Privacy Policy

Last updated: June 21, 2026

This Privacy Policy explains how Two Porch Lights ("Two Porch Lights," "we," "us") collects, uses, and protects information when you use our website and app at twoporchlights.com (the "Service"). By using the Service, you agree to this policy.

Who the Service is for

The Service is intended for use by adults (18 or older) who are co-parents. It is not directed to children, and we do not knowingly create accounts for children. Parents may enter information about their children (such as a first name) as part of organizing finances and schedules; this information is provided and controlled by the parent.

Information we collect

Account information: the email address and password you use to create an account. Passwords are stored in hashed form by our authentication provider; we never see your plain-text password.
Content you enter: the information you add to the app, such as parents' and children's names, expenses, payments, child-support and cost-sharing details, parenting schedules and calendar events, and notes between co-parents.
Payment information: if you subscribe on this website, payments are processed by Stripe; if you subscribe inside the iPhone app, the purchase is handled by Apple and charged to your Apple Account; if you subscribe inside the Android app, it is handled by Google Play and charged to your Google Play account. We do not collect or store your full card number. We receive limited details from Stripe, Apple or Google (such as your billing email and subscription status) to unlock and manage your access.
Notification token: if you turn on notifications in the mobile app, your device is issued a push token by Apple (iPhone) or Google (Android). We store that token against your account so we can alert you when your co-parent messages you or changes something. It identifies the device, not you, and we use it for nothing else. Turning notifications off, signing out, or deleting your account removes it. Our notifications are deliberately contentless: they say something happened, never what.
Technical information: basic information your browser sends automatically (such as device/browser type and approximate request data) used to operate and secure the Service.

How we use your information

To provide the Service: saving your data and, if you choose, syncing it between you and your linked co-parent.
To process subscriptions, free trials, renewals, and cancellations.
To respond to support requests and communicate about your account.
To maintain security, prevent abuse, and comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

How your data is stored and who processes it

When you use a shared cloud account, your data is stored in our database so both linked parents can see the same information. We rely on a small number of service providers ("processors") to run the Service:

Supabase: database and account authentication (stores your account and app data).
Stripe: subscription payments and billing for subscriptions bought on this website.
Apple: subscription payments and billing for subscriptions bought inside the iPhone app, and delivery of notifications to iPhones. Apple handles the payment; we receive only your subscription status.
Google Play: subscription payments and billing for subscriptions bought inside the Android app. Google handles the payment; we receive only your subscription status.
Google (Firebase Cloud Messaging): delivers notifications to Android devices. Google receives the push token and the notification text, which never contains a message body, a child's name or an amount.
RevenueCat: records which account an app store subscription belongs to, so the right account is unlocked.
Netlify: website and app hosting.
Google Ads: conversion tracking on our public marketing pages only, so we can measure which ads work. It is not loaded on the signed-in app, on this page, or in the mobile apps, and it never receives anything you enter into your account.
Anthropic: powers the in-app Assistant, receipt-photo scanning, calendar-text extraction, court-order and parenting-plan import, and the message "Soften" rewrite. The text or image you submit for those features is sent to Anthropic to generate the result. Some of these include your children's first names where you have entered them.
TomTom: calculates driving distance for Tax Center mileage entries. Only the two addresses you type are sent; the app never reads your device location.

If you use the app without a cloud account, your data is stored only in your own browser on your device and is not uploaded to us.

Sharing your information

We share information only as needed to run the Service: with your linked co-parent (the person who joins your shared space with your invite code sees the shared data you create), with the processors listed above, and when required by law or to protect rights and safety. We do not otherwise sell or rent your information.

Data security

Data is transmitted over encrypted connections (HTTPS), accounts are protected by passwords, and database access is restricted by row-level security so users can only reach their own (or their shared space's) data. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

Your choices and rights

Access & correction: you can view and edit your data directly in the app.
Deletion: you can delete your account yourself at any time — open Settings → Account and choose Delete my account, on the website, in the iPhone app or in the Android app. Full instructions are on our Delete your account page. It is permanent: your account, your private journal, your Tax Center records, the messages you sent, your uploaded receipts and your membership of every shared space are removed; if you are the last person in a shared space, the space and its contents go too. If your co-parent is still in a shared space, their own records stay with them. You can also email us (see below). Depending on where you live (for example, under GDPR or California's CCPA/CPRA), you may have additional rights to access, correct, delete, or port your data, and to object to certain processing.
Cancellation: you can cancel your subscription at any time; see the Terms of Service.

Data retention

We keep your information while your account is active and as needed to provide the Service. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain limited records (for example, billing records) to meet legal obligations.

Local storage & cookies

The app uses your browser's local storage to save your data and preferences on your device, and uses essential cookies/tokens for sign-in. We do not use third-party advertising or tracking cookies inside the app itself, and we never use anything you enter there for advertising. Our public marketing pages (the home page, blog and comparison pages) do load Google Ads conversion tracking so we can tell which ads bring people to the site. That tag is not present on the signed-in app, on this page, or in the iOS or Android apps.

Children's privacy

The Service is for adults. We do not knowingly collect personal information directly from children under 13. If you believe a child has created an account, contact us and we will address it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated through the Service or by email where appropriate.

Contact us

Questions about this policy or your data? Email support@twoporchlights.com.

Two Porch Lights is a record-keeping and communication tool for co-parents. Your Messages form a time-stamped record you can export for your own reference; it is not intended for court documentation or legal evidence, and nothing in the Service is legal or financial advice.