Everything captured.
Nothing shown.

Hidden by default, not by accident

Most co-parenting apps lead with their forensic layer (tamper-proof logs, court-export buttons, message archives) because those features signal security to people in conflict. CoFam treats records as infrastructure, not marketing, because the product is designed for families who are trying to stay out of court, not document their way into it.

The audit log runs continuously and cannot be disabled by either parent. What changes is visibility: by default, neither parent sees the log. Court mode is the opt-in surface that exposes it.

What gets captured

Every event is stored with actor, timestamp, and before/after state. The six categories:

• Schedule edits. Who changed what, from which state to which, and when. Each edit is a discrete record, never aggregated.
• Handoff events. Time logged, location if recorded, which parent was on-duty before and after.
• Expense activity. Creation, edits, split adjustments, settlements, and attached receipts with upload timestamps.
• Approval policy changes. When spending thresholds moved, who proposed the change, who consented, and when.
• Proposal lifecycle. Opened, accepted, declined, withdrawn, or expired, with the exact response time for each stage.
• Message timestamps. Sent and received times are preserved. Message content is not editable retroactively; neither parent can delete a sent message from the log.

What is explicitly not captured: tone analysis, sentiment scores, and message-quality ratings. CoFam does not grade how you communicate with your co-parent.

Court mode requires both parents

Court mode is a per-family setting that surfaces the full audit log and unlocks PDF export. Turning it on is bilateral: one parent sends an activation proposal, the other explicitly accepts it in-app. One parent cannot activate Court mode for a family without the other parent’s acknowledgment. The mode is visible to everyone it affects before it goes live.

Once active, the Records tab in Settings shows a chronological event feed. Filter by date range, event category, or parent. Tap any entry to see the full before/after state, the actor, and the exact timestamp. The feed is read-only for both parents.

The PDF export is clean, neutral, and signed

Exporting generates a single PDF of the filtered date range, organized by event category. Each entry contains timestamp, actor, action, and before/after state. Nothing editorialized, and no weighting toward either parent. The file is digitally signed with a SHA-256 hash verifiable against CoFam’s public key.

The other parent receives a push notification the moment an export is generated. Court-mode transparency cuts both ways: neither parent can run a silent export.

What CoFam will never build

• Call recording or message recording for legal use
• GPS check-in or location verification at exchanges
• Tone analysis or message civility scoring
• Tracking or verifying the other parent’s location
• Any feature that makes one parent feel surveilled by the other

These are not gaps to fill later. They’re the product boundary. See Why CoFam for the full positioning.