CoCoParent, published by Common Ground Studio, LLC, helps co-parents coordinate around their child's daily schedule, activities and wellbeing. This is the most personal category of data there is — a named child, with their meals, their medicine and their bad nights in it — and it is treated that way.
We do not collect location, contacts, advertising identifiers, or anything from your device that the app does not use.
The app loads no analytics, no crash reporting, no session recording and no advertising code. There is no Google Analytics, no Crashlytics, no Sentry, no ad network and no data broker anywhere in it. You can verify this by viewing the source of the app in a browser.
Two pieces of Google code do load, and both are named here rather than glossed over:
We do not sell or share your data, and we do not use it for advertising, profiling or training anything.
Only the members of your family — you and the co-parent you invite with your family's invite code. No other family can reach your records. This is enforced on the server by our Firestore and Storage security rules, not merely hidden in the app: every read and write is checked against the family's own membership list.
We do not access the contents of your family's records in the ordinary course of running the service. We can technically reach them, as any operator of an unencrypted database can, and we would only do so where we had to in order to fix a fault you reported or to comply with a legal obligation.
What we are not: your entries are not end-to-end encrypted. They are encrypted in transit and at rest, but we hold the keys. If that matters to you, it should inform what you write.
All data is stored in Google Firebase — Authentication, Firestore, Cloud Storage and Cloud Functions — hosted in the United States. Google is our only sub-processor. Firebase encrypts data at rest (AES-256) and in transit (TLS). See Firebase's privacy documentation.
A custody log is the kind of record a court may ask about. If we receive a valid, binding legal demand, we would produce only what it actually compels, and we will tell the affected account holders unless we are legally prohibited from doing so. We do not volunteer family records to anyone.
CoCoParent is an app for adults. Your child is not a user, has no account and cannot sign in; information about them is entered by you, about them. We do not knowingly collect data directly from children under 13. If you believe a child has created an account, write to us and we will remove it.
You can export your family's full log as a CSV file, your calendar as an ICS file, and a monthly report or doctor-visit summary as a PDF, from Settings inside the app. If your family has ever subscribed, export stays available even after the subscription lapses. Your record is yours to take with you.
You can delete your account at any time from Settings → Subscription → Account Removal. It is worth being precise about what that does, because the honest answer is narrower than "everything is erased":
Your co-parent is told that you deleted your account. They are not asked to approve it.
If you cannot reach the app, email us and we will delete your account for you.
While your account exists, we keep your family's record indefinitely. Nothing expires on its own and nothing is thinned out to save us space — an entry from the week you joined is still there, because a record that quietly forgets things is not a record.
When something is deleted — one entry, one photo, or an entire family — it is removed from the live database immediately and is gone from the app as soon as the deletion completes. We keep no backup, archive or scheduled export of our own, so there is no copy of a deleted family held on our side.
Two windows at our infrastructure provider outlast that, and it would be misleading to call deletion instantaneous without naming them:
Diagnostic logs from our server code are kept for 30 days and then deleted automatically. They record identifiers — an account id, a family id, a subscription transaction id — along with error messages. They do not contain the contents of your entries. Google separately retains an administrative audit log of changes made to the project itself for 400 days; that records our actions as operators, not yours as a parent using the app.
Payments are handled entirely by Apple. We never see or store a card number. We hold only whether your family's subscription is active and the date it runs to, and that is deleted along with the family.
You can turn push notifications off at any time in Settings. Your device token remains on file so notifications can be resumed, and no notifications are sent while they are off.
You can access, export, correct and delete your data from inside the app, without asking us. If you would rather we did any of it for you, or if you have a question about how your data is handled, write to the address below.
We will update this page if our practices change. Where a change is material we will make it visible in the app before it takes effect.
hello@cocoparenthq.com
Common Ground Studio, LLC, North Carolina, USA