Privacy Policy

Last updated: October 16, 2026

1. Overview

BridgeBack is a supportive platform for separated parents to document memories, organize personal growth, and maintain records for future reunions with their children. This Privacy Policy explains how we collect, use, retain, and protect your information.

2. Information We Collect

  • Account information: Your name, email address, and encrypted password.
  • Content you create: Letters, journal entries, co-parent records, custody events, expense records, uploaded documents, photos, and audio recordings.
  • Child data: Information about your children (names, birthdays, photos), mood check-ins, and messages exchanged through the child connection portal.
  • Safety data: Safety plans, emergency contacts, safety check-ins, and incident logs.
  • Usage data: How you interact with the app, such as features used and timestamps.

3. How We Use Your Information

  • To provide and maintain the BridgeBack platform.
  • To send milestone, custody, and compliance reminders you have requested.
  • To process premium subscription payments via Stripe.
  • To generate court-ready records exports when you request them.
  • To improve our features and user experience.

4. Data Privacy & Security

Your data is private and secure. We use Row-Level Security (RLS) to ensure that only you can access your own records — letters, journal entries, co-parent threads, custody events, expenses, documents, incident logs, and safety plans. No other user, including administrators, can read your personal content.

Your data is encrypted in transit and at rest. Payment information is processed by Stripe and is never stored on our servers.

5. Data Retention by Category

We retain your data for different periods depending on the type of record and applicable legal obligations. You can delete individual records at any time within the app. When you delete a record, it is permanently removed from the active database. Residual copies in encrypted backups may persist for up to 30 days before being overwritten.

Data categoryRetention period
Letters & vault contentUntil you delete the record or close your account
Journal entriesUntil you delete the record or close your account
Co-parent communication records7 years from creation (evidence preservation)
Custody events & compliance logs7 years from creation (court documentation)
Incident logs & alienation records7 years from creation (legal evidence)
Visitation interference records7 years from creation (legal evidence)
Expense records7 years from creation (tax & accounting obligations)
Documents on fileUntil you delete the record or close your account
Safety plans & emergency contactsUntil you delete the record or close your account
Healing progress dataUntil you close your account
Character witness recordsUntil you delete the record or close your account
Parenting time records7 years from creation (compliance documentation)
Reunification roadmap progressUntil you close your account

6. Incarcerated Parent Features

BridgeBack offers a timed letter vault designed for parents who are incarcerated or otherwise separated from their children by circumstance. Letters scheduled for future delivery are retained until their unlock date plus one year, or until you delete them or close your account — whichever comes first. If your account is closed before a scheduled letter reaches its delivery date, the letter will be deleted and will not be delivered.

We understand that incarcerated parents may have limited ability to access the app to manage their data. If you are unable to access your account and wish to delete your data, you may submit a request through the app's Settings page or through a trusted contact authorized to act on your behalf.

7. Child Data & Parental Consent

BridgeBack is designed for parents and guardians. We do not knowingly collect information directly from children under 18. All information about your children — including names, birthdays, photos, mood check-ins, and messages exchanged through the child connection portal — is stored privately under your account and is only accessible to you and the connected child user.

Parental consent: By creating a child connection and inviting your child to use the child portal, you consent to the collection and storage of your child's mood check-in data, feeling notes, and messages. You can revoke this consent at any time by deleting the child connection, which removes all associated child data from your account. If your child is under 13, you are responsible for obtaining any additional consent required by applicable law before enabling the child portal.

Child mood data: Mood check-ins and feeling notes submitted through the child portal are retained until you delete the child connection or close your account. This data is used only to help you understand your child's emotional well-being and is never shared with third parties.

8. Attorney Consultation Messages

Messages exchanged through BridgeBack's consultation feature may contain privileged or sensitive legal information. Consultation messages are retained for 90 days after a consultation is marked as completed or cancelled. After 90 days, messages are automatically and permanently deleted from the active database. The consultation record itself (topic, status, and scheduling information) is retained for 7 years for record-keeping purposes, but the message content is deleted after the 90-day period.

BridgeBack is a record-keeping tool and is not a law firm. Communications through the consultation feature do not create an attorney-client relationship. If you need to preserve consultation messages for legal proceedings, export them before the 90-day retention period expires.

9. Account Deletion

You can delete your account and all associated personal data at any time from the Settings page. When you initiate account deletion:

  • All your records across every section are permanently deleted from the active database.
  • Your Premium subscription is cancelled immediately.
  • Your login account record is retained for 30 days for security audit purposes, then permanently removed.
  • Residual encrypted backup copies may persist for up to 30 days before being overwritten.
  • Payment records required for financial compliance are retained for 7 years per accounting obligations, but are not linked to your personal content.

Account deletion is irreversible. We recommend downloading your data before deletion.

10. Analytics & Cookies

BridgeBack does not use third-party analytics, advertising trackers, or marketing cookies. We do not sell or share your data with third parties for advertising purposes. The app uses local storage and session storage to remember your preferences (such as language, theme, and safety settings) and to support safety features like Quick Exit and draft auto-save. No consent banner is required because no non-essential tracking is active.

11. Third-Party Services

  • Stripe: Payment processing for premium subscriptions. Stripe processes your payment information and is governed by its own privacy policy.
  • Google: Optional sign-in via Google OAuth. Google handles the authentication process and is governed by its own privacy policy.
  • Esri: Map tiles for the crisis resource map. Esri serves map images and is governed by its own privacy policy.

12. Quick Exit

BridgeBack includes a Quick Exit button that immediately saves your current drafts, signs you out, and redirects your browser to a neutral website. This feature is designed for users who may be in unsafe situations. Your browser history may still contain a record of your visit — consider using private or incognito mode if safety is a concern.

13. Your Rights

Depending on your jurisdiction (including GDPR and CCPA), you have the right to:

  • Access: Request a copy of your data.
  • Export: Download all your data at any time from Settings.
  • Delete: Delete your account and all associated data from Settings.
  • Rectify: Edit your records at any time within the app.
  • Object: Opt out of reminder emails from Settings.
  • Portability: Export your data in a structured format.

To exercise these rights, use the Settings page or contact support through the app.

14. Contact

For privacy questions or data requests, please contact us through the app's Settings page.