Privacy Policy

Braidly stores what you and your co-parent enter about your family, including sensitive things like children's medical notes, and shows it to both parents. We never sell it and never use it for advertising. AI features send only what each request needs to Anthropic, which does not train on it and deletes it within 30 days. Your data is stored in the United States. You can leave a family, delete your account, and ask for a copy of your data. Children do not have accounts; a child can open a link you give them to see their schedule.

1. Who we are and what this covers

Braidly Technologies LLC ("Braidly", "we") operates the Braidly co-parenting platform (the "Service"), available to people in the United States and Canada. This policy explains what we collect, why, who sees it, how long we keep it, and your rights. It applies to braidly.co and the app. Our privacy contact and the person responsible for personal information at Braidly is Dennis Kunz, Founder: privacy@braidly.co.

2. What we collect

2.1 What you give us.

Account: name, e-mail address, phone number if you add one, parent role, the time zone and settings you choose, your acceptance of these documents (version and time).
Children: first and last name, date of birth, photo, grade, school name and phone, teacher name; the e-mail address you enter for a child to receive their Kids View link (the link is e-mailed to it); and, if you enter them, allergies, blood type, medications and dose logs, medical notes, primary doctor's name and phone, insurance provider and member ID, emergency contacts and authorised pickups (name, relationship, phone). Medical decisions and medication logs you record. This is sensitive information about a child; see Section 6. We ask for your consent before we save new health information in a child's health details, a dose log, a medical decision or a handoff log's health note, and our Consumer Health Data Privacy Policy (braidly.co/health-data-privacy) explains how we handle it.
Custody and schedule: your custody rotation and its history, holidays, school breaks, handoff times and places, swap and change requests, handoff logs and check-ins.
Communications: messages between you and your co-parent (and their edit history), AI Mediator messages in a thread, and the tone check's result on what you send.
Money: expenses, receipts, payments, settle-ups and agreements (amounts, dates, descriptions). Not your card: Stripe handles payment details.
Documents and photos you upload. We remove location and other embedded data from photos before they are stored (on your device before upload, or on our server for receipts a contributor uploads). Documents (PDF, Word) keep their own metadata.
Journal entries, private to you unless you share or release them.
Moments, packing lists, activities, court dates.
Your conversations with the Co-Parenting Advisor and the Braidly Assistant (see Section 4), your Braidly Help questions (not stored), and feedback you send us.
If you request a beta spot: name, e-mail, role, your situation and how you heard of us, the note you write, and the page and campaign link you came from.

2.2 What we collect automatically.

Server and security logs: IP address, browser, device and operating system, pages requested, times, and a country code (and, for Canada, the province) derived from your IP (used to limit beta requests to the US and Canada and to tell visitors from Quebec that Braidly is not yet available there). Error reports with technical details of what went wrong.
Product analytics (first party): which screens and features you use, how long, your device type, browser, screen size and country, tied to your account. Never message text, child names or anything you typed.
Vercel Web Analytics: cookieless page-view counts for the site.
Google Analytics 4 on our public marketing pages only: Google sets cookies (_ga) and receives the page address, a client identifier and device data. We have turned off Google's advertising features (Google Signals and ads personalisation) for this property. You can block it with your browser's cookie settings.
Push notification tokens (OneSignal) if you turn on notifications, and whether a notification was delivered.
A scrambled (hashed) form of your IP address when you accept the Braidly Assistant consent or turn it off, and, when you accept these documents, that scrambled IP address together with your browser's user agent, the screen you accepted on and the button you pressed. The same, without the screen, when you give or withdraw consent to saving health information, and when you agree to a paid plan's renewal terms (with the plan, the price and the exact terms shown).

2.3 Payment information.

Stripe, Inc. processes payments. We store your Stripe customer ID, plan and subscription status, never your card number.

3. Why we use it

To provide the Service to your family; to run your account and subscription; to send the e-mails and push notifications you choose and the ones the Service needs (invitations, receipts, reminders, security notices); to provide AI features (Section 4); to answer support requests; to keep the Service secure and detect abuse; to understand how the product is used (analytics as in 2.2); and to meet legal obligations. We do not sell personal information, we do not use it for advertising, and we do not use it to train AI models. Braidly is ad-free.

4. AI features and your data

Which features. The tone check and Tone Coach, the AI Mediator in a message thread, the Co-Parenting Advisor, Braidly Help, the school and custody schedule imports and the Braidly Assistant use Anthropic's Claude models.

What is sent. Requests go from Braidly's servers to Anthropic, never directly from your device. Each request carries only what the feature needs: the tone check, the message you are sending (a short routine reply such as "ok" or "on my way" is checked on our server and not sent to Anthropic); the Tone Coach, that message; the AI Mediator, the conversation it was invited into; the Co-Parenting Advisor, your question and the rest of that conversation (its last 20 turns; a saved conversation can be reopened, and nothing carries between conversations); Braidly Help, your question and the screen you are on (Help cannot see your family's records); the schedule imports, the document or calendar you chose; the Assistant, your request and the parts of your own family's records needed to answer it. The Assistant is never sent another family's data; its current tools do not read a child's medical details at all, and only the parts of a record needed to answer (for example children's first names and birthdays for "what is coming up").

Health details are taken out. Before the tone check (including the check when you send a message), the Tone Coach, the AI Mediator, the Co-Parenting Advisor, Braidly Help or the Braidly Assistant sends anything to Anthropic, our server takes out the exact words saved in your children's health details, dose logs and handoff health notes (allergies, medications and their doses, blood type, medical notes, the doctor's and insurance details) and puts them back into the answer you see. Other wording of the same thing, and health information you type in your own words, is sent as written. The school and custody schedule imports send only the calendar or schedule you upload.

What Anthropic keeps. Anthropic's Commercial Terms of Service (effective June 17, 2025, read October 20, 2026) state that "Anthropic may not train models on Customer Content from Services". Anthropic's privacy center (article dated July 1, 2026, read October 20, 2026) states that for API customers Anthropic will "automatically delete inputs and outputs on our backend within 30 days of receipt or generation", except content its systems flag as breaking its Usage Policy (inputs and outputs kept up to 2 years, and trust and safety classification scores up to 7 years) and where the law requires longer. Braidly has not asked for zero-day retention and does not send feedback data.

What Braidly keeps.

Help: no conversation is stored. Your browser keeps the current conversation for up to 2 hours.
Tone check and Tone Coach: the tone result, the rewrite the AI suggested, whether you accepted it and, if you did, the text you originally wrote are kept with the message. The court export notes when a sender chose to send a message despite a tone warning, and when the sent text was a rewrite the Tone Coach suggested (with the text originally written).
AI Mediator: its messages are part of the thread, visible to both parents and in the court export.
Co-Parenting Advisor: your conversations are stored privately for you until you delete them or your account.
Braidly Assistant: your conversation is stored privately for you and deleted 90 days after it started (a conversation ends after 12 hours without a question, or after 7 days; your next question starts a new one), unless a legal hold is active on your family, in which case deletion waits until the hold ends. Your co-parent never sees it and it is not in the court export. You can download or delete it in Settings. If a later version of the Assistant prepares changes for you, the changes you confirm become part of your family's shared record, labelled "prepared with the Braidly Assistant".
Your agreement to the Assistant's consent text, and turning it off or on, is recorded privately for your account (version, the text's fingerprint, time, and a scrambled form of your IP address).
Every AI call is logged with the feature, model, token counts, cost and time, never its content.

Legal process. Information Braidly stores, including Assistant and Advisor conversations while they are kept, could be requested by a court or by law enforcement through legal process. See Section 5.

Your part. Avoid typing information an AI feature does not need, such as full names, birthdates or school names, into free-text requests.

5. Who sees your data

Your co-parent. Everything you enter into the shared record (calendar, messages, expenses, medical and school information, documents, moments, handoffs) is shown to the other parent; that is the point of the Service. Your private journal, your Advisor and Assistant conversations, your notification settings, your read state and your account security events are not.
People you give access to (Section 7 of the Terms): only the record types you grant, which can include a child's medical record if you choose that, never messages.
Service providers, each processing data only to provide its service to us, under its data processing terms: Supabase, Inc. (database, authentication and file storage, hosted on Amazon Web Services in Virginia, USA); Vercel, Inc. (hosting and cookieless web analytics, USA); Anthropic, PBC (AI features, USA; see Section 4); Stripe, Inc. (payments); Resend (transactional e-mail); OneSignal, Inc. (push notifications, which pass through Apple's and Google's push services); Google LLC (Google sign-in if you use it; Google Workspace for our support mailbox; Google Analytics on our marketing pages). Your data is stored and processed in the United States.
Legal process. We disclose information only as the law requires or allows: in response to a valid subpoena, court order or warrant; or, where the law permits, in an emergency involving a danger of death or serious injury. US law (the Stored Communications Act) limits what a provider like Braidly may disclose, and to whom; in particular, a civil subpoena from a co-parent or their attorney cannot by itself compel us to hand over message content. Where the law allows, we will tell the affected parent.
Business transfer. If Braidly is sold or merged, your data may transfer with it; we will tell you by e-mail and in the app first.

We never sell, rent or trade personal information.

6. Children

Braidly is for adults (parents and legal guardians, 18 and over). Children do not have accounts. Parents enter information about their children, including health information, so that both parents can care for them; parents control that information and can correct or delete it.

A parent can give a child a Kids View link. Opening it shows the child their schedule, activities and packing lists, and lets them tick packing-list items; those ticks are saved to the family's record. The Kids View shows no messages, expenses, journal entries or documents. When the link is opened, our servers receive the device's IP address and browser details like any web page; we run no analytics of any kind on the Kids View, first-party or third-party, and no advertising, and we do not use anything collected there for any purpose other than running the page. If the page crashes, a crash report with the error, the browser and the device type (and no identifier) may be sent so that we can fix it. We do not knowingly collect personal information from a child under 13 beyond this. If you believe we have, contact privacy@braidly.co and we will delete it.

We keep what the Kids View collects only as long as the page needs it, under our written children's data retention policy, and never indefinitely: packing items a child ticks are deleted or cleared 30 days after the handoff or due date they were for, the link code is cleared 30 days after it expires (or at once when a parent revokes or renews it), crash reports are deleted 180 days after the error was last seen, rate-limit counters after 2 days, and our hosting providers delete their request logs on their own schedules. Each is kept only for what it does: the ticks so the child and both parents can see what is packed for that handover, the link code so the link works, crash reports to fix the page, and rate-limit counters to stop abuse. The parent who creates or renews the link gives consent for the child as their parent; we record which parent did it and when (for a link created before this version, the activity trail shows which parent created it and when).

7. Security

All traffic is encrypted in transit (TLS, with HSTS). Our database provider encrypts data at rest. Every table a signed-in user can reach is protected by row-level security, so one family's data is not visible to another. Sign-in is by Google or a one-time e-mailed code; two-step sign-in with an authenticator app is optional. Photos are stripped of location data before they are stored; we never ask for your home address or your device's location. Your co-parent cannot see whether or when you read a message. We publish a security.txt and read security reports first at security@braidly.co. No system is completely secure; if you think your account has been accessed, use "Sign out everywhere" in Settings, Security and tell us.

8. How long we keep it, and deletion

We keep your data while your account is active. Specific periods: Help conversations, not stored; Assistant conversations, 90 days from the start (paused under legal hold); Advisor conversations, until you delete them or your account; error reports, 180 days; analytics, tied to your account and deleted with it; rate-limit counters, 2 days; database backups, 7 days; beta requests, 12 months after the request is answered; a child's link e-mail address, until the family is deleted; your consent to saving health information and its withdrawal, until your account is deleted; your agreement to a paid plan's renewal terms, 6 years and at least 1 year after the subscription ends (renewal law asks for at least 3 years, or 1 year after the subscription ends if that is later), including after your account is deleted; renewal reminder records, until the family is deleted; the record that you requested and completed deletion (your e-mail address and the dates), kept.

When you request account deletion in Settings, Privacy: there is a 30-day waiting period in which you can cancel. After it, your profile, private journal entries, Advisor and Assistant conversations, consents, notification settings and usage data are deleted. If your co-parent still has an account, the family's shared records are not deleted: your profile is deleted, Family Access you granted ends, your notifications are deleted, and your e-mail address is removed from the records you created (messages, activities, medical decisions, swap requests, documents, journal releases, hold release requests and calendar feeds). Two logs keep the e-mail address of the parent who acted, because that is what they record: legal hold events and court export records. The same applies to a family you left earlier. Those records are also your co-parent's, and we will not delete one parent's records at the other's request. If you are the last parent on the family, the whole workspace is deleted: children's profiles, custody data, calendar, messages, expenses, journal, documents and every uploaded file. Deletion cannot proceed while a legal hold is active on the family or on a family you left. Stripe keeps billing records as tax law requires.

Leaving a family is not deletion. Either parent can leave a family from Settings, Privacy without deleting their account. Leaving ends your access to that family's records immediately and deletes nothing: the shared record stays with the parent who remains, exactly as it was, including your name and email address on what you wrote. Your private journal entries stay private; you can no longer open them in the app, so they are included in the court export you are asked to save before leaving, and they are deleted if you later delete your account. If you then delete your account, your email address is removed from that family's records as described above.

Backups. Our database is backed up once a day and each backup is kept for 7 days, so deleted database records can persist in an encrypted backup for up to 7 days after the deletion runs before that backup ages out. Uploaded files (documents, receipts and photos) are not part of those backups and are gone once the deletion runs. We do not restore deleted accounts from backup, and backup copies are not accessible through the Service. We say this explicitly because "permanently deleted from our systems" would not be accurate while any backup exists.

Data export. You can ask for a machine-readable copy of your data by e-mailing privacy@braidly.co; we send it within 30 days. The court export in the app covers your family's shared record, and your Assistant conversations can be downloaded in Settings.

9. Your rights

Everyone: ask what we hold about you, correct it, delete it (subject to Section 8), get a copy, withdraw consent (for example by turning the Assistant off), and complain to us. E-mail privacy@braidly.co; we answer within 30 days (45 where the law allows and we need it).

California. Braidly does not currently meet the thresholds that make the CCPA apply to it; we honour its rights anyway on request and we do not sell or share personal information for cross-context behavioural advertising.

Washington, Nevada, Connecticut and other states with consumer-health-data laws. Our Consumer Health Data Privacy Policy (braidly.co/health-data-privacy, linked at the foot of our website's pages and in Settings, Privacy) says what health data we collect and why, where it comes from, who it is shared with, and how to use your rights. We ask for your consent before we save new health information, and you can withdraw it in Settings, Privacy. Health information is used only to provide the Service to your family and is never sold. You can clear a child's health details in the app at any time, and ask us to delete any of it, including dose logs and medical decisions the app only hides; we answer within 45 days, and if we say no you can appeal, as that policy explains.

Canada. Braidly is subject to PIPEDA for Canadian users. Your data is stored and processed in the United States and may be accessible to US authorities under US law. You may withdraw consent and request access or correction as above; the Office of the Privacy Commissioner of Canada can receive complaints. Quebec: Braidly is not yet available in Quebec.

EU/UK. Braidly is not offered in the EU or UK and does not knowingly accept users there.

10. Cookies and analytics

We use strictly necessary cookies for sign-in and security. Our own product analytics and Vercel Web Analytics set no tracking cookies. Google Analytics runs on our public marketing pages only and sets cookies as Section 2.2 says; you can block them in your browser. We do not use advertising cookies or pixels anywhere, and we run no analytics at all on the Kids View.

11. Breaches

If a security breach affects your personal information, we will tell you and the authorities the law requires, without unreasonable delay and within the time the law sets, with what happened and what you can do.

12. Changes

For a material change we e-mail you and show a notice in the app at least 14 days before it takes effect and ask you to accept it in the app. Each version carries its number and date.

13. Contact

Braidly Technologies LLC, c/o Registered Agents Inc, 6650 Rivers Ave., STE 100, Charleston, SC 29406. privacy@braidly.co · support@braidly.co · (864) 326-3861. We aim to answer privacy questions within 5 business days.

In short