. Deleted photos and receipts leave our versioned storage within 30 days.

See how to delete your Co-parent account for the steps.

Your Choices

• Change your name in Settings.
• Delete a list or thing when you are its only member.
• Export a list's approved expenses to a spreadsheet (CSV).
• Remove an AI assistant key in Settings > AI assistant.
• Turn notifications off in your phone's settings.
• On Android, reset or delete your advertising ID in your phone's settings. Where the law requires it, Settings in Co-parent also shows "Ad privacy choices".
• Delete your account with Settings > Delete account.
• Email hello@ppv.digital to ask for a copy of your data, or to correct or delete it.

US State Privacy Rights

If you live in a US state with a consumer privacy law, you can opt out of targeted advertising and of the "sale" or "sharing" of your personal data for ads.

To opt out, use Settings > Ad privacy choices in Co-parent, shown where the law requires it, or email hello@ppv.digital.

Adults 18 or Older in the United States

Co-parent is offered only in the United States, to adults 18 or older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has an account, email hello@ppv.digital and we will delete it.

Changes to This Policy

When we change this policy, we update the "Last updated" date at the top of this page.

Contact

Contact PPV Enterprises LLC at hello@ppv.digital with any privacy question or request.