Privacy Policy

Information we collect

• Account data: name, email, phone number, and authentication credentials.
• Evidence content you choose to upload (photos, video, audio, documents) and associated metadata (timestamps, device, hash).
• Recipient contact information you enter when creating a secure share link (phone number and email of the named recipient).
• Diagnostic and security logs (IP address, device identifiers, access events).
• Kid Calendar entries you choose to record (custody schedule type, verbal-agreement percentages, attempted-pickup log notes).
• Product usage signals, never content: the calendar date the app was opened (date only, nothing about what you did, which mode you used, or what you viewed); whether the upgrade screen was shown and which plan you selected; an optional one-tap reason if you cancel; and, for new accounts, the page, campaign, or on-screen statistic that brought you to sign up.

How we use information

• To operate the app and deliver the features you request.
• To send transactional SMS and email you have opted into (verification codes, share-link access codes, security alerts).
• To send promotional SMS and email only to users who give a separate, explicit marketing opt-in, never on the basis of the transactional opt-in alone. You can withdraw marketing consent at any time by replying STOP, without affecting transactional security messages. We do not run in-app advertising or show third-party ads.
• To verify recipient identity using both phone and email before sealed materials decrypt.
• To meet legal, tax, and regulatory obligations.

AI parsing is opt-in (per-capture and per-document)

CaseGuardian does not send your captures, documents, or Kid Calendar entries to any AI service unless you explicitly turn on the "Parse with AI" toggle for that specific item. The toggle is off by default on every capture and every document. You can change your mind at any time before sealing.

When the toggle is on, CaseGuardian first runs an on-device personally identifying information (PII) pass that redacts your name, phone number, email, mailing address, payment information, and the names of people in your life from the document before any of it leaves the device. The redacted item is then sent over an encrypted connection to our AI sub-processor, Anthropic, for the limited purpose of extracting the structured data you asked for. Anthropic is contractually prohibited from training on or retaining your content. Outputs are stored in your account alongside the original, on-device, full-fidelity capture.

How we harden the AI pipeline. Every AI request is wrapped in safety instructions that tell the model to treat the contents of your image or PDF as data, not commands, so a document containing hidden text cannot hijack the parser. We enforce an 8 MB input ceiling, and every output field is clamped to a safe maximum length. If a parsing error is logged for diagnostics, document contents and extracted personal information are stripped from the log first.

AI output is informational only. It is not legal advice and may contain errors; always confirm with your attorney before relying on it.

Bitcoin anchoring of evidence

When you save a capture, CaseGuardian creates a 32-byte SHA-256 hash (cryptographic fingerprint) of the file on your device and forwards only that hash through CaseGuardian's servers to the public OpenTimestamps calendar network. Your file, filename, case, identity, and IP address are never sent to the calendar operators.

We retain the returned receipt in your account so you (or anyone you share a verification link with) can later prove the capture existed exactly as recorded, on the exact date and time recorded.

You are not buying, holding, or transacting in Bitcoin. The blockchain is used solely as a public, tamper-proof ledger of fingerprints. There is no wallet, no purchase, no transaction fee, and no cryptocurrency activity by you. CaseGuardian L.L.C. is not registered as a money service business.

Review before sealing

Every sealed package is shown to you in a full review screen before anything leaves your device. You can remove items, edit captions, or cancel the seal entirely. Nothing is uploaded or transmitted until you explicitly confirm the seal.

Biometric protection of destructive actions

Account deletion, profile deletion, and certain other destructive actions are gated behind your device's biometric authentication (Face ID, Touch ID, or Android biometric prompt) where available, with a passcode fallback. We do not see or store your biometric data.

Sharing and third-party processors

We do not sell, rent, or share personal information, phone numbers, opt-in data, or consent records with third parties for their marketing. We use vetted sub-processors under written agreements that prohibit secondary use:

• Sent.dm - approved and active SMS provider for verification, share-link delivery, and separately opted-in marketing SMS (phone number, message body, delivery status).
• Supabase - encrypted application database, authentication, and storage of evidence packages.
• Apple App Store / Google Play - in-app purchase and subscription billing.
• RevenueCat - subscription entitlement and receipt validation.
• Anthropic - AI parsing of items you specifically opt in for; the contract prohibits training on or retaining your content, and on-device PII redaction runs before any item is transmitted.
• OpenTimestamps calendar network - receives the cryptographic hash (fingerprint) of evidence items for Bitcoin anchoring; receives no file contents, filenames, identities, or IP addresses traceable to you.
• Stripe - payment processing for web subscriptions.

We may also disclose information when required by law, valid legal process, or to protect the rights, safety, or property of users or the public.

Apple App Store and Google Play disclosures

When you subscribe inside CaseGuardian, payment is processed by Apple (iOS) or Google (Android). We never see your card number, CVV, or full billing address. We receive only the receipt and entitlement status needed to grant or revoke access.

We do not use the iOS Advertising Identifier (IDFA), Google Advertising ID, fingerprinting, or any cross-app tracking SDKs. No App Tracking Transparency prompt is shown because we do not track you across apps.

You can manage or cancel subscriptions at any time in Settings → [your name] → Subscriptions on iOS, or Play Store → Profile → Payments and subscriptions on Android.

Data retention

• Account data: retained for the life of your account.
• Evidence content: retained until you delete it or close your account; then purged from active systems within 30 days, with encrypted backups overwritten within 90 days.
• SMS consent and opt-in / opt-out logs: retained for 4 years to meet carrier and regulatory requirements.
• Diagnostic / security logs: retained for up to 12 months.
• App-open dates: individual rows are deleted within 90 days and reduced to anonymous weekly totals that cannot be tied to any person.
• AI parsing requests: Anthropic does not retain content; we keep only the structured output you saved. Diagnostic logs for AI errors are stripped of document contents and personal information before they are written.
• Bitcoin anchors: cryptographic fingerprints exist in the public Bitcoin ledger forever, by design. No personal information is included on-chain. Account deletion does not remove past anchors.
• Records we are legally required to keep are retained for the period required by law.

Age requirement and children's privacy

CaseGuardian is intended for users 18 years of age or older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact support@case-guardian.com and we will delete it.

Regional rights (CCPA, GDPR, UK GDPR)

Depending on where you live, you may have rights including: access, correction, deletion, portability, restriction of processing, and objection to processing. California residents have rights under the CCPA / CPRA; we do not sell or share personal information as those terms are defined under the CCPA. To exercise any right, email support@case-guardian.com. We will not discriminate against you for exercising your rights.

For users in the EU / UK, we rely on: performance of a contract, legitimate interests (security, fraud prevention), consent (SMS, AI parsing, optional integrations), and legal obligation. International transfers are protected by Standard Contractual Clauses where applicable.

Security

CaseGuardian is built on client-controlled encryption with AES-256 encryption at rest, TLS 1.3 in transit, and database-level Row-Level Security on every record. We ship zero third-party trackers, zero ad SDKs, and zero IDFA collection. Your evidence never trains a model, never feeds an ad network, and never leaves your device until you personally review and approve it.

Your rights and account deletion

You can access, export, correct, or delete your data at any time from inside the app under Profile → Legal and Privacy, including a one-tap Delete Account option (gated by biometric authentication), or by emailing support@case-guardian.com from your registered address. We will action verified requests within 30 days. Deleting the app from your device does not delete your account.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced in-app or by email at least 7 days before they take effect, with an updated effective date at the top of this page.

Ownership and intellectual property

CaseGuardian and the CG Share Link feature are copyrighted works and the exclusive property of CaseGuardian L.L.C. All software, branding, designs, and content are protected by copyright and trademark laws. © CaseGuardian L.L.C. All rights reserved. See our Terms of Service for license details.

Contact

CaseGuardian L.L.C.
30 N. Gould St., Ste. R, Sheridan, WY 82801, USA
Phone: (307) 363-9369
Email: support@case-guardian.com