Privacy Policy

We collect information you provide directly to us when you create an account, invite a co-parent, log expenses, or contact support. This includes: • Account information: name, email address, and password (stored as a secure hash) • Family data: custody schedules, calendar events, swap requests, and shared expenses • Communications: messages and notes you send through the platform • Usage data: pages visited, features used, and actions taken within the app We do not collect sensitive personal information such as Social Security numbers, financial account numbers, or government-issued ID numbers.

We use the information we collect to: • Provide, maintain, and improve CustodyTrac • Send notifications about swap requests, expenses, and calendar changes • Respond to your support requests and communications • Send product updates and service announcements (you can opt out at any time) • Monitor for fraud, abuse, and security threats • Comply with legal obligations We do not sell your personal information to third parties. We do not use your family data for advertising purposes.

We share your information only in the following circumstances: • With your co-parent: Family members you invite can see shared calendar data, swap requests, and expenses within your family space. • With service providers: We use trusted third-party services (hosting, email delivery, analytics) that process data on our behalf under strict data processing agreements. • For legal compliance: We may disclose information if required by law, court order, or to protect the rights and safety of our users. • With your consent: We will share information for any other purpose with your explicit consent. We never sell, rent, or trade your personal information.

We take the security of your data seriously: • All data is encrypted in transit using TLS 1.3 • Data at rest is encrypted using AES-256 • Passwords are hashed using bcrypt with a high work factor • We conduct regular security audits and penetration testing • Access to production data is restricted to authorized personnel only • We maintain SOC 2 Type II compliance No system is 100% secure. If you believe your account has been compromised, contact us immediately at security@custodytrac.com.

CustodyTrac's Document Vault and related features (including expense receipts) let you upload files such as court orders, medical records, school records, insurance documents, and images ("Uploaded Documents"). Uploaded Documents may contain sensitive personal information about you, your children, or third parties. You are solely responsible for determining what information is appropriate to include in any Uploaded Document and for ensuring you have the legal right, and any consent required, to upload and share that information with other members of your family space — including a co-parent, significant other, or attorney/mediator you authorize. We apply the same technical and administrative safeguards described in this Policy (see "Data Security") to Uploaded Documents as we do to other account data, including encryption at rest and in transit and family-scoped access controls. However, we do not review the content of Uploaded Documents, and we make no representation, warranty, or guarantee — under this Policy, applicable data protection law, or otherwise — regarding the accuracy, completeness, legality, or privacy-compliance of the content within any Uploaded Document, including personal information about a minor child or third party that you choose to include. Responsibility for the content of Uploaded Documents rests solely with the uploading party. If you grant document access to a significant other, attorney, or mediator through account settings, you are solely responsible for that decision and for any resulting disclosure of the information contained in your Uploaded Documents.

We retain your data for as long as your account is active. If you delete your account: • Your personal profile is deleted within 30 days • Family data (calendar, expenses, swap history) is deleted within 90 days • Backup copies are purged within 180 days You may request an export of your data at any time from Settings → Account → Export Data.

Depending on your location, you may have the following rights: • Access: Request a copy of the personal data we hold about you • Correction: Request correction of inaccurate data • Deletion: Request deletion of your personal data ("right to be forgotten") • Portability: Receive your data in a machine-readable format • Objection: Object to certain types of processing • Withdrawal of consent: Withdraw consent at any time where processing is based on consent To exercise any of these rights, contact us at privacy@custodytrac.com. We will respond within 30 days.

We use cookies and similar technologies to: • Keep you logged in between sessions (authentication cookies) • Remember your preferences • Understand how you use the app (analytics) You can control cookies through your browser settings. Disabling authentication cookies will require you to log in on every visit. See our Cookie Policy for full details.

CustodyTrac is designed for adults (parents and guardians). We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting a notice in the app at least 14 days before the change takes effect. Your continued use of CustodyTrac after the effective date constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us at: CustodyTrac, Inc. Email: privacy@custodytrac.com