Privacy Policy

We deliberately collect as little as possible, because this is sensitive information about children.

• No plan data if you only use the free calendar and schedule tools: your settings are stored in your own browser, not on our servers. We still receive the aggregate page analytics and server logs described below, as any website does. Generating a free watermarked preview sends the plan to our server to render the PDF, and it is not stored.
• Your email address, if you create an account.
• The contents of any plan you save: the names you enter for parents and children, a child's birthday if you enter one, your chosen state, and the schedule and clause settings you select.
• Payment records from our payment processor: which product you bought, when, and the last four digits of the card. We never see or store full card numbers.
• Aggregate, cookieless analytics about which pages are visited. This does not identify you and sets no tracking cookies.
• Standard server logs, including IP address, retained for a short period for security and abuse prevention.

The exchange location in the builder is a free-text field, and whatever you type is stored with your plan and printed in the document. Some parents put a home address there; many deliberately put a neutral public place instead, which is often the better answer for the plan as well as for your privacy. It is your choice, and we do not require an address anywhere.

• Social security numbers, government ID numbers or financial account details.
• A home address. We never ask for one. The builder asks which state you are filing in, and nothing more.
• Any information about the other parent beyond what you choose to type.
• Tracking cookies, advertising identifiers or cross-site profiles.

We do not use the contents of your plan to train models, and we do not share it with anyone except the service providers listed below who are required to process it on our behalf.

• To build, save and export your parenting plan.
• To authenticate you and keep your account secure.
• To process payments and provide receipts and refunds.
• To respond to support requests you send us.
• To understand, in aggregate, which pages are useful so we can improve them.

Each of these processes data under its own terms and applicable data protection obligations.

• Supabase: database, authentication and storage for accounts and saved plans.
• Stripe: payment processing. Stripe receives your payment details directly; we do not.
• Vercel: hosting and content delivery.
• Plausible Analytics: cookieless, aggregate page analytics, where enabled.

Saved plans are kept until you delete them or delete your account. Deleting your account removes your plans from our production database; backups are purged on a rolling schedule within 30 days.

Payment records are retained as long as required for tax and accounting purposes. Server logs are retained for up to 30 days.

You can access, correct, export or delete your data at any time from your account page, or by emailing us.

• Access: see everything stored against your account.
• Correction: edit any plan or account detail directly.
• Deletion: delete individual plans or your entire account.
• Portability: download a machine-readable copy of every plan on your account, free, from your account page. The formatted court-ready PDF is the paid product; the underlying data is always yours.
• Objection: stop using the service at any time; nothing is retained that you have deleted.

We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act. California residents may exercise access and deletion rights as described above, and we will not discriminate against you for doing so.

CustodyPlan is intended for adults. We do not knowingly collect information directly from children. A parent using the service may enter a child's first name and birthday as part of their plan; that information is provided by the parent, is stored only as part of that plan, and is deleted with it.

Data is encrypted in transit and at rest. Access to saved plans is enforced at the database level so that a plan can only be read by the account that created it. We keep our dependencies current and limit internal access to production data to what is necessary to operate the service.

No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you promptly.

If we make a material change we will update the date at the top of this page and, where the change affects how we handle existing data, notify account holders by email.