Privacy Policy
What we collect, why, who touches it, and how to get it out or delete it. We do not sell your data.
This is version 1, written in plain English and pending review by an attorney before public launch. It is not legal advice.
1. The short version
We collect what we need to run a shared parenting calendar and record. We never sell your data, never rent it, and never use it for advertising or ad targeting. We do not build profiles for anyone else.
2. What we collect
Account information: your first name, email address, and a securely hashed password (or, if you use Google sign-in, the basic profile Google returns).
Household information: your household, your parenting schedule and anchor date, your chosen color, approval settings, holiday rules, and your invite link.
Children's information: the first names and birthdates you enter, plus any child tag you attach to an expense. We ask for the minimum needed to label the schedule and expenses.
Content you create: calendar changes and proposals, messages, expenses with amounts, categories, descriptions, splits, receipts and photos you upload, and log entries.
Technical information: basic device and log data such as IP address, browser type, timestamps, and error reports, used to keep the service secure and working. If you turn on notifications, we store a push subscription for that device.
Payment information: we store your license status, the date, a Stripe customer reference, and a Stripe session reference. We never receive or store your full card number.
3. About children's information
Information about children in TwoRoofs is provided by their parents, not by the children. Children do not have accounts and we do not knowingly collect information directly from anyone under 13.
We use children's information solely to deliver the service to the parents in that household: labeling whose day it is, tagging an expense to a child, and keeping the shared record. We do not use it for advertising, analytics resale, or model training.
If you believe a child has created an account, email us and we will remove it.
4. How we use information
- To operate the calendar, expenses, messaging, log, and export features.
- To authenticate you and keep your account secure.
- To send transactional messages: invites, proposal and message notifications you have enabled, password resets, and receipts.
- To process your Founders License purchase.
- To diagnose problems, prevent abuse, and comply with the law.
We do not sell personal information, share it for cross-context behavioral advertising, or use your household content to train AI models.
5. Who else touches your data
We use a small number of service providers, and only to run TwoRoofs:
- Supabase — database, authentication, and file storage for receipts and attachments.
- Stripe — payment processing for the Founders License.
- Our email provider — transactional email such as invites, resets, and notification fallbacks.
- Our hosting and delivery provider — serving the app itself.
These providers are bound to use the data only to provide their service to us. We may also disclose information if legally required, or to protect someone's safety.
6. Sharing inside your household
Both parents in a household see the same calendar, expenses, messages, and log, including who created each entry and when. This is the point of the product. Nothing you enter in TwoRoofs is private from your co-parent.
7. Security
Data is encrypted in transit and at rest, access is scoped per household at the database level, and passwords are hashed. No system is perfectly secure, so please use a strong, unique password.
8. Retention and deletion
We keep your household data while your account is active, because the record's value is that it persists.
If you delete your account while your co-parent is still active, your login and personal account details are removed, and the shared household records remain for them with your authorship labels intact. That data is equally theirs and we will not delete it out from under them.
If you are the only parent in the household, deleting your account permanently deletes the household: calendar, expenses, receipts, messages, attachments, and log. This cannot be undone, so we ask you to confirm twice.
We may keep limited payment and tax records after deletion where the law requires, and backups may persist for a short period before rotating out.
9. Your rights
- Export: download your records as PDF or CSV at any time from inside the app.
- Access and correction: view and update your account details in Settings.
- Deletion: delete your account from Settings, subject to the household rules above.
- Notification choices: turn categories on or off, set quiet hours, or mute everything in Notification settings.
Depending on where you live you may have additional rights under laws such as the CCPA or GDPR. Email support@gettworoofs.com and we will help. We will not discriminate against you for exercising a privacy right.
10. Location of data
TwoRoofs is operated from the United States and your data is processed there. If you use it from elsewhere, you understand your data is transferred to the US.
11. Changes to this policy
If we make a material change we will update the date at the top and notify you in the app or by email.
12. Contact
Privacy questions or requests: support@gettworoofs.com.
Questions? support@gettworoofs.com