Draft · beta
Privacy, in plain English
This is an honest description of what CustodyMap does with your information during the beta. It will be replaced by a reviewed privacy policy before public launch. It is not a legal document and not legal advice.
What we store
- Your account: email address, a password hash (never the password), your display name.
- Your household: the names you give the other parent and the children, optional contact details, your timezone.
- Your schedules, handoff times, day swaps, and proposals.
- The record of changes: who did what and when, the IP address for approvals made through a link, and a snapshot of the schedule before and after each change.
- School and activity calendars you import, and the events in them.
- If you connect a calendar, the identifiers of the calendars and events we created.
Documents you upload
When you upload a school calendar as a PDF, image, or pasted text, we send that content to Anthropic's API to extract the dates, then show you the result to check before anything is saved. We do not keep the uploaded file after extraction. Only the events you approve are stored.
Who can see what
- Everyone on your household account sees the same schedule, swaps, and record.
- Someone with a share or swap link sees that one proposal or swap, and must prove their email with a code to approve it.
- Someone with your calendar feed link sees your schedule in their calendar app. You can regenerate the link at any time from Settings.
- We look at your data only to fix a problem you have asked us to fix.
What we do not do
- We do not sell your information or share it with advertisers.
- We do not use your schedule or documents to train anything.
- We do not contact the other parent except through the links you choose to send.
Deleting your account
Delete from Settings and access stops immediately for everyone on the account. After a grace period (14 days in the beta) we seal the record and final schedule into a locked archive under a reference we email you, then delete everything else, including the user accounts. The archive exists because custody records are sometimes needed years later. It is released only to you, with proof of email control, or under a valid legal request. Ask us to purge it and we will, once we have verified it is you.
Where it lives
On servers in the United States, backed up nightly. Email is sent through Resend. Calendar sync, when connected, goes through Google's and Microsoft's APIs.