Privacy
Privacy Policy
CoFam is a shared custody calendar and expense app for co-parents. This policy explains what we collect, why we collect it, where it is stored, who can see it, and how to delete it. The short version: we collect only what the product needs to work, we do not sell your data, we do not show ads, we do not use GPS to track your location, and we do not use your family's content to train AI models.
Who we are
CoFam is the operating name of CoFam LLC, a Wyoming limited liability company ("CoFam," "we," "us," or "our"). We provide the CoFam mobile app and the website at getcofam.com. For any privacy question or request, contact help@getcofam.com.
Information we collect
Your family records are information you and your family choose to enter. We also receive purchase and subscription information from Apple and RevenueCat, as described below.
Account information. Your email address and password. Authentication is handled by our backend provider's auth system (Convex Auth); passwords are stored only as a secure hash, never in plain text. Sign-in with Apple or Google is built into the app but not enabled at launch; if we enable it, we will receive the identifier and email address those services share.
Password safety checks. When you create or reset a password, the app checks whether it appears in known breaches using Have I Been Pwned. It sends only the first five hexadecimal characters of a SHA-1 hash of the password, then compares the response on your device. Your password, email address, and full password hash are not sent to that service.
Family, member, and calendar information. Your family's name, member names, roles, colors, profile photos, and birthdays; custody schedules and recurring caregiver time; events, handoff times and optional locations; holidays and vacations.
Children's profile information you choose to add. A child's name and birthday, and any optional details a parent decides to store: school and doctor contacts, allergies, medications, insurance details, photos of an insurance card, and emergency contacts. None of this is required to use CoFam. It is entered and controlled by the parents in the family, and we treat it as sensitive information (see "Children's privacy" below).
Expense information. Expense descriptions, amounts, categories, split arrangements, settle-up records, and optional receipt photos. Payment-method handles you optionally save (for example a Venmo username) are stored to pre-fill payment links. CoFam does not process payments between parents and never receives your card or bank account numbers.
Notes and change history. Shared and private notes you write, and the family's change history (an audit log of who changed what, and when) so both parents can trust the record. Private notes are visible only to the person who wrote them.
Subscription information. Purchases are processed by Apple In-App Purchase. We use RevenueCat to validate purchases, manage subscription status, and understand subscription activity. We share your CoFam user identifier with RevenueCat so a purchase can be connected to your account and the correct family. We receive purchase history and related information, including product and transaction identifiers, purchase and expiry dates, and subscription status (for example active, trialing, or expired). We never see or store your payment-card number.
Technical information. Basic device and log information needed to operate and secure the service, such as app version, error logs, and the timing of requests. RevenueCat also receives an iOS device identifier called the identifier for vendor (IDFV) in its requests. If you enable notifications, we store a push token for your device. The CoFam app contains no advertising or cross-app tracking SDKs, and it does not use GPS to track your location. RevenueCat processes the subscription information described above for subscription functionality and analytics. On our website (getcofam.com) we use Google Analytics to measure aggregate usage, such as pages viewed and how visitors arrive at the site.
How we use information
We use the information above to provide the calendar, expense, and family-record features; to sync data between the members of your family in real time; to authenticate you and secure your account; to deliver push notifications you enable; to send account emails such as password resets; to process and unlock subscriptions; to provide customer support; and to comply with legal obligations.
We do not sell your personal information, share it for advertising, use it to train AI models, or use GPS to track your location.
Where your data is stored, and the providers we use
Your family's data lives in Convex, our cloud backend and database provider; photos (profile photos, insurance-card photos, receipts) are stored in Convex's file storage. We use a small number of additional service providers, each only for the purpose listed:
Convex — backend, database, and file storage. Resend — delivers account emails such as password resets. Expo — delivers push notifications you enable and app updates, including related error and crash data used to keep updates working. Have I Been Pwned — provides the password safety checks described above. Apple and RevenueCat — process purchases, validate subscription access, and provide subscription analytics. Vercel — hosts this website, where Google Analytics measures aggregate site usage.
These providers process data only to provide their service to us and are bound by confidentiality and data-protection obligations. We do not sell or rent data to anyone, and we do not share it with data brokers.
Who can see your data
Your family. CoFam is built for two households to share one set of records. Information you add is visible to the members of your family according to the role each member holds (for example, parents and step-parents can access expenses, family settings, and change history; other roles have access to the schedule and shared child profiles, including care and contact information). The co-parent's access does not depend on who pays. No one outside your family can see your family's data, and one family can never access another family's data.
Service providers. The providers listed above, solely to run the service.
Legal requirements. We may disclose information if required by law, or to protect the rights and safety of our users or the public.
Calendar feeds you share (iCal)
CoFam can generate calendar-feed URLs so you can subscribe to your family's schedule in Apple Calendar, Google Calendar, or Outlook. Each feed URL contains a unique token, and anyone who has the URL can read the events in that feed, without logging in. Treat a feed URL like a password and share it only with calendars and people you trust. You can regenerate a feed's URL in the app at any time, which immediately revokes the old URL and any subscriptions using it.
Data retention and deletion
We keep your data for as long as your account exists so your family's calendar and records keep working. You can delete your account at any time in the app from Settings → Delete account. If you are the last family member who has joined, deleting your account permanently deletes the entire family and all of its data on our servers — schedule, expenses, receipts, children's profiles, photos, notes, and change history. If another family member who has joined remains, your membership and your personal records (such as private notes and sessions) are removed and the family continues without you. Deleting your CoFam account does not cancel a subscription purchased through the App Store; manage that subscription in your Apple account settings. After deletion, residual copies may persist briefly in encrypted backups before being overwritten on our providers' normal cycles.
Security
All data is encrypted in transit (HTTPS/TLS). Access to family data is enforced on our servers based on your verified membership and role, never trusted to the app on your device, so one family cannot read another family's data. Sensitive identifiers such as invite codes and calendar-feed tokens are generated unpredictably and can be revoked. No system is perfectly secure, but we design CoFam so that the failure of any single safeguard does not expose your family's information.
Children's privacy
CoFam is an app for adults coordinating the care of children; it is not directed to children. As stated in our Terms, account holders must be adults aged 18 or over; children may not create accounts. Information about a child in CoFam is a parental record: it is entered, controlled, and deletable by the adults in the family, and we use it only to provide the service to those adults. We treat children's profile information — especially health details and insurance-card photos — as sensitive: it is visible only to your family per each member's role and is deleted with the family's data.
A future version of CoFam may offer view-only logins for children so an older child can see their own schedule. Before launching that feature, we will update this policy and implement the parental-consent protections required by the Children's Online Privacy Protection Act (COPPA). If you believe a child under 13 has created an account, contact help@getcofam.com and we will remove it.
Your rights and choices
You can view and edit your family's information directly in the app, and delete your account (and the data deletion described above) without contacting us. Depending on where you live, you may also have formal rights:
California (CCPA/CPRA). California residents have the right to know what personal information we collect, to access it, to correct it, and to delete it, and the right not to be discriminated against for exercising those rights. CoFam does not sell personal information and does not share it for cross-context behavioral advertising, so there is no sale or sharing to opt out of.
European Economic Area and United Kingdom (GDPR). We process your data to perform our contract with you (providing the service), for our legitimate interests in securing and improving it, and with your consent where required (such as notifications). You have the rights of access, rectification, erasure, portability, restriction, and objection, and the right to lodge a complaint with your local supervisory authority.
To exercise any right you cannot complete in the app, email help@getcofam.com. We will verify your request and respond within the time required by applicable law.
International users
CoFam is operated from the United States and your information is stored and processed there. If you use CoFam from outside the U.S., you understand that your information will be transferred to and processed in the United States.
Changes to this policy
We may update this policy as the product evolves. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you in the app. Continued use of CoFam after an update means you accept the revised policy.
Contact
Questions, access requests, or deletion requests: help@getcofam.com.