Privacy Policy | Coparia

Coparia is a planning tool for separated parents. It holds calendars, parenting schedules and messages about children, which is about as sensitive as ordinary family data gets. This page says exactly what we collect, why, and who else ever sees it.

Throughout this policy, “Coparia” means the service at coparia.app, and “we” and “us” mean Coparia Labs LLC, a California limited liability company. It is the company that operates Coparia and the controller of the personal information described here. If you have a question about anything here, write to support@coparia.app.

The short version

We do not sell your information, and we do not share it with advertisers.
There is no analytics, no advertising pixel and no third-party tracker on this site or in the app.
Message content is encrypted with a key we control per environment, and every decryption is logged.
Your co-parent sees what you put in your shared family. We cannot referee that for you, so what you write matters.
You can delete your account yourself, from Settings, at any time. What that does and does not erase is described below, and the honest summary is that it removes you, not your co-parent’s record of the years you shared.

What we collect

Your account. Your email address, the display name you choose, and an avatar you pick from a set of images. We do not ask for your legal name, your address, your phone number or your date of birth. If you sign in with Google, Google tells us your email address and the name on your Google account, and nothing else.

Your preferences. Time zone, clock and date format, and how you want to be notified.

Your family’s information. This is the substance of the product, and you enter it:

Children’s first names, nicknames if you use them, dates of birth if you enter them, and an avatar you pick for each. Nothing else about a child: no photographs, no school records, no medical or legal documents.
Calendar events, including titles, dates and times, notes, and a location you type as free text.
Parenting schedules, holiday rules, birthday arrangements and any one-off overrides.
Messages between the adults in your family, and reactions to them.
Who is a member of your family, and whether they are a parent or a viewer.

Technical records. Server logs of requests to the service, an activity log of significant changes within a family (so a change can be traced to who made it), and delivery records for emails and push notifications we send you.

What we do not collect

We want to be specific, because “we may collect” language usually hides more than it tells:

No advertising or analytics trackers. None on this site, none in the app. Nothing measures which pages you read.
No location tracking. The app never asks your device for its location, and never receives it.
No cookies for tracking. Signing in stores what is needed to keep you signed in. That is all.
No photographs of children. Avatars are picked from a fixed set of images we ship.
No purchase of information about you from data brokers or anyone else.
No IP address stored alongside your agreement to these terms.

Why we hold it, and on what basis

We hold your family’s information for one reason: to show it back to the people you have shared it with, and to send the reminders and notifications you asked for. It is used to provide the service you signed up for, and to keep that service secure and working.

We do not profile you, we do not make automated decisions about you, and we do not use your family’s information to train machine learning models.

Who else sees it

Coparia runs on Amazon Web Services in the United States (Oregon). AWS stores the data on our behalf. Beyond that, information reaches a small number of processors, and only for the job named:

Who	What reaches them	When
Amazon Web Services	Everything, as our hosting and database provider	Always
Amazon Cognito (AWS)	Your email address and sign-in credentials	When you sign in or sign up
Google	The sign-in exchange itself	Only if you choose “Sign in with Google”
Resend	Your email address and the content of the email	Whenever we send you mail, including sign-in codes
Anthropic	The calendar information a question needs, or the text or picture you hand to Copie	Only when you use Copie
Cloudflare Turnstile	A challenge response, to prove you are not a bot	On sign-up with a password
Geoapify	The characters you type into an event’s location box	Only while you type in that box
Your browser’s push service (Apple, Google or Mozilla)	The notification we are delivering	Only if you turn on push notifications

Two of those deserve a note.

Address suggestions. When you type into an event’s location box, those characters go to Geoapify so it can suggest addresses. Your request is proxied through our servers, so Geoapify does not receive your IP address or anything identifying you or your family. To rank nearby results first we send a single coarse point derived from your time zone, which is a region, not your location. We count how many address lookups happen per day, as a total with no user, family or search text attached to it.

Artificial intelligence. Coparia has an assistant, Copie. When you use it, and only then, some of your family’s information goes to Anthropic to answer what you asked.

What goes depends on what you asked for. A question about your own schedule sends the part of your calendar that could answer it: parenting days, event titles, times and the names of the people involved, over the window the question is about. Pasting an appointment in, or handing Copie a photo or a document, sends that text or that picture. Asking how Coparia works sends your question and one of our help articles, and nothing about your family at all. Your messages are never sent. No part of the assistant reads your family’s conversations.

Nothing is sent unless you use the assistant. If you never press it, nothing of yours reaches Anthropic. Anthropic processes it to return an answer and does not train models on it.

We may also share information if the law requires it, or to protect someone’s safety, and with professional advisers who are themselves under a duty of confidence. We will not hand over your family’s information to another private party without a legal obligation to do so.

What your co-parent sees

Everyone in a family sees that family’s calendar, parenting schedule and children. Messages are visible to the adults in the conversation. Events marked private are limited to the adults, and viewers see less than parents.

This is worth understanding plainly, because it is the part of a co-parenting tool that people are surprised by: we cannot make something you shared unseen, and we do not mediate disputes about what was written. The activity log records who changed what, which is deliberate, because in a disagreement about a schedule the record is the point.

Security

Everything travels over TLS, and our servers verify the database’s certificate on every connection.
Message content is encrypted before it is stored, using envelope encryption under a key held in AWS KMS that is dedicated to messages. Every decryption is recorded in an audit log.
Application containers run without root privileges on a read-only filesystem.
Access to production is limited to people who need it, over short-lived credentials rather than stored keys.

No service can promise it will never be breached, and we are not going to pretend otherwise. If a breach affects your information, we will tell you.

How long we keep it

Your family’s information is kept while your account is open, because a co-parenting record is useful precisely for being long-lived.
Archived families are hidden but recoverable, so an archive made in anger can be undone.
Sent emails are purged from our delivery queue after 14 days.
Deleted items are marked deleted and removed from view immediately.
Backups. Our database is backed up continuously and those backups are kept for 30 days. A backup cannot be edited, so something you delete today survives in them until the last backup taken before the deletion ages out. That is the honest window: gone from the live service at once, gone from backups within 30 days. We do not restore a backup to recover deleted data for anybody, including ourselves, except to bring the service back after a failure.

Deleting your account

You can delete your account yourself, from Settings → Sign-in & security. It takes effect immediately and cannot be undone by us.

What we erase. Your email address, your avatar, your app preferences, the devices you had notifications going to, your unread notifications, and any download link you had generated. Your sign-in credential is destroyed, so the account can no longer be used to get in.

What happens to your families. A household where another parent is still a member carries on without you: your membership ends and they keep the calendar. A household where you were the only parent is archived, which hides it and puts it on the same retention footing as any other archived family.

What we keep, and why. Your display name stays on the entries you made in families you shared. Nothing else about you does. We keep it because a co-parenting record is a shared record: the parenting history, the events and the messages in a family belong to both parents, and stripping one parent’s name out of it would not delete your information so much as rewrite theirs. For a document people rely on during a separation, and sometimes put in front of a court, we think that is the wrong trade.

This is a decision we have made deliberately rather than a limitation. If you want your name removed from a shared family as well, write to us and we will talk it through with you and, where we can, with the other parent. Under the GDPR this sits within the exception for the rights and freedoms of others; if you disagree with how we have drawn that line, you can complain to us and to your data protection authority.

Children

Coparia is for adults. It is not directed at children, children do not have accounts, and we do not knowingly collect information directly from a child.

Information about children is entered by their parents, and stays limited to what the product needs to plan a week: a first name, optionally a nickname and a date of birth, and a picked avatar. If you believe a child has created an account, write to support@coparia.app and we will remove it.

Your choices

You can:

See and correct everything about your family from inside the app.
Export your family’s record yourself, at any time, from Settings. It is free on every plan and always will be: a record you cannot get out of is not really yours.
Delete your account yourself, from Settings. See above for exactly what that erases.
Turn off notifications, in settings, at any level.
Object or complain. Write to us first, and if you are in a place with a data protection authority you may also complain to it.

Depending on where you live you may have further rights, including under the California Consumer Privacy Act or the GDPR. We apply the choices above to everyone rather than gating them by geography. We do not sell or share personal information as those laws define it.

Changes

If we change this policy in a way that matters, we will raise the version number at the top of this page and tell you before the change takes effect. Small corrections get a version bump and nothing more.

Contact

The controller of the information described on this page is Coparia Labs LLC, 2108 N Street #17510, Sacramento, CA 95816, USA.

support@coparia.app for anything on this page, or security@coparia.app to report a vulnerability.