Privacy
Privacy Policy
CoFam is a shared custody calendar and expense app for co-parents. This policy explains what we collect, why we collect it, where it is stored, who can see it, and how to delete it. The short version: we collect only what the product needs to work, we do not sell your data, we do not show ads, we do not track your location, and we do not use your family's content to train AI models.
Who we are
CoFam is the operating name of CoFam LLC, a Wyoming limited liability company ("CoFam," "we," "us," or "our"). We provide the CoFam mobile app and the website at getcofam.com. For any privacy question or request, contact help@getcofam.com.
Information we collect
Almost everything in CoFam is information you and your family choose to enter. We do not pull data about you from other sources.
Account information. Your email address and password. Authentication is handled by our backend provider's auth system (Convex Auth); passwords are stored only as a secure hash, never in plain text. Sign-in with Apple or Google is built into the app but not enabled at launch; if we enable it, we will receive the identifier and email address those services share.
Family, member, and calendar information. Your family's name, member names, roles, colors, profile photos, and birthdays; custody schedules and recurring caregiver time; events, handoff times and optional locations; holidays and vacations.
Children's profile information you choose to add. A child's name and birthday, and any optional details a parent decides to store: school and doctor contacts, allergies, medications, insurance details, photos of an insurance card, and emergency contacts. None of this is required to use CoFam. It is entered and controlled by the parents in the family, and we treat it as sensitive information (see "Children's privacy" below).
Expense information. Expense descriptions, amounts, categories, split arrangements, settle-up records, and optional receipt photos. Payment-method handles you optionally save (for example a Venmo username) are stored to pre-fill payment links. CoFam does not process payments between parents and never receives your card or bank account numbers.
Notes and change history. Shared and private notes you write, and the family's change history (an audit log of who changed what, and when) so both parents can trust the record. Private notes are visible only to the person who wrote them.
Subscription information. When paid subscriptions are live, purchases are processed by Apple In-App Purchase, and we use RevenueCat to validate purchases and manage subscription status. We receive your subscription status (for example active, trialing, or expired) and transaction identifiers. We never see or store your payment-card number.
Technical information. Basic device and log information needed to operate and secure the service, such as app version, error logs, and the timing of requests. If you enable notifications, we store a push token for your device. The CoFam app contains no advertising SDKs and no third-party analytics or tracking SDKs, and it does not collect your location. On our website (getcofam.com) we use Google Analytics to measure aggregate usage, such as pages viewed and how visitors arrive at the site.
How we use information
We use the information above to provide the calendar, expense, and family-record features; to sync data between the members of your family in real time; to authenticate you and secure your account; to deliver push notifications you enable; to send account emails such as password resets; to process and unlock subscriptions; to provide customer support; and to comply with legal obligations.
We do not sell your personal information, share it for advertising, use it to train AI models, or track your location.
Where your data is stored, and the providers we use
Your family's data lives in Convex, our cloud backend and database provider; photos (profile photos, insurance-card photos, receipts) are stored in Convex's file storage. We use a small number of additional service providers, each only for the purpose listed:
Convex — backend, database, and file storage. Resend — delivers account emails such as password resets. Expo — delivers push notifications you enable. Apple and RevenueCat — process and manage subscriptions when paid plans are live. Vercel — hosts this website, where Google Analytics measures aggregate site usage.
These providers process data only to provide their service to us and are bound by confidentiality and data-protection obligations. We do not sell or rent data to anyone, and we do not share it with data brokers.
Who can see your data
Your family. CoFam is built for two households to share one set of records. Information you add is visible to the members of your family according to the role each member holds (for example, parents can see expenses and settings, while view-only members see only the schedule). The co-parent's access does not depend on who pays. No one outside your family can see your family's data, and one family can never access another family's data.
Service providers. The providers listed above, solely to run the service.
Legal requirements. We may disclose information if required by law, or to protect the rights and safety of our users or the public.
Calendar feeds you share (iCal)
CoFam can generate calendar-feed URLs so you can subscribe to your family's schedule in Apple Calendar, Google Calendar, or Outlook. Each feed URL contains a unique token, and anyone who has the URL can read the events in that feed, without logging in. Treat a feed URL like a password and share it only with calendars and people you trust. You can regenerate a feed's URL in the app at any time, which immediately revokes the old URL and any subscriptions using it.
Data retention and deletion
We keep your data for as long as your account exists so your family's calendar and records keep working. You can delete your account at any time in the app from Settings → Delete account. If you are the last parent in the family, deleting your account permanently deletes the entire family and all of its data on our servers — schedule, expenses, receipts, children's profiles, photos, notes, and change history. If a co-parent remains, your membership and your personal records (such as private notes and sessions) are removed and the family continues without you. After deletion, residual copies may persist briefly in encrypted backups before being overwritten on our providers' normal cycles.
Security
All data is encrypted in transit (HTTPS/TLS). Access to family data is enforced on our servers based on your verified membership and role, never trusted to the app on your device, so one family cannot read another family's data. Sensitive identifiers such as invite codes and calendar-feed tokens are generated unpredictably and can be revoked. No system is perfectly secure, but we design CoFam so that the failure of any single safeguard does not expose your family's information.
Children's privacy
CoFam is an app for adults coordinating the care of children; it is not directed to children, and children under 13 cannot create accounts or be account holders at launch. Information about a child in CoFam is a parental record: it is entered, controlled, and deletable by the adults in the family, and we use it only to provide the service to those adults. We treat children's profile information — especially health details and insurance-card photos — as sensitive: it is visible only to your family per each member's role and is deleted with the family's data.
A future version of CoFam may offer view-only logins for children so an older child can see their own schedule. Before launching that feature, we will update this policy and implement the parental-consent protections required by the Children's Online Privacy Protection Act (COPPA). If you believe a child under 13 has created an account, contact help@getcofam.com and we will remove it.
Your rights and choices
You can view and edit your family's information directly in the app, and delete your account (and the data deletion described above) without contacting us. Depending on where you live, you may also have formal rights:
California (CCPA/CPRA). California residents have the right to know what personal information we collect, to access it, to correct it, and to delete it, and the right not to be discriminated against for exercising those rights. CoFam does not sell personal information and does not share it for cross-context behavioral advertising, so there is no sale or sharing to opt out of.
European Economic Area and United Kingdom (GDPR). We process your data to perform our contract with you (providing the service), for our legitimate interests in securing and improving it, and with your consent where required (such as notifications). You have the rights of access, rectification, erasure, portability, restriction, and objection, and the right to lodge a complaint with your local supervisory authority.
To exercise any right you cannot complete in the app, email help@getcofam.com. We will verify your request and respond within the time required by applicable law.
International users
CoFam is operated from the United States and your information is stored and processed there. If you use CoFam from outside the U.S., you understand that your information will be transferred to and processed in the United States.
Changes to this policy
We may update this policy as the product evolves. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you in the app. Continued use of CoFam after an update means you accept the revised policy.
Contact
Questions, access requests, or deletion requests: help@getcofam.com.