Privacy Policy

1. Introduction

Allies ("we," "our," or "us") provides a coparenting coordination platform available on iOS, Android, and web (the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our Service. By creating an account or using Allies, you agree to the practices described in this policy.

We understand that the information you share with us is deeply personal — custody schedules, court orders, financial records, and details about your children. We treat this data with the highest level of care and security.

2. Information We Collect

2.1 Account Information

When you register, we collect:

Full name, email address, and phone number
Account type (coparent, stepparent, guardian, or professional)
Profile photo (optional)
Professional credentials, if applicable (bar number, license, certifications)

2.2 Family and Children's Information

To provide coparenting tools, we collect information about your family:

Children's names, dates of birth, and ages
Custody schedules and parenting plan details
Pickup and drop-off locations
School and medical information (as provided by parents)

Children under 13: We do not knowingly collect personal information directly from children under 13. All children's data is entered and managed by a parent or legal guardian. Children's accounts (when enabled) have restricted, read-only calendar access with no messaging capabilities.

2.3 Court Documents and Legal Records

Court orders and custody agreements you upload (PDF files)
Text extracted from those documents by our AI system
Financial records including child support payments, shared expenses, and receipts

2.4 Communications

Messages sent between coparents through our in-app messaging
Message metadata (timestamps, read receipts)
Video and audio calls (metadata such as duration and participants)
Email and SMS invitations sent through the platform

2.5 Biometric Data

If you enable Face ID, Touch ID, or fingerprint authentication, biometric data is processed and stored only on your device using Apple or Google secure enclaves. We never receive, transmit, or store your biometric data on our servers.

2.6 Device and Technical Data

Device type, operating system, and app version
IP address and general location (not precise GPS)
Push notification tokens
Crash logs and error reports

3. How We Use Your Information

3.1 Providing the Service

Account creation, authentication, and security
Facilitating communication between coparents
Managing custody schedules and calendar events
Tracking shared expenses and payments
Storing and organizing court documents

3.2 AI-Powered Features

Allies uses artificial intelligence (powered by Anthropic's Claude) to enhance your experience. Here is exactly what data is processed by AI and how:

Document Extraction: When you upload a court order, the text of the document is sent to Anthropic's API to extract custody schedules, financial obligations, and other key provisions. The extracted information is then stored in your account.
Onboarding Assistant: During setup, your conversational responses are processed by AI to personalize your account configuration.
Tone Analysis (optional): If enabled, message content may be analyzed to detect high-conflict language and suggest calmer alternatives.

Anthropic's data handling: Data sent to Anthropic is processed under their API Terms of Service. Per Anthropic's commercial terms, your data is not used to train their AI models. Data is encrypted in transit and at rest. See Anthropic's Privacy Policy for details.

3.3 Safety and Legal Compliance

Detecting and preventing unauthorized access or abuse
Responding to valid court orders, subpoenas, or legal requests
Protecting children's safety
Enforcing our Terms of Service

4.1 Within Your Family Network

Information you enter (messages, schedules, expenses) is shared with other members of your family network based on their role and permission level. Authorized professionals (attorneys, therapists, mediators) may view shared family data if you grant access.

4.2 Service Providers

We use trusted third-party services to operate Allies. Each processes only the data necessary for their function:

Supabase — Database, authentication, and file storage (Privacy Policy)
Anthropic (Claude AI) — Document extraction and AI features (Privacy Policy)
Stream — Real-time messaging and video calls (Privacy Policy)
Stripe — Payment processing; we never store your card numbers (Privacy Policy)
Firebase (Google) — Push notifications and crash reporting (Privacy Policy)

All service providers are contractually prohibited from using your data for their own purposes and are required to maintain appropriate security measures.

4.3 Legal Requirements

We may disclose your information when required by law, including in response to court orders, subpoenas, or law enforcement requests with valid legal process. We will notify you of such requests when legally permitted to do so.

4.4 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties. We do not use advertising networks or behavioral targeting. We do not share your data for cross-context behavioral advertising.

5. Data Security

We implement industry-standard security measures to protect your data:

Encryption in transit: All data transmitted between your device and our servers uses TLS encryption
Encryption at rest: Stored data is protected by AES-256 encryption at the infrastructure level
Access controls: Row-level security policies ensure users can only access data they are authorized to see
Authentication: Multi-factor (TOTP) and biometric authentication options available
Audit logging: All data access by professionals is logged and traceable via tamper-evident hash chains
Hosted on SOC 2 Type II certified platforms: Our infrastructure providers (Supabase, Stream, Stripe) maintain SOC 2 Type II certification

In the event of a data breach affecting your personal information, we will notify you within 72 hours of discovery and provide recommended protective actions.

6. Data Retention

Active accounts: Data is retained as long as your account is active
Messages and documents: Retained for the life of your account for potential court use
Financial records: Retained for 7 years per IRS requirements
After account deletion: Profile data is deleted within 30 days; backups are purged within 90 days
Court documents: May be retained for up to 7 years after account closure for legal compliance
Biometric data: Never stored on our servers (device-only)

Data subject to active legal proceedings will be retained until the matter is resolved. We will notify you of any legal holds when legally permitted.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

Access: Request a copy of the personal data we hold about you
Correction: Correct inaccurate or incomplete information
Deletion: Request deletion of your account and associated data (subject to legal retention requirements)
Data portability: Receive your data in a structured, machine-readable format
Opt-out: Disable optional AI features (tone analysis, moderation) in your account settings
Marketing: Unsubscribe from promotional communications at any time

To exercise any of these rights, email us at privacy@alliesapp.com. We will respond within 30 days.

8. Children's Privacy

Allies complies with the Children's Online Privacy Protection Act (COPPA):

Only parents or legal guardians may create accounts. You must be 18 or older to register.
Children under 13 do not create their own accounts. A parent creates and manages child profiles.
Children's accounts have restricted access: calendar view only, no messaging or document access.
Children's data is never used for marketing, AI training, or shared with third parties beyond what is necessary to provide the Service.
Parents can view, modify, or delete their child's profile at any time.

9. State-Specific Privacy Rights

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights:

Right to Know: What personal information we collect, use, and disclose
Right to Delete: Request deletion of your personal information
Right to Opt-Out of Sale: We do not sell personal information
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise your California privacy rights, contact us at privacy@alliesapp.com.

Other U.S. States

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with comprehensive privacy laws have similar rights to access, correct, delete, and port their data. Contact us at the email above to exercise these rights.

10. International Users

Allies is primarily operated in the United States and your data is stored in U.S. data centers. If you access the Service from outside the U.S., your information will be transferred to and processed in the United States. For EU/UK users, we rely on Standard Contractual Clauses (SCCs) as the legal mechanism for international data transfers. You may have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local supervisory authority.

11. Cookies and Tracking (Web)

Our web application uses the following types of cookies:

Essential: Authentication session cookies and security tokens required for the app to function
Analytics: Anonymous usage data to help us understand which features are used and fix bugs
Preferences: Remembering your settings (theme, language)

We do not use advertising cookies or third-party tracking pixels. You can manage cookie preferences through your browser settings, though disabling essential cookies may affect app functionality.

12. SMS/Text Messaging

Allies uses SMS text messaging to relay person-to-person coparenting communications and to deliver account notifications. When an Allies account holder composes a message in the app, Allies may deliver it by SMS to their coparent or another family contact who has agreed to communicate through the platform.

12.1 Consent and Opt-In

Account holders consent to receive SMS messages when they create an account or enable text-message delivery in their settings. Non-account recipients (such as a coparent who does not use the app) receive messages only after agreeing to communicate with the account holder through Allies. Consent to receive text messages is not a condition of purchasing any goods or services.

12.2 Message Frequency and Rates

Message frequency varies based on how often participants communicate. Message and data rates may apply according to your mobile carrier plan.

12.3 Opt-Out and Help

Opt-out: Reply STOP to any Allies text message to stop receiving SMS from that number at any time
Help: Reply HELP to any Allies text message, or contact support@alliesapp.com

12.4 No Sharing of Mobile Information

Mobile information and messaging consent are not shared with third parties or affiliates for marketing or promotional purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except as required for message delivery by our SMS service provider. All other categories in this policy exclude SMS originator opt-in data and consent; that information will not be shared with any third parties.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and through an in-app notification. Your continued use of the Service after such notification constitutes acceptance of the updated policy. We encourage you to review this page periodically.

14. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights:

Privacy questions: privacy@alliesapp.com
General support: support@alliesapp.com
Security concerns: security@alliesapp.com