Privacy Policy

1. Data controller

[Legal entity name to be completed], [address], Switzerland — contact: privacy@coparent.ch.

2. Data collected

• Account: email, first name, password (bcrypt hash).
• Profile: phone (optional for SMS), notification preferences.
• Family: first name of the child(ren), school canton.
• Usage: calendar events, documents, expenses, IP address, technical logs.
• Receipts: files you upload (invoices, tickets, receipts), including those analysed by our Swiss AI service (see section 6).
• Support: your support conversations (messages and attachments) and their metadata (reference, category, status).
• Payment: managed by Stripe — no banking data is stored by us.
• Advertising measurement (public website only, with your consent): Google Ads cookies, pages viewed, IP address and device data — see the Cookie Policy (section 11).

3. Purposes

Provision of the Service, automatic analysis of receipts (semi-automatic entry of expenses), notifications, billing, security (audit log, anti-fraud), anonymised statistics, assistance and support (handling your requests), measuring the effectiveness of our Google Ads campaigns (with your consent).

4. Legal bases

Performance of the contract (Terms of Use), legitimate interest (security), consent (non-essential cookies, advertising measurement, SMS), legal obligation (accounting 10 years — CO art. 962).

5. Subprocessors

Detailed list and guarantees: /legal/sous-traitants.

6. Automatic analysis of receipts (AI)

When you choose the semi-automatic entry of an expense, the receipt you upload (image or PDF) is analysed by an artificial intelligence in order to automatically extract the amount, the date, the child concerned, the category and a label. To enable matching, the first names of the children and the category names of your household are transmitted with the document.

• Provider: Infomaniak AI Tools (Infomaniak Network SA), hosted in Switzerland.
• Open-source models run on Infomaniak's Swiss infrastructure — no use of a US AI provider (OpenAI, Google, Anthropic…).
• Your documents are not used to train models and are not retained by the provider beyond the processing of the request.
• This processing only takes place if you enable it: manual entry remains available and sends no data to the AI.
• The result is verifiable and editable by you before saving — there is no fully automated decision within the meaning of art. 22 GDPR.

7. Transfers outside Switzerland

Stripe (Ireland / USA): Standard Contractual Clauses + Data Privacy Framework. Google Ireland Ltd. / Google LLC (Ireland / USA): Google Ads measurement cookies on the public website, only with your consent — Standard Contractual Clauses + Data Privacy Framework. AI analysis of receipts stays entirely in Switzerland. No other transfer outside the EU/CH for business data.

8. Retention period

• Active account: duration of the subscription.
• After cancellation: 30 days then deletion / anonymisation.
• Billing data: 10 years.
• Support conversations: 24 months after the request is closed.
• Security logs: 12 months.

9. Your rights

Access, rectification, erasure, restriction, portability (ZIP export via /account/donnees), objection, withdrawal of consent, complaint to the FDPIC.

10. Security

TLS 1.3, bcrypt hash cost 12, httpOnly + Secure + SameSite=Lax sessions, daily encrypted backup, audit log, restricted access.

11. Cookies

See the cookie policy.

12. Sharing with a supporting professional

When a professional practice (family mediation, law firm, CPA guardianship, social service) opens your household for you, a mandate links that practice to your household. The practice always sees the state of the follow-up (parents invited or active, trial, subscription); it accesses the content of your file only if you consent to it.

• What is shared: the identity of the practice and the state of the mandate, at all times. With your consent: schedule, change requests, reports, documents and expenses — never your messages.
• Who decides: consent is given when an invitation is accepted. The refusal of one parent alone closes the access, and the other parent's acceptance does not reopen it.
• Revocation: either parent may withdraw the access at any time, alone, from their account.
• Traceability: the creation of the household by the practice, each consent and each refusal are recorded in your audit log, which you can export.
• Legal basis: performance of the contract for the state of the mandate, your consent for access to the file.
• Retention: the mandate is deleted with your household; it never survives it.

13. Minors

The Service is prohibited to those under 16 years old. Children are not users; only their parents are.

14. Changes

Any substantial change is notified by email 30 days before it comes into effect.