Guardia — Privacy Policy (Beta)

Last updated: October 29, 2026 — beta version

Guardia is in beta. This policy explains, in plain language, what information Guardia handles and why. It describes the app as it actually works today. An attorney-reviewed policy will replace this one before public launch, and we will tell you when it changes.

This is the standalone copy for hosting on Guardia's domain. The same text lives in the app (More → Privacy Policy), with a full Spanish version; keep the copies in step when either changes. The Terms of Use live in the app (More → Terms of Use).

What Guardia is

Guardia is a communication and paperwork tool for two parents raising a child across two homes. Both parents use the same case record. Guardia provides legal information and document-preparation help only — it is not a law firm and does not give legal advice.

Information you give us

• Account: your name, email address, and a password. Passwords are stored by our authentication provider (Supabase) as cryptographic hashes — Guardia never sees or stores your plain password.
• Your case: the case title, state and county, court name, the case type you select, and the court case number if you choose to add it.
• Children: first names and birthdates that a parent enters, so the record and paperwork can name them correctly.
• The shared record: messages (both the original text you typed and the version delivered), calendar events, swap requests and decisions, expenses, and info-bank entries (school, doctors, insurance, and similar facts).
• Your journal: entries you write, including whether you mark them private, and any location text you type into a journal entry.
• Court record imports: if you use the court-record lookup, you fetch the public record from the court's portal yourself and bring it into the app. Guardia does not fetch it for you. Imported items are stored tagged with their source and the date you retrieved them.
• Support reports: if you use "Report a problem," the text you write, the screen you name, and the optional reply email you provide.
• Payments: web subscriptions and filing payments are processed by Stripe. Your card number goes to Stripe, never to Guardia — we keep only the billing state Stripe reports (trial dates, whether a payment went through, refund status) so the app can show it to you.

How Faro and Buffer Mode process your words

Faro (the in-app guide) and Buffer Mode run on Guardia's servers. When you chat with Faro, soften a message with Buffer Mode, or use paperwork help, the text involved is sent to a hosted AI (large language model) provider — by default Anthropic — which processes it and returns a result. Your text is not used to sell anything, and Guardia does not sell personal information to anyone, ever.

Every AI interaction on a case is written to that case's AI activity log, including original and delivered text, and both parents can read that log. Do not put anything into a Faro chat or a message that you do not want in the case record.

Buffer Mode never softens threats or child-safety content: those are delivered exactly as written and flagged. A server-side check rejects any AI rewrite that changes a number, date, time, amount, or name. The check cannot catch every possible change, so compare the delivered version with your original before you send.

The shared record — and what "shared" means

The shared record belongs to both parents together. Both parents can read the messages, calendar, swaps, expenses, and info bank on a case they belong to, and read-only viewers a parent's case includes can read them too.

Messages are a locked log: they cannot be edited or deleted by either parent. Each shared-record write is appended to a tamper-evident hash chain, and either parent can download a certified export and verify it. Verification proves the record was not altered after export; it does not prove the statements in it are true. If you export the record and give the file to someone (a mediator, a guardian ad litem, a court, a lawyer), Guardia cannot control copies of that file afterwards.

Guardia never files anything for you and never marks anything submitted or accepted.

What the other parent can NEVER see

• Your private journal entries. Entries marked private are readable only by you.
• Journal locations. Locations live in a separate database table with an author-only rule, so the other parent's app cannot read them even on entries you chose to share. This is enforced by the database itself, not just hidden on screen.
• Your support reports. They go to the Guardia operator only, are not part of any case, and no app user — including you — can read them back in the app.
• Guardia does not collect your device's GPS location. The only location information in Guardia is text you type yourself into a private journal entry.

Children's information

Guardia accounts are for adults. Guardia is not directed at children and children should not use it. The only information about children is what a parent enters (first name, birthdate, and facts in messages, calendar, journal, and the info bank) so the co-parenting record works. Parents are responsible for what they enter.

Storage and security

Data is stored in a Supabase (Postgres) database. Access is enforced by database row-level security: a signed-in user can only ever retrieve cases they belong to. AI prompts, guardrails, and court-rule packs live only on the server and are never shipped in the app.

No system is perfectly secure. Use a unique password, and use Quick Exit (top of every screen) if you ever need to leave the app instantly — it swaps to a neutral page.

Deleting your account

You can delete your account at any time in More → Delete my account. Deletion is permanent and removes your sign-in, your profile name and email, your private journal entries and locations, your read receipts, your support reports, and any case only you belonged to.

The shared certified record of a case shared with the other parent is kept, because it belongs to both parents and a court may rely on it. Your name on that record is replaced with "Deleted parent," and an entry noting the removal is added to the record chain so it stays complete and verifiable. Download a certified export first if you want your own copy.

Changes and contact

If this policy changes, the new version will appear here with a new date, and material changes will be announced in the app. Questions about privacy: use More → Report a problem and mention privacy — reports route to the Guardia operator.