Privacy Policy

Last updated: October 9, 2026

Two Porch Lights is operated by Centurion Blue Consulting LLC, a Colorado limited liability company ("Two Porch Lights," "we," "us"). This Privacy Policy explains how we collect, use, and protect information when you use our website at twoporchlights.com, the app on that website, and our iPhone and Android apps (together, the "Service"). By using the Service, you agree to this policy. You can reach us at support@twoporchlights.com.

Who the Service is for

The Service is intended for use by adults (18 or older) who are co-parents. It is not directed to children, and we do not knowingly create accounts for children. Parents may enter information about their children, such as their names and birthdays, school details, and care and health details (the full list is under Children's details below). Only a parent enters it, children never do, and it is visible to both parents linked in the shared space.

Information we collect

  • Account information: the email address and password you use to create an account, and the name you enter when you sign up. The website's sign-up form asked for an optional phone number until October 2026, and the iPhone app before version 1.0.14 and the Android app before version 1.0.16 still do; a number given there stays with your account until you delete the account or ask us to remove it. Passwords are stored in hashed form by our authentication provider; we never see your plain-text password. If you use mileage for kids' activities, the home address you enter for mileage, the starting point for your trips. It is stored with your account, not in your shared space, and your co-parent never sees it; they see only where a trip went and the miles.
  • Content you enter: the information you add to the app, such as parents' and children's names, expenses (including which parent added each one and who last changed it, and when) and receipts (photos, and the original file of a receipt added as a PDF), payments, child-support and cost-sharing details, parenting schedules and calendar events (including any address or note saved on them), exchange check-ins, messages and the files attached to them, notes and comments, private journal entries, Tax Center records, a copy of your parenting plan or court order if you put one on file (the file and the text read from it), mileage trips with whether each was added (by the driver or automatically), skipped, or handed to the other parent, and the payment details you choose to show your co-parent for settling up (a Venmo, PayPal or Cash App name, a phone number for Apple Cash, or an email address or phone number for Zelle).
  • Children's details: for each child, a parent can save a name and a birthday, and can fill in an optional info card with any of these: clothing and shoe sizes; allergies; medications and dosages; doctor or pediatrician (name and phone); dentist or orthodontist (name and phone); school, grade and teacher (with a phone number); insurance carrier and member ID; and free-text notes (such as comfort items, routines or fears). Every field is optional and is entered only by a parent. Children's details belong to the shared space, so both linked parents can see and change them. Children's names also appear on the expenses, events and other records you create.
  • Parenting plan on file: if you or your co-parent put a parenting plan or court order on file, we store a copy of the file and the text read from it with your shared space, one plan per space. If pages of the PDF have little or no text of their own, as in a scanned plan, and you choose to have them read, pictures of those pages are sent to Anthropic, which reads them into text. We do not keep those pictures. If the plan is put on file, we store that text with it, and the PDF you added is kept as the copy on file, as described above. Text read this way can contain mistakes. Only members of that space can open the plan copy: you and your linked co-parent can each view it, ask it questions, replace it, or remove it. When either of you asks it a question, the question and the plan's text are sent to Anthropic to write the answer, and the in-app Assistant sends the plan's text too with any question that may be about it; your questions are not saved in the app. The exception is Report this answer in the iPhone and Android apps: a report you send from it includes that question and the answer, up to 900 characters of each, so we can review them. In the iPhone app before version 1.0.15 and the Android app before version 1.0.17, they are sent once you tap Report this answer, whether you finish the report or cancel it. The plan copy is never included in an access code for an attorney or mediator.
  • Recent updates: when you or your co-parent makes one of these changes in a shared space, the Service saves a short line about it with that space, so the other parent can see what changed: adding, changing or deleting an expense, a payment or a calendar event; changing parenting time, the schedule, holidays, vacations or birthdays; changing child support or the cost split; closing out or reopening a month; logging an exchange check-in; adding a comment; putting a parenting plan on file or removing it; and approving or declining a proposed change. A line holds which account made the change, the kind of change, the time, and a few words about it. Those words start with the first name saved for the parent who made the change and, depending on the change, can include an expense's amount and description, a payment's amount and type, a calendar event's title and date, the date of a parenting-time change and the first name of the parent given that day, the date of an exchange check-in, or the month of a close-out. A comment is named by what it is on and is never quoted. When one save changes several things, the line describes the first and counts the rest. Your co-parent sees the lines about your changes, and you see the lines about theirs, under Recent updates on the Today tab. Notifications and alert emails about your co-parent's changes, and the count of changes in an End of day summary, come from these lines and carry at most the kind of change, never those words. A line stays after the item it describes is changed or deleted (see Data retention). The website saves these lines, and so do the iPhone and Android apps from version 1.0.12.
  • Payment information: if you subscribe on this website, payments are processed by Stripe; if you subscribe inside the iPhone app, the purchase is handled by Apple and charged to your Apple Account; if you subscribe inside the Android app, it is handled by Google Play and charged to your Google Play account. We do not collect or store your full card number. We receive limited details from Stripe, Apple or Google (such as your billing email and subscription status) to unlock and manage your access.
  • Notification token: if you turn on notifications in the mobile app, your device is issued a push token by Apple (iPhone) or Google (Android). We store that token against your account so we can alert you when your co-parent messages you or changes something. It identifies the device, not you, and we use it for nothing else. Turning notifications off, signing out, or deleting your account removes it. Our notifications leave out the details: in the mobile app, a notification says what kind of thing happened, such as a new message or a payment, never the message text, a child's name or an amount. If you turn on notifications on the website, your browser gives us a push address from its maker's push service (for example Google for Chrome, Apple for Safari, or Mozilla for Firefox). We store it with your account and use it only to send a signal that something changed; that signal carries no content, and your browser shows a general notice. Turning website notifications off or deleting your account removes it.
  • Email alert choice and time zone: your choice for alert emails (As posted, End of day, or App notifications only) and, so that an End of day summary reaches you in your evening, the time zone your phone or computer is set to, as a name such as America/Chicago. The website, and app versions that offer the three choices (the iPhone app from version 1.0.13 and the Android app from version 1.0.15), record the time zone in a shared space when you open or return to that space, or change its choice. It is a device setting, not your location: the app never reads your device's location. Both are saved with that space's settings, so each shared space you belong to has its own, and, like the rest of those settings, they sync to your co-parent's app and are included in a backup file either of you downloads, although the app shows them only to you. Until a time zone is recorded, we use Mountain Time.
  • Checklist email sign-up: if you ask for our free checklist on the website, we store the email address you give (and which page you asked from) so we can send it, and our email provider delivers it. We send the checklist once and do not add you to a newsletter.
  • Website chat: if you type a question into the "Questions?" chat on our public website, your question and the earlier messages in that chat are sent to Anthropic to write the reply. We do not save the conversation.
  • Technical information: basic information your browser sends automatically (such as device/browser type and approximate request data) used to operate and secure the Service. To stop abuse, when you use the website chat or the checklist form we record your IP address and the time; these records are not linked to an account. The in-app AI features count each account's uses, by the hour and by the day, and map lookups for mileage (driving distance and finding an address) count them by the hour, for the same reason.

How we use your information

  • To provide the Service: saving your data and, if you choose, syncing it between you and your linked co-parent.
  • To process subscriptions, free trials, renewals, and cancellations.
  • To send the emails the Service depends on: sign-up confirmation (sent once more, about a day after you sign up, if you have not confirmed your email by then) and password resets, alerts when your co-parent posts a message or changes something (you can turn alert emails off), monthly reminders, free-trial reminders, a one-time reminder to invite your co-parent, a one-time notice if you are removed from a shared space, and the checklist if you ask for it. We may also send people who have an account an occasional product update email about new features. Each one has an unsubscribe link, and you can also reply and ask us to stop; either way we stop sending you product updates, and emails about your account, such as a password reset, still come. We keep a record of which product updates we sent you, and of whether and when you unsubscribed, with your account until the account is deleted.
  • To send alert emails the way you choose under Settings, then Notifications, then Email alerts. Each shared space has its own choice. As posted: an email as each change or message comes in, naming only the kind of change (for example, that the shared calendar changed). After an email, more changes of the same kind within 2 minutes don't send another, and the same goes for messages. End of day, the setting everyone starts with: one summary email a day, at about 7 PM your time, sent only when there is something new. It counts your co-parent's updates and new messages by kind (for example, "2 new messages, 5 expense updates, 1 calendar update"), from your last summary, or over the last 24 hours if you haven't had one in 3 days, and changes saved together count as one update. With End of day in more than one shared space, you get a separate summary for each. App notifications only: no alert emails, and no monthly close-out reminder emails. Those reminders are one set for you rather than one for each space, so App notifications only in any of your spaces stops them. Every alert email names only the kind of change, and an End of day summary how many of each, never a name, an amount, a place or the text of a message, and leaves out the kinds of alert you have switched off.
  • To respond to support requests and communicate about your account.
  • To maintain security, prevent abuse, and comply with legal obligations.

Your personal information is never sold for money, and nothing you enter in the app is used for advertising. The only advertising measurement we report to an advertising company is the Google Ads reporting described below, which tells Google about sign-ups and about plans bought on the website so we can see which of our ads lead to them. California law may treat it as "selling" or "sharing". You can opt out of it on our Do Not Sell or Share My Personal Information page, and we honor the Global Privacy Control signal (see California privacy rights).

How your data is stored and who processes it

When you use a shared cloud account, your data is stored in our database so both linked parents can see the same information. We rely on a small number of service providers ("processors") to run the Service:

  • Supabase: database, account authentication and file storage (stores your account, your app data, the receipts and documents you upload, and the parenting plan copy), including daily backups that it keeps for 7 days.
  • Stripe: subscription payments and billing for subscriptions bought on this website.
  • Apple: subscription payments and billing for subscriptions bought inside the iPhone app, and delivery of notifications to iPhones. Apple handles the payment; we receive only your subscription status.
  • Google Play: subscription payments and billing for subscriptions bought inside the Android app. Google handles the payment; we receive only your subscription status.
  • Google (Firebase Cloud Messaging): delivers notifications to Android devices. Google receives the push token and the notification text, which never contains a message body, a child's name or an amount.
  • RevenueCat: records which account an app store subscription belongs to, so the right account is unlocked.
  • Your browser's push service (for example Google for Chrome, Apple for Safari, or Mozilla for Firefox): delivers website notifications if you turn them on. It receives only your browser's push address and a signal that something changed, never any content.
  • Resend: delivers our emails, including sign-up confirmations and password resets, alerts, reminders and the checklist you request. It receives your email address and the content of the email. Alert emails never include the text of a message; they name only the kind of change and, in an End of day summary, how many of each.
  • Netlify: website and app hosting, the server functions behind features such as notifications, email and the website chat, and private storage for our weekly backup copies and our website's page-view counts.
  • Google Ads: measures which ads work. Its tag loads on our public website pages, not on the signed-in app, on this page, or in the mobile apps, and it never receives anything you enter into your account. If you arrive from a Google ad and then create an account, we store Google's click identifier for that ad with your account and later share that identifier and the time your account was created with Google, so we can tell which ads lead to sign-ups. When you buy a plan on the website, the page you return to after checkout also tells Google that a purchase happened, its amount and currency, and a one-way code for the order (a scrambled form of the checkout number that cannot be turned back into it, used so the same purchase is not counted twice), so we can tell which ads lead to purchases. We never share your name, email, or anything you enter in the app. Google uses this under its own terms rather than only as our processor, so we treat it as sharing and let you opt out (see California privacy rights).
  • Anthropic: powers the in-app Assistant, receipt-photo scanning, calendar-text extraction, court-order and parenting-plan import, reading the pages of a scanned plan from pictures of them, filling in setup from your parenting plan, and answering questions about the parenting plan on file (your question and the plan's text are sent to generate the answer), importing a message history exported from TalkingParents, the message "Soften" rewrite, and the "Questions?" chat on our public website. The text or image you submit for those features is sent to Anthropic to generate the result. When a parenting plan is on file and your Assistant question may be about it (for example, it mentions holidays, school, travel, support or the plan), the plan's text is sent with your question. Some of these include your children's names where you have entered them. Your Assistant chats are kept only on your device, and we do not save website chat conversations.
  • Google Maps Platform (Google LLC): calculates driving distance for mileage, and finds a place's address when you look one up. For driving distance, only two addresses are sent: for event mileage, your home address and the event's address; for Tax Center mileage, the two addresses in its From and To boxes. If Google cannot place one of those two addresses on the map, that same address may also be looked up with Google Maps Platform's place search to find it, and the distance asked for again; nothing else is sent. When you look up an address, such as for the place on a calendar event, only the text you look up (a place name, an activity's label, or an address you typed) and the city and state from your home address, if you saved one, are sent, to find the address; nothing else is sent. The app never reads your device location.
  • TomTom: calculates driving distance for mileage, and finds a place's address when you look one up, used when Google Maps Platform is not available, fails or finds nothing. For driving distance, only two addresses are sent: for event mileage, your home address and the event's address; for Tax Center mileage, the two addresses in its From and To boxes. For an address lookup, only the text you look up (a place name, an activity's label, or an address you typed) and the city and state from your home address, if you saved one, are sent. The app never reads your device location.

If you use the app without a cloud account, your data is stored only in your own browser on your device and is not uploaded to us.

Sharing your information

We share information only as needed to run the Service, and only in these ways:

  • Your linked co-parent: the person who joins your shared space with your invite link or code sees the shared data either of you creates there, including children's details. Your private journal and your Tax Center records are never shared. Your home address for mileage is never shared; your co-parent sees only where a trip went and the miles. A parenting plan put on file is shared with your co-parent, who can view it, ask it questions, or remove it. When you invite your co-parent by text, email or the share sheet, your own phone or email app sends the invite, so we don't see who you send it to. We do record that an invite button was used in your space, which button (Text, Email, Copy or Share) and when, so we can tell whether invites are being sent; we never record who it went to or what it said. The iPhone and Android apps send that count only once it is listed in their App Store and Google Play privacy details; until then only the website records it. The invite link carries only your space's invite code, after the # sign, which browsers don't send to our servers. In the iPhone app from version 1.0.14 and the Android app from version 1.0.16, the invite also has a button to choose your co-parent from your contacts. It opens your phone's own contact list; the app never reads that list and asks for no permission to it. The app receives only the one contact you tap (the name, with the phone numbers and email addresses saved for that contact in the iPhone app, or the one phone number you tap in the Android app), shows it on that screen, and uses it on your phone to address the text or email you send. It is not saved and is not sent to us.
  • People a parent chooses, through a read-only access code: while your plan or free trial is active, either parent in a shared space can create an access code for someone they choose, such as an attorney or mediator. Anyone holding a live code can open a read-only view of that space's shared records, with no sign-in. The view shows both parents' and the children's names, the full message log (both parents' messages, with the sender's email address) and every expense and payment. It never includes either parent's private journal, Tax Center records, a child's info card or health details, birthdays, calendar events or payment handles, or the parenting plan copy, and it cannot change anything. A code lasts for the number of days the parent sets when creating it (30 unless they choose otherwise). Both parents can see every code for the space in Settings, and either parent can revoke one at any time, which ends access right away. Because a code opens the space's messages, expenses and payments, give it only to someone you trust with them.
  • Calendar apps you subscribe: if you add the shared calendar to Apple, Google, Outlook or another calendar app, that calendar service fetches your parenting schedule, exchanges, holidays, children's birthdays and calendar events (with any address or note saved on them) from a private link. Anyone who has the link can see that schedule. You can reset the link in the app at any time, which turns the old one off.
  • Our processors: the service providers listed above, only to run the Service.
  • Google Ads: to measure which ads lead to sign-ups and purchases, we share an ad click identifier and the time an account was created, and, when you buy a plan on the website, the fact of the purchase, its amount and currency and a one-way code for the order. We never share your name, email or anything you enter in the app. The Google tag on our public website pages also collects some information on its own (see Local storage & cookies). You can opt out at any time (see California privacy rights).
  • When the law requires it, or to protect rights and safety.

Your personal information is never sold for money, and nothing you enter in the app is used for advertising.

Data security

Data is transmitted over encrypted connections (HTTPS), accounts are protected by passwords, and database access is restricted by row-level security so users can only reach their own (or their shared space's) data. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

Your choices and rights

  • Access & correction: you can view your data in the app and edit most of it directly. Messages and private journal entries are the exception: they cannot be edited or deleted one by one in the app, and deleting the account that wrote them removes them (see Deletion below). For account details you cannot update in the app, email us and we will help. If there is something you cannot remove yourself, email us from the address on the account; content may be removed when the law requires it or at a verified account holder's request.
  • Deletion: you can delete your account yourself at any time: open Settings → Account and choose Delete my account, on the website, in the iPhone app or in the Android app. Full instructions are on our Delete your account page. It is permanent: your account, your private journal, your Tax Center records, the messages you sent and your membership of every shared space are removed from the live Service right away; if you are the last person in a shared space, the space and everything in it go too, including its receipt photos and files. If your co-parent is still in a shared space, the space and its shared records stay with them, including the expenses and their receipts. Deleting your account also removes your home address for mileage. A parenting plan copy is removed when its shared space is deleted (when you are the space's last member); otherwise it stays with the space, where either parent can remove it. On the website, and in the iPhone and Android apps from version 1.0.9, deleting your account also removes the files you attached to your messages; earlier app versions leave those files in private file storage (see Data retention). Backup copies are removed within 90 days (see Data retention). You can also email us (see below). Depending on where you live (for example, under GDPR or California's CCPA/CPRA), you may have additional rights to access, correct, delete, or port your data, and to object to certain processing. California residents: see California privacy rights below.
  • Opt out of sharing: use our Do Not Sell or Share My Personal Information page, or turn on Global Privacy Control in your browser. Either one stops us from reporting your ad click to Google, and makes the Google tag on our website, including the purchase report after a website purchase, run with the limits described under Your right to opt out.
  • Cancellation: you can cancel your subscription at any time; see the Terms of Service.

Data retention

We keep your information while your account is active and as needed to provide the Service. When you delete your account, or delete an item in the app, it is removed from the live Service right away, with these exceptions:

  • Billing records: limited billing records we must keep to meet legal obligations. These are held by our payment providers.
  • Receipt photo files in older app versions: on the website, and in the iPhone and Android apps from version 1.0.9, deleting an expense, or removing or replacing its photo, also deletes the photo file once the change is saved to the shared space (with mutual approval on, once the change is approved). In earlier app versions it does not: the receipt photo is taken out of the app, but the photo file stays in the shared space's private file storage until the space is deleted.
  • PDF receipt files in older app versions: on the website, and in the iPhone and Android apps from version 1.0.12, a receipt added as a PDF keeps the original PDF file beside the picture of its first page, in the same private file storage, and deleting the expense, or removing or replacing its receipt, deletes both files once the change is saved to the shared space (with mutual approval on, once the change is approved). If that is done in an earlier app version, the PDF file stays in the shared space's private file storage until the space is deleted.
  • Files attached to messages in older app versions: on the website, and in the iPhone and Android apps from version 1.0.9, deleting your account also removes the files you attached to your messages, in every shared space, and every file in a space that is deleted along with your account (if some of those files cannot be removed at that moment, the app tells you, and we remove them when you email us). In earlier app versions it does not: your messages are removed and their attachments are no longer shown in the app, but the attached files stay in private file storage until you ask us to delete them.
  • A removed child's details in older app versions: on the website, and in the iPhone and Android apps from version 1.0.8, removing a child on the Children card in Settings also clears that child's info card, birthday and Kid Kit list. In earlier app versions it does not, and those details stay in the shared space until a parent clears them (our Delete your data page explains how).
  • Parenting plan files in older app versions: on the website, and in the iPhone and Android apps from version 1.0.9, when a shared space is deleted along with its last member's account, its parenting plan file is deleted too. If that account is deleted from an earlier app version, the plan's text is deleted with the space, but the plan file stays in private file storage until you ask us to delete it.
  • Recent updates lines: when you delete an expense, a payment or a calendar event, the short lines already saved about it under Recent updates stay, and deleting it saves a line too, which can hold the same few words (for an expense, its amount and description). The app has no way to delete a line. The lines saved with a shared space are deleted when that space is deleted, and deleting your account deletes the lines about changes you made. To ask us to remove one, email us from the address on the account.
  • Abuse-prevention records: described under Other records below.

Some records have their own timing:

  • Parenting plan copy: kept until either parent removes or replaces it, or the shared space is deleted.
  • Home address for mileage: kept until you clear it or delete your account.
  • Mileage trip records: the shared space keeps a short record of each trip (added by the driver or automatically, skipped or handed to the other parent, with the miles and rate, never an address) so no trip is offered twice. It stays while the space exists. A trip you add becomes an ordinary expense and deletes like one.
  • Removal records: if the parent who created a shared space removes someone who joined it (possible only in the first 72 hours), we keep a record of who was removed, by whom and when for 90 days, so the removed person can be told, in the app and by one email.
  • Invite counts: the record that an invite button was used (which button and when) is kept while the shared space exists and is deleted with it.
  • Email alert choice and time zone: kept with each shared space's settings while that space exists, and the website, and app versions that offer the three choices, update a space's time zone when you open that space on a device set to a different one. If you delete your account while your co-parent keeps the space, they stay in its settings. The same goes for your Alert types switches.

Deleting your account also removes a checklist sign-up made with the same email address. To repair sync errors without losing either parent's work, the Service keeps the last 50 saved versions of each shared space's records; an item you delete drops out of that history once 50 newer versions have been saved, and the whole history is deleted along with the space.

Backups. So that records can be recovered after a failure, copies of the Service's data are kept for a limited time. Our database provider keeps daily backups for 7 days. Each week we also make an off-site copy of the database, the account list, and the receipts and documents you upload; it is kept in private cloud storage, with a second copy of the database and account list on a computer we control, and only the 8 most recent weekly copies are kept. Something you delete can remain in these copies until they are replaced. Backup copies are removed within 90 days, and we use them only to recover from data loss. Anything still in the live Service, such as the files described above, is copied again each week, so the 90 days run from when it leaves the live Service.

Other records. A checklist email address is kept until you ask us to delete it. A safety report you send us through the app is kept so we can handle it. A report on an AI answer includes the question you asked and the answer, up to 900 characters of each. If you mute someone in the iPhone or Android app, a record of who you muted is saved with the shared space, and unmuting removes it; the other person is not told. To enforce hourly and daily limits, we record the IP address and time of each website chat message and checklist request (not linked to an account), and the account ID and time of each use of the in-app AI features and of each map lookup for mileage. These abuse-prevention records hold nothing else and are used for nothing else. They are not currently deleted on a schedule, and deleting your account does not remove the ones that carry your account ID; you can ask us to delete them at any time. A Google ad click identifier is kept in a first-party cookie for up to 90 days, and with your account for up to 90 days after the click; it is deleted sooner if you opt out.

Local storage & cookies

The app uses your browser's local storage to save your data and preferences on your device, and uses essential cookies/tokens for sign-in. We do not use third-party advertising or tracking cookies inside the app itself, and we never use anything you enter there for advertising. Our public website pages (including the home page, blog, comparison, help, checklist, For Attorneys, Terms of Service and thank-you pages) do load Google Ads conversion tracking so we can tell which ads bring people to the site and which lead to sign-ups and to plans bought on the website. That tag is not present on the signed-in app, on this page, or in the iOS or Android apps. When you arrive from a Google ad, our site also sets a first-party cookie that remembers that ad click for up to 90 days, so a sign-up can be credited to it, unless your browser sends Global Privacy Control or you have opted out. When the Google tag loads, Google may collect information about your activity on those pages, over time and across other websites, under Google's own privacy policy. Our website also keeps its own count of page views on its home page, blog, comparison, help, checklist, For Attorneys and Terms of Service pages: which page was opened, on what day, and the kind of place the visit came from (an ad, a search engine, a social site, another website, another page of ours, or none). A tap on a link there that opens the create-account screen is counted the same way. The count sets no cookie, stores nothing in your browser, and keeps no IP address or anything else that identifies you or your device, and it leaves out any browser that sends Global Privacy Control or has opted out.

Browser privacy signals. We treat a Global Privacy Control signal as a request to opt out of selling and sharing, as described in California privacy rights. Browsers' older "Do Not Track" setting has no agreed standard, so our website does not respond to it; use Global Privacy Control or our opt-out page instead.

California privacy rights

This section is for California residents and adds to the rest of this policy. It is also our notice at collection: what we collect, why, whether it is sold or shared, and how long we keep it.

What we collect, why, and how long we keep it

  • Identifiers: your email address, your account ID, a postal address (your home address for mileage, if you enter one) and, if you turn on notifications, a device push token or browser push address. If you ask for our checklist, the email address you give. If you use the website chat or the checklist form, your IP address. If we send you a product update email, a record of which one, and the private code in its unsubscribe link. If you arrive from a Google ad, also Google's click identifier for that ad (gclid, gbraid or wbraid). Why: to run your account, send notifications and emails, stop abuse and keep the Service secure; the click identifier only to measure which ads lead to sign-ups. Sold or shared: only the Google click identifier, and identifiers the Google tag collects on our public website pages, as described below. Kept: while your account exists; your home address for mileage until you clear it or delete your account; a checklist email address until you ask us to delete it; abuse-prevention records (an IP address or account ID, with a time) until you ask us to delete them, since they are not currently deleted on a schedule or with your account (see Data retention); the click identifier for up to 90 days after the click, or until you opt out.
  • Customer records information (California Civil Code 1798.80(e)): the name, and the optional phone number if you gave one, from sign-up, your billing email and subscription status from Stripe, Apple or Google Play, and any medical or insurance details a parent saves for a child (see Sensitive personal information). Why: to run your account and subscription, and to provide the Service. Sold or shared: no. Kept: while your account exists, children's details while the shared space exists, and billing records for as long as the law requires.
  • Commercial information: your trial, plan and subscription history, and, for a plan bought on the website, the amount and currency paid. Why: billing and access, and, for a website purchase, to measure which ads lead to purchases. Sold or shared: only the fact of a website purchase, its amount and currency, and a one-way code for the order, with Google Ads (see Selling and sharing below). Kept: while your account exists, and billing records for as long as the law requires.
  • Characteristics of protected classifications: marital and parental status that may be apparent from the co-parenting records you keep, and children's ages if you save their birthdays. Why: only because the Service stores the records you enter. Sold or shared: no. Kept: while your account exists.
  • Internet or other electronic network activity information: basic request data your browser sends, and the fact that you arrived from a Google ad. Why: to operate and secure the Service, and to measure which ads lead to sign-ups and purchases. Sold or shared: with Google, the ad click and the time your account was created, and what the Google tag collects on our public website pages (see Local storage & cookies). Kept: request data under our hosting providers' log retention; the ad click as described above.
  • Content you enter: calendars, expenses (including mileage trips), payments, messages, journal entries, receipts, children's details, a parenting plan put on file and other records, and your settings, including your Email alerts choice, the time zone recorded for End of day emails, and whether and when you unsubscribed from product update emails. Why: to provide the Service. Sold or shared: never. Kept: while your account exists (see Deletion above), shared records while the shared space exists, and backup copies for up to 90 days (see Data retention).
  • Sensitive personal information: your account log-in; the contents of the messages you exchange with your co-parent; and health information about your children that a parent chooses to save (allergies, medications and dosages, doctor and dentist details, and insurance carrier and member ID). A parenting plan you put on file can also include custody and financial terms. We use it only to provide the Service and keep it secure, which California law permits, so there is no separate right to limit it. Sold or shared: never. Kept: while your account exists; children's details while the shared space exists; backup copies for up to 90 days.

We do not collect precise geolocation. Mileage uses addresses you type, never your device's location, and the time zone recorded for End of day emails is your device's time zone setting, not its location. Sources: you, your device and browser, your co-parent (for shared records they add, including children's details and a parenting plan they put on file), our payment providers (Stripe, Apple and Google Play), and the Google ad you clicked.

Selling and sharing

We never sell personal information for money. The personal information we may sell or share, as California law defines those words, is limited to our Google Ads measurement: a Google ad click identifier (Identifiers) and the fact that the click led to an account, and when (Internet or other electronic network activity information); when you buy a plan on the website, the fact of the purchase, its amount and currency, and a one-way code for the order (Commercial information); and what the Google tag itself collects when it loads on our public website pages, such as the pages you visit and identifiers like your IP address (Internet or other electronic network activity information, and Identifiers). It never includes your name, your email or anything you enter in the app. It goes to one category of third party, advertising networks (Google Ads), so we can measure which ads lead to sign-ups and purchases and run our ads better. The Service is for adults, and we have no actual knowledge of selling or sharing the personal information of anyone under 16.

Disclosures to service providers

To run the Service we disclose identifiers, customer records information, commercial information, internet activity information, content you enter and sensitive personal information to the providers listed in "How your data is stored and who processes it" above, for hosting, storage, backups, sign-in, payments, email, notifications, maps (driving distance for mileage and finding a place's address, through Google Maps Platform or TomTom) and the features they power. At a parent's direction, a space's messages, expenses and payments, with the parents' and children's names, are also disclosed to someone that parent gives a read-only access code, and the calendar is disclosed to calendar apps a parent subscribes (see Sharing your information).

Your rights

  • Know and access: ask what personal information we have collected about you, where it came from, why we collected it, who we disclosed it to, and for a copy of it.
  • Delete: ask us to delete your personal information, or delete your account yourself (see Deletion above).
  • Correct: ask us to correct personal information that is inaccurate.
  • Opt out of selling and sharing: at any time, as described next.
  • No retaliation: we will not deny you the Service, charge you a different price, or give you a lesser service for using any of these rights.

Your right to opt out of selling and sharing

You can tell us not to sell or share your personal information at any time. You do not need an account, and we will not ask for anything beyond the request itself. Any of these works:

Opting out stops that browser from remembering Google ad clicks, sets the Google tag on our website to deny advertising storage and data sharing and to restricted data processing, and deletes any ad click saved with your account so it is never reported to Google. Opting out on the page or with the signal also stops our website from counting that browser's page views. With those settings on, the page you return to after a website purchase still reports the purchase to Google, but without advertising cookies and with Google's restricted data processing on. The page and the signal take effect right away; an emailed request is completed within 15 business days. An opt-out stays in place until you choose otherwise, and we will not ask you to reverse it for at least 12 months.

Global Privacy Control

We process a Global Privacy Control (GPC) signal as a valid request to opt out of selling and sharing. It applies to the browser that sends it, including any Google ad click remembered in that browser. Our website does not count that browser's page views. If the signal is on when you create an account, no ad click is saved with it, and when you sign in with the signal on, your account is marked as opted out. Once your account is opted out, a later visit without the signal does not opt you back in. Our opt-out page shows whether your browser's signal has been honored. To send the signal, use a browser or browser extension that supports it; globalprivacycontrol.org lists them.

How to make a request

Email support@twoporchlights.com from the email address on your account and tell us which right you are using, or use the buttons on our privacy choices page. To protect your records, we verify a request to know, correct or delete by matching it to the email address on the account, and may ask you to confirm from that address. Opt-out requests need no verification. Someone you authorize can make a request for you with your signed permission; we may ask you to confirm your identity with us directly. We respond within 45 days and will tell you if we need up to 45 more. Information you give us to make a request is used only to handle it.

Children's privacy

The Service is for adults. We do not knowingly collect personal information directly from children under 13. Details about children are entered only by a parent, are visible to both parents in the shared space, and are described under Children's details. If you believe a child has created an account, contact us and we will address it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated through the Service or by email where appropriate.

Contact us

Questions about this policy or your data? Email support@twoporchlights.com.

Two Porch Lights helps co-parents communicate and keep organized, time-stamped records. Messages sent in Two Porch Lights are time-stamped by our server when they are saved (messages imported from TalkingParents keep the original date from that service's export file and are labeled as imported), and neither parent can edit, unsend or delete a single message; if a parent deletes their account, the messages they sent are removed from the shared thread, and when the last member of a shared space deletes their account, the whole space is deleted. You can download your message log as a PDF with the signed-in account's name, the download date and time, and page numbers on every page. We are not a law firm, and nothing here is legal or financial advice. Whether any record is accepted or given weight in a legal proceeding is up to the court. Follow your attorney's guidance and confirm details against your own court order.