Privacy Policy | Coparia

Coparia is a planning tool for separated parents. It holds calendars, parenting schedules, messages, expenses and health notes about children, which is about as sensitive as ordinary family data gets. This page says exactly what we collect, why, and who else ever sees it.

Throughout this policy, “Coparia” means the service at coparia.app, and “we” and “us” mean Coparia Labs LLC, a California limited liability company. It is the company that operates Coparia and the controller of the personal information described here. If you have a question about anything here, write to support@coparia.app.

The short version

We do not sell your information, and we do not share it with advertisers.
There is no advertising, no advertising pixel, and no third-party analytics or tracking SDK on this site or in the app. We do keep our own records of how the app is used, linked to your account, to run and improve it. They are described below, and they are never used for advertising.
Message content, and the photos and files sent in messages, are encrypted with a key we control per environment, and every decryption of a message is logged.
Your co-parent sees what you put in your shared family. We cannot referee that for you, so what you write matters.
You can delete your account yourself, from Settings, at any time. What that does and does not erase is described below, and the honest summary is that it removes you, not your co-parent’s record of the years you shared.
Children never have an account. A parent can set up a child’s own iPad or phone with Child mode, where the child sees their own day and can check things off. Nothing there reaches an advertiser, an analytics company or an AI service. See “Child mode” below.
A parent can connect an AI assistant they use, such as Claude or ChatGPT, so it can read parts of the family’s calendar, routines, lists and expenses. It is off until a parent turns it on for the family, any parent can turn it off, and messages are never part of it. See “Connected AI apps” below.

What we collect

Your account. Your email address, the display name you choose, and your profile picture: either an avatar you pick from a set of images we ship, or a photo you choose. We do not ask for your legal name, your address, your phone number or your date of birth. If you sign in with Google, Google tells us your email address and the name on your Google account, and nothing else. If you sign in with Apple, Apple tells us your email address, or a private relay address if you choose to hide yours.

Your preferences. Time zone, clock and date format, and how you want to be notified.

Your family’s information. This is the substance of the product, and you enter it:

Children’s first names, nicknames if you use them, dates of birth if you enter them, and a profile picture for each: an avatar you pick, or a photo a parent chooses. A child’s photo is seen by everyone who can see that child in your family. Choosing a new one replaces the old one, and it is deleted when the child is removed.
Calendar events, including titles, dates and times, notes, and a location. A location is text you type, or an address you pick from suggestions, in which case we also store that place’s map coordinates. It is the location of the place you chose, never of you or your device.
Parenting schedules, handoffs (including where and when they happen), holiday rules, birthday arrangements and any one-off overrides.
Messages between the members of your family, reactions to them, and photos and files sent in them. See “Photos and files” below.
Journal entries you write, and anything you attach to one.
Expenses, if your family uses them. See “Expenses and money” below.
Connected AI apps, if a parent connects one: which app it is, as the app names itself, which families it may read, when it was connected and when it was last used, and whether each family has the setting turned on. The app’s sign-in tokens are stored only as one-way fingerprints. See “Connected AI apps” below.
Need to know: the standing facts about a child that anyone caring for them should have, such as allergies, intolerances, medications and conditions, what to do about them, and contacts like a pediatrician’s name and phone number. See “Health information” below.
Routines and lists, and who checked off what, including from a child’s device in Child mode.
Who is a member of your family, and whether they are a parent or a helper.
Caregivers you list: the name, relationship, phone number and email address of a grandparent, sitter or daycare you enter, a note about them, and which parents have approved them. These are people who are not Coparia users; only your family sees them, and they can ask us to remove them by writing to the address at the end of this page.

Children’s devices. If a parent sets up a child’s own iPad or phone with Child mode, we keep a record of each device: the name it is given (for example “Maya’s iPad”), what kind of device it is (an iPad, an iPhone, or an Android phone or tablet), which child it is for, which parent set it up and when, and when it was last used, to the hour. The device holds a key that lets it in as that child’s device. We keep only a one-way fingerprint of that key, never the key itself. What a child does on the device is kept like what a parent does: the list items they add, check off or delete, and the routine steps they check off, recorded as done from the child’s device. See “Child mode” below.

Photos and files. The app holds pictures and documents you chose to give it, in these places:

Profile photos of you, of other adults, and of children, described above.
Journal attachments. Whatever you attach is stored with the entry and, like the entry, can be seen only by you.
Message photos and files. These can be seen and downloaded by everyone in that conversation, and nobody else. Once a message is sent, its photos and files cannot be removed, by you or by us on your behalf, because a message is part of the family’s record. Clearing a conversation from your own list hides nothing from the other people in it. The family record export lists each message’s file names.
Receipts and bills attached to expenses, including a bill you scanned with Copie when “Keep the bill with the expense” is on (it is on unless you untick it).
Pictures and documents you hand to Copie, such as a photo of an appointment card or a bill.

If you attach a photograph of your child, we are holding a photograph of your child, because you asked us to. It is worth being plain about that.

Photographs are re-encoded before they leave your phone, which strips every EXIF tag, including the GPS position the picture was taken at. A photo taken at home would otherwise carry your address into a file the other household can download. Other files, such as PDFs, are stored as they are.
All of these are stored with Amazon Web Services and encrypted at rest. Message photos and files are encrypted under the same dedicated key as message text. They count toward your family’s storage allowance, except profile photos, which do not.

Expenses and money. If your family records expenses, we hold what you enter:

Amounts, currency, dates, merchants or providers, categories (such as childcare, medical, dental, vision, therapy, insurance, school and activities), notes, and which children an expense was for.
Who paid, how a shared expense is split between parents, and child support or alimony that is due or paid.
Pay-back requests between parents and their answers, statements covering a period, and payments recorded against them, including the payment method a parent names (for example Venmo, Zelle, cash or check) and a note.
A provider’s tax ID if you enter one or it is read off a bill, for example a daycare’s EIN, so it can appear on your expense report.
Receipts and bills, as photos or PDFs.

Coparia records payments. It never moves money. We do not hold, send or receive money between parents, and we never ask for your bank or card details to do it. Expenses are seen by the parents in the family and never by helpers. They are included in the family record export and in the expense reports parents can download.

Health information. Some of what families put in Coparia is about health, and we treat it that way:

Need to know holds allergies, intolerances, medications and conditions, with what to do about them. It deliberately has no private setting: anyone who can see a child in your family, helpers included, can see that child’s Need to know, because a sitter who cannot see “allergic to peanuts” is a safety problem.
Medical, dental, vision and therapy expenses, and the bills and explanations of benefits you upload or scan for them, can show what care a child received.

We use this information only to show it to your family and, if you ask Copie to read a bill, to draft the expense. We never use it for advertising, and we never sell it.

Payment for your plan. If you buy a paid plan on our website, you pay through Stripe. You enter your card or other payment details on Stripe’s checkout page, and we never see or store them. If you buy one in the iPhone or iPad app, you pay Apple through the App Store, and Apple handles the payment. We keep a record of your family’s plan, trial and billing events.

Searches. When you search your calendar or your messages, the words you type are sent to our servers to run the search and return the results. We do not keep a history of your searches, and our request logs do not record what you searched for.

How the app is used. We keep our own first-party records of how Coparia is used, linked to your account:

Which version of the app, and which kind of device and operating system, you use (for example “iPhone 15 Pro, iOS 26, build 14”), and when each was first and last seen. Never a device’s name, and never an advertising or vendor identifier.
The family activity log, read receipts and routines checked off, which record what was done in the app.
How Copie is used and how well it answers, including the ratings you give its answers.
Error reports from the app when it crashes or fails, with the error itself and that same app version and kind of device.

We use these to keep the service working, to find and fix problems, and to decide what to improve. We do not sell them, we do not use them for advertising, and we do not use them to track you across other companies’ apps or websites. There are no third-party analytics or advertising SDKs in the app or on this site; these records go only to our own servers.

A child’s device in Child mode sends none of the app version, device or error records above. What a child does there appears in the family activity log, as described under “Children’s devices”.

Technical records. Server logs of requests to the service, and delivery records for emails and push notifications we send you.

What we do not collect

We want to be specific, because “we may collect” language usually hides more than it tells:

No advertising, and no third-party analytics or trackers. None on this site, none in the app. The first-party usage records described above are the whole of it.
No location tracking. The app never asks your device for its location, and never receives it.
No cookies for tracking. Signing in stores what is needed to keep you signed in. That is all.
No school, medical or legal documents in a child’s own record. A child’s record holds a name, a nickname, a birthday and a profile picture. Health information lives in Need to know and in expenses, as described above, because a parent put it there.
No bank or card details. Plans are paid through Stripe or the App Store, and expenses are records, not payments.
No purchase of information about you from data brokers or anyone else.
No IP address stored alongside your agreement to these terms.

Why we hold it, and on what basis

We hold your family’s information for one reason: to show it back to the people you have shared it with, and to send the reminders and notifications you asked for. It is used to provide the service you signed up for, to keep that service secure and working, and, through the usage records described above, to improve it.

We do not profile you, we do not make automated decisions about you, and we do not use your family’s information to train machine learning models.

Who else sees it

Coparia runs on Amazon Web Services in the United States (Oregon). AWS stores the data on our behalf. Beyond that, information reaches a small number of processors, and only for the job named:

Who	What reaches them	When
Amazon Web Services	Everything, as our hosting, storage and database provider	Always
Amazon Cognito (AWS)	Your email address and sign-in credentials	When you sign in or sign up
Google	The sign-in exchange itself	Only if you choose “Continue with Google”
Apple	The sign-in exchange itself	Only if you choose “Sign in with Apple”
Resend	Your email address and the content of the email	Whenever we send you mail, including sign-in codes
Anthropic	The calendar information a question needs, or the text, picture or document you hand to Copie	Only when you use Copie
Stripe	Your email address and the payment details you enter on its checkout page	Only when you buy or manage a paid plan on our website
Apple (App Store)	The payment for your plan	Only when you buy a plan in the iPhone or iPad app
RevenueCat	Your family’s identifier, your account identifier and email address, and the App Store’s record of the purchase	Only when you open the plans in the iPhone or iPad app, or buy one there
Cloudflare Turnstile	A challenge response, to prove you are not a bot	On sign-up with a password
Geoapify	The characters you type into a location box	Only while you type in that box
The AI app a parent connects, such as Claude (Anthropic) or ChatGPT (OpenAI)	What that app asks for and that parent can see: calendar events, which home the children are at, routines, lists not made for a child, and expense totals	Only after a parent connects it and a parent has turned on “Connected AI apps” for the family
Push services: Apple Push Notification service, Firebase Cloud Messaging (Google), or your browser’s push service	The notification we are delivering, and the push token for your device	Only if you turn on push notifications

A few of those deserve a note.

Payments. Stripe sells Coparia’s paid plans as the merchant of record, which means it also calculates and collects sales tax. It processes your payment details under its own privacy policy, and tells us only what we need to know about your plan. In the iPhone and iPad app, Apple sells the plan and processes the payment under its own privacy policy. RevenueCat relays the App Store’s record of the purchase to us, so we know which family’s plan it pays for.

Address suggestions. When you type into a location box, those characters go to Geoapify so it can suggest addresses. Your request is proxied through our servers, so Geoapify does not receive your IP address or anything identifying you or your family. To rank nearby results first we send a single coarse point derived from your time zone, which is a region, not your location. We count how many address lookups happen per day, as a total with no user, family or search text attached to it.

Artificial intelligence. Coparia has an assistant, Copie. When you use it, and only then, some of your family’s information goes to Anthropic to answer what you asked.

What goes depends on what you asked for. A question about your own schedule sends the part of your calendar that could answer it: parenting days, event titles, times and the names of the people involved, over the window the question is about. Pasting an appointment in, or handing Copie a photo or a document, sends that text or that picture. Scanning a bill or receipt sends that bill so Copie can draft the expenses on it, which you check before anything is saved. Asking how Coparia works sends your question and the help articles that might answer it, and nothing about your family at all. Your messages are never sent. No part of the assistant reads your family’s conversations.

Nothing is sent unless you use the assistant. If you never press it, nothing of yours reaches Anthropic. Anthropic processes it to return an answer and, under its commercial terms with us, does not use it to train its models.

What we keep of it ourselves:

No transcripts. We do not store your conversations with Copie. If that ever changes, a conversation will be kept for no more than 90 days, and this page will say so before it starts.
Ratings. If you rate an answer with a thumbs up or down, we keep that question and answer with your rating for 30 days, to improve how Copie answers, and then delete them.
A record of each use: which feature, when, how long it took and what it cost. It holds no text from your question or the answer.
Reports. If you report one of Copie’s answers, we keep that question and answer with your report so we can review it. See “How long we keep it” below.
What you choose to save. Events, expenses and other changes Copie proposes are saved only when a parent applies them, and are then part of your family’s information like anything else.

Connected AI apps. A parent can connect Coparia to an AI assistant they already use, such as Claude or ChatGPT, and then ask it about their family’s schedule. This is different from Copie in one important way: the information goes to a company the parent chose, under that parent’s own account and terms with it, not under ours. We cannot control what that company keeps, how long it keeps it, or whether it trains on it. That is set by its terms and the parent’s settings there.

Off until a parent turns it on. “Connected AI apps” is a family setting, off by default. Any parent in the family can turn it on, and any parent can turn it off, which disconnects every app connected to that family at once. When a parent connects an app, the other parents are told.
The parent signs in to us and approves it. The app never sees a Coparia password. A parent signs in on our own page, sees what the app will be able to read, and approves it for the families they choose.
Read only. A connected app can read; it cannot add, change or delete anything in Coparia.
What it can read: what that parent can already see in the app, and no more, from these parts only: calendar events (never another parent’s private events, which show only as “Unavailable”), which home the children are at each day, routines and their steps, lists, and expense totals with the open requests behind them. The names of family members and children come with them.
What it never reads: messages, journal entries, documents, Need to know, settings, billing, email addresses or anything from Child mode. A list made for a child is left out entirely, and so is anything a child’s device added or checked off.
Most of what it reads was written by someone else, including the other parent. That is why any parent can switch it off, and why the other parents are told.
Ending it. A parent can disconnect an app from Settings at any time, or turn the family setting off, and it is refused at its next request. A connection that goes unused stops working after 30 days.

We may also share information if the law requires it, or to protect someone’s safety, and with professional advisers who are themselves under a duty of confidence. We will not hand over your family’s information to another private party without a legal obligation to do so.

What your co-parent sees

Everyone in a family sees that family’s calendar, parenting schedule and children, and each child’s Need to know. Every parent sees the devices set up for a child in Child mode, and what a child did on them. Every parent sees whether “Connected AI apps” is on for the family, and is told when another parent connects one. Messages, and the photos and files in them, are visible to the people in the conversation. Expenses are visible to the parents and never to helpers. Events marked private are limited to the adults, and helpers see less than parents.

This is worth understanding plainly, because it is the part of a co-parenting tool that people are surprised by: we cannot make something you shared unseen, and we do not mediate disputes about what was written. The activity log records who changed what, which is deliberate, because in a disagreement about a schedule the record is the point.

Security

Everything travels over TLS, and our servers verify the database’s certificate on every connection.
Message content, including message photos and files, is encrypted before it is stored, under a key held in AWS KMS that is dedicated to messages. Every decryption of a message is recorded in an audit log.
Other photos and files, such as journal attachments, receipts and profile photos, are encrypted at rest under a separate key.
Application containers run without root privileges on a read-only filesystem.
Access to production is limited to people who need it, over short-lived credentials rather than stored keys.
A child’s device keeps its key in the device’s own secure storage (the Keychain on iPhone and iPad, the Keystore on Android), where it never syncs to iCloud or moves to another device. We store only a one-way fingerprint of it, and a removed device is refused at its very next request.
A connected AI app signs in with short-lived tokens that open only the connector, never the rest of Coparia. We store only one-way fingerprints of them, and an app is refused at its next request once it is disconnected.

No service can promise it will never be breached, and we are not going to pretend otherwise. If a breach affects your information, we will tell you.

How long we keep it

Your family’s information is kept while your account is open, because a co-parenting record is useful precisely for being long-lived.
Archived families are hidden from everyone, and we can restore one for you while it is inside its retention window, so an archive made in anger can be undone. The window is set by the family’s plan on the day it was archived, and a later change of plan does not move it: 30 days on Free, 90 days on Plus, 365 days on Pro. Families archived before we set these windows are kept for 365 days. After its window, the family is deleted: its children, schedules, events, messages, journal entries, expenses, and the photos and files stored with them. A family is never deleted while its paid plan is still being billed; it waits until that plan has ended. When an archived family is permanently deleted, we also remove its name, its children’s and members’ names, event titles and other details from the activity log entries recorded about that family. Each entry keeps only what action was taken, by which account, and when. Reports keep only who made them and why. Copie conversations and ratings are deleted. Billing records are kept, without any family details.
Sent emails are purged from our delivery queue 7 days after they are sent, or 30 days after delivery finally fails. A record that an email was sent, with the address but not the content, is kept for about 13 months so we can answer “did I get that email”. If you delete your account, the address on those records is replaced with one that reaches nobody.
Copie ratings are kept for 30 days, as described above.
Reports. When you report a message, a person or one of Copie’s answers, we keep the report, your reason and note, and a copy of what you reported, so we can review it and act on it. The copy is kept even if the message is later deleted, because a report that loses what it was about cannot be reviewed. The person you reported is never told. Reports are kept for as long as we need them to review them and to keep people safe.
Error reports from the app and the server are kept for 90 days.
Children’s devices are deleted when a parent removes one, when it is unpaired on the device, when the child is removed from the family, or once it has gone 90 days unused. What a child added to a list follows the rules for lists below, and the activity log entries about what they did are kept like the rest of the activity log.
Connected AI apps. The record of a connection is kept while the parent’s account exists, so they can see it in Settings, and is deleted with the account. Its sign-in tokens are deleted once they expire or the app is disconnected.
Server logs are kept for 30 days.
The activity log is kept with no time limit while the family exists, archived or not, because it is the record of who changed what. When an archived family is permanently deleted, its entries keep only what action was taken, by which account, and when. When someone deletes their account, the personal details in the entries about them are removed (see “Deleting your account”).
Deleted items are removed from view immediately, for everyone. What happens next depends on the item:
- Events and journal entries are deleted for good 30 days after you delete them. The activity log entries about an event, which can include its title, are kept.
- A photo or file removed from a journal entry or an expense is deleted from storage when you remove it.
- Lists and list items are deleted when you delete them.
- Children, caregivers, Need to know entries and expenses stay in the family’s stored record, out of view, until the family itself is deleted, because they are part of the custody and money history the other parent relies on.
- Messages are kept once sent. Deleting a conversation hides it from your own list only.
Backups. Our database is backed up continuously and those backups are kept for 30 days. A backup cannot be edited, so something deleted from the live service survives in the backups taken before it until they age out. Copies in backups age out within 30 days of the deletion. We do not restore a backup to recover deleted data for anybody, including ourselves, except to bring the service back after a failure.

Deleting your account

You can delete your account yourself, from Settings → Sign-in & security. It takes effect immediately and cannot be undone by us. If you cannot sign in, write to us from the email address on the account; once we have confirmed it is you, we run the same deletion for you. The account deletion page walks through both, step by step.

What we erase. Your email address (replaced with one that reaches nobody, on your account and in our log of emails sent to you), your avatar and profile photo, your app preferences, the devices you had notifications going to, your unread notifications, and any download link you had generated. Your sign-in credential is destroyed, so the account can no longer be used to get in; if that first fails, we retry it every day. Your private journal is deleted too, every entry and the files attached to them, since nobody else could read it. So is any conversation with Copie we had stored, though today we store none. The records of which app version and kind of device you used are kept without anything linking them to you, so they count devices, not people.

What we redact. In our activity log, the personal details in every entry you made or that was about you, such as event titles and children’s and family names, are removed. The entry still says that something happened, when, and from which account. Entries written before August 17, 2026 were stored as a finished sentence and cannot be redacted, so they may still contain your name; we can tell you how many there are.

What happens to your families. A household where another parent is still a member carries on without you: your membership ends and they keep the calendar. A household where you were the only parent is archived, and deleted when its retention window ends, as described above. If it was on a paid plan, the plan is set to stop renewing at the end of the period already paid for; that is not an automatic refund (see Cancellation and Refunds). Calendar shares you gave are revoked.

What we keep, and why. What you put into a family you shared stays in it: the messages you sent, with their words unchanged, and the photos and files sent in them, the events, the parenting history and the expenses. So does your display name on those entries, unless you ask us to take it off. We keep them because a co-parenting record is a shared record: what is in a family belongs to both parents, and stripping one parent out of it would not delete your information so much as rewrite the other parent’s. For a document people rely on during a separation, and sometimes put in front of a court, we think that is the wrong trade.

We also keep the redacted activity log entries, invitations sent to your email address (which still show it), the identifier Google or Apple gave us for your sign-in, the record of which version of our terms you accepted, reports you made or that were made about you, the requests you made to us about your information, text other people wrote that mentions you, and notifications already delivered to other members. Copie answers you rated are kept, with the question you asked and your rating, until they expire 30 days after you rated them, and the record of each Copie use (which holds no text) is kept as well. Copies in backups age out within 30 days.

Taking your name off a shared family. If you ask, we show you as a role label, such as “Coparent A” or “Helper B”, instead of your name, nickname, email address and picture, in every shared family you have left or whose household was archived: in the member list, the apps, the family record export (messages included), the calendar export, notifications, digest and reminder emails, the expense report and our activity log for that family. Your messages stay, with their words unchanged, shown as from your label. Families you still use are not changed, and if you rejoin a family you are named in it again. You can ask whether or not you have deleted your account, by writing to support@coparia.app from the email address on the account. If you disagree with how we have drawn these lines, you can complain to us and to your data protection authority.

Children

Coparia is for adults. Children never have an account: no email address, no password, and nothing is asked of a child to sign up.

Information about children is entered by their parents: a first name, optionally a nickname and a date of birth, a picked avatar or a photo, and whatever a parent records about them in the calendar, the journal, Need to know and expenses. If you believe a child has created an account, write to support@coparia.app and we will remove it.

Child mode

A parent can set up a child’s own iPad or phone to show that child’s day. It is the one place a child uses Coparia directly, so we set out all of it here.

A parent sets it up, deliberately. The child’s device shows a code, and a signed-in parent in the family types it into their own app. Nothing works on the device until a parent does that, and the parent’s app says what the device will show and what the child can do before the code is entered. The other parents in the family are told a device was set up, and see it in that child’s settings.
What the device shows: that child’s events, never events marked private or for parents only; which home they are at each day, as a name like “Mom’s” and never an address; the routines assigned to them; and the lists a parent made for them. Event locations and notes show unless the parents turn them off for that child.
What a child can do: check off the steps of their routines, and add, check off and delete items on their lists. A child cannot send messages, cannot use Copie, cannot change the calendar or anyone’s settings, and cannot share anything outside the family.
What we collect from the child: only what they enter there, which is the items they add to a list and what they check off. We do not ask a child for a name, a photo, a birthday, an email address or anything else; their name and picture were entered by a parent. The device record we keep is described under “Children’s devices” above.
No advertising, no analytics, no AI. Nothing from a child’s device reaches an advertiser, an analytics company, Anthropic or an AI app a parent connects, and a child’s device sends us no app version, device or error records. A list made for a child is never shown to a connected AI app.
Who sees it: what a child adds to a list is seen by everyone in the family who can see that list. Parents also see it in the activity log, recorded as done from the child’s device.
Ending it. Either parent can remove a device at any time from the child’s settings, and it stops working at its next request. It can also be unpaired on the device itself, and the parents are told. A device unused for 90 days stops working by itself. A removed device’s record is deleted. What the child added stays in the list, like anything else a family wrote, until someone deletes it.

A parent can, at any time: review everything their child added, in the lists and in the activity log; delete any of it; remove the device, which stops any further collection; and ask us to delete the information we hold about their child, by writing to support@coparia.app. Removing a child from the family removes that child’s devices in the same step.

Your choices

You can:

See and correct everything about your family from inside the app.
Export your family’s record yourself, at any time, from Settings, including expenses. It is free on every plan and always will be: a record you cannot get out of is not really yours.
Delete your account yourself, from Settings. See above for exactly what that erases.
Turn off notifications, in settings, at any level.
Disconnect an AI app, or turn “Connected AI apps” off for your family, from Settings.
Object or complain. Write to us first, and if you are in a place with a data protection authority you may also complain to it.

Depending on where you live you may have further rights, including under the California Consumer Privacy Act or the GDPR. We apply the choices above to everyone rather than gating them by geography. We do not sell or share personal information as those laws define it.

Changes

If we change this policy in a way that matters, we will raise the version number at the top of this page and tell you before the change takes effect. Small corrections get a version bump and nothing more.

Contact

The controller of the information described on this page is Coparia Labs LLC, 2108 N Street #17510, Sacramento, CA 95816, USA.

support@coparia.app for anything on this page, or security@coparia.app to report a vulnerability.