Privacy Policy
Last updated: 2026-09-27
1Introduction
Parli ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services. Please read this Privacy Policy carefully. By using Parli, you consent to the data practices described in this policy.
2Information We Collect
We collect information that you provide directly to us and information that is automatically collected when you use our Service:
- Account Information: Name, email address, phone number, and authentication credentials
- Profile Information: Profile photo, preferences, and settings
- Family and Children Information: Information you provide about family members and children — such as names, ages, and custody arrangements — used to coordinate scheduling. It is visible only to authorized co-parents in your family group, and the AI assistant uses it only when you enable the relevant AI privacy settings
- Calendar and Scheduling Data: Events, appointments, custody schedules, and related information
- Communication Data: Messages, requests, and communications between co-parents within the Service
- Usage Data: Information about how you use the Service, including features accessed and time spent
- Device Information: Device type, operating system, unique device identifiers, and mobile network information
- Location Data: General location information (if you grant permission) for timezone and scheduling purposes
- AI Interaction Data: Conversations with our AI assistant (with your explicit consent), stored securely and used only to improve your experience
- Private Notes: When your family uses the "On my own" setting, the Messages tab holds notes you write for yourself — a dated record of what happened or what was agreed. In the app only you can see them, never another adult in your family and never a child. They are protected by access controls and encrypted at rest, but they are not end-to-end encrypted: our policy, not encryption, keeps Parli's operators from reading them, and we disclose them only where the law requires it (see Section 4). The AI assistant does not read them
3How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Service
- Enable communication and coordination between co-parents
- Send you notifications about important events, schedule changes, and service updates
- Personalize your experience and provide AI-powered scheduling assistance
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations and enforce our Terms of Service
- Conduct analytics and research to improve our Service
- Send you technical notices, updates, and support messages
4Information Sharing and Disclosure
We do NOT sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:
- With Authorized Co-Parents: Information you share (events, schedules, messages) is visible to authorized co-parents in your family group
- Service Providers: We may share information with trusted third-party service providers who assist us in operating our Service (e.g., cloud hosting, analytics, customer support), subject to strict confidentiality obligations
- Legal Requirements: We may disclose information if required by law, court order, or government regulation, or to protect the rights, property, or safety of Parli, our users, or others
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
- With Your Consent: We may share information with your explicit consent for specific purposes
5Children's Privacy (COPPA Compliance)
Parli is designed for co-parents, and some accounts in Parli belong to children. We take children's privacy seriously:
- A child's Parli account can only be created by a parent or legal guardian — set up directly by the parent, or joined by the child with an invite code the parent sends — and only after we record that parent's consent. We do not knowingly let a child under 13 create an account without it
- Once a child's account exists, it stores their first name, the email address they sign in with, and the family's shared schedule, including any calendar entries the child adds themselves. Some of this information therefore comes directly from the child using the app — it is the account itself that only a parent or guardian can create
- Parents can view, edit, and remove a child's account at any time, and a child's information is shared only with the authorized co-parents in the same family
- We never sell a child's information, never use it for advertising, and never share it outside the family
- A child may delete their own account from within the app. If you believe we collected a child's information without the parental consent described above, please contact us immediately
6Data Security
We implement industry-standard security measures to protect your information:
- Encryption: All data is encrypted in transit using TLS/SSL and at rest using AES-256 encryption
- Authentication: Secure authentication using industry-standard protocols (OAuth, PKCE)
- Access Controls: Strict access controls and authentication requirements for all data access
- Regular Security Audits: We conduct regular security assessments and updates
- Secure Storage: Data is stored on secure, compliant cloud infrastructure
7Data Retention
We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. Specifically:
- Account Data: Retained while your account is active and for a reasonable period after account deletion
- AI Conversation Data: Retained for up to 90 days (as specified in your consent preferences)
- Event and Schedule Data: Retained for as long as your family uses Parli. Events stay with the family when the adult who added them leaves (see Section 18)
- Legal Requirements: We may retain certain information as required by law or for legitimate business purposes
- Private Notes: Kept until you delete the note or your account, and included in "Export my data"
8Your Rights and Choices (GDPR/CCPA Compliance)
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request access to the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal and contractual obligations)
- Portability: Request a copy of your data in a portable format
- Opt-Out: Opt out of certain data processing activities, including AI assistant features
- Account Deletion: Delete your account and associated data through the app settings
- To exercise these rights, contact us at privacy@parli.family
9Service providers
We use the service providers below to run Parli. Each receives only the personal data needed for the task listed and processes it on our behalf and on our instructions. The AI providers do not use your data to train their models. If you sign in with Google or Apple, or pay through the App Store or Google Play, those companies also process your data under their own privacy policies. Section 16 explains where your data is stored and how transfers outside the EU are protected.
- Hosting and database: Supabase — stores your account and family data in the EU (Frankfurt, Germany)
- AI assistant, voice and summaries (only the features you use): OpenAI and Anthropic, United States
- Receipt scanning (only when you scan a receipt): Google Cloud Vision reads the text and OpenAI organises it, United States
- Sign-in (only the option you choose): Google or Apple, United States
- Google Calendar sync (only if you connect it): Google, United States
- Push notifications and app updates: Expo, United States, which passes notifications to Apple or Google for delivery
- Subscriptions: RevenueCat, United States, together with the App Store or Google Play
- Crash and error reports: Sentry, stored in the EU (Frankfurt, Germany)
- Usage analytics (only with your consent): PostHog, stored in the EU (Frankfurt, Germany)
- Address suggestions: Geoapify, Germany, which receives what you type into a location field
- Email: Resend, sending from its EU region — delivers the invitations you send and the support requests you send us
- WhatsApp assistant (only if you link WhatsApp): Meta's WhatsApp Business Platform, United States
10International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.
11California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Request information about the categories and specific pieces of personal information we collect
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal information)
- Non-Discrimination: We will not discriminate against you for exercising your privacy rights
12European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
- Lawful Basis: We process your data based on contract performance, consent, and legitimate interests
- Right to Object: Object to processing of your personal information for certain purposes
- Right to Restrict Processing: Request restriction of processing in certain circumstances
- Data Protection Officer: Contact our Data Protection Officer at dpo@parli.family
13Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our Service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
14Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Material changes will be communicated through the Service or via email. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.
15Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
- Email: privacy@parli.family
- Support: support@parli.family
- In-App: Use the support feature within the Parli app
16Where your data is stored and transfers outside the EU
Your account and family data are stored in the European Union, in Supabase's Frankfurt (Germany) region, and our crash reports and analytics are stored in the EU as well. Some providers in section 9 are located, or process data, outside the European Economic Area — mainly in the United States. For those transfers we rely on the European Commission's adequacy decision for the EU–U.S. Data Privacy Framework where the provider is certified under it, and otherwise on the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), with additional safeguards where needed. We operate Parli from Israel, which the European Commission recognises as ensuring an adequate level of data protection.
- Storage: EU (Frankfurt, Germany); encrypted in transit (TLS) and at rest (AES-256), with app-level encryption on sensitive fields (see the next section)
- Transfers outside the EU go only to the providers marked United States in section 9, and only for the tasks listed there
- United Kingdom and Switzerland: the UK Extension and the Swiss–U.S. Data Privacy Framework, or the Standard Contractual Clauses with the UK Addendum or the Swiss amendments
- Users in Israel: transfers abroad are made under the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001
- For a copy of these safeguards, or any question about where your data is stored, write to privacy@parli.family
17How we protect your messages
We are not a true end-to-end encrypted messenger like Signal or WhatsApp. Your messages are encrypted at rest with a key managed by our platform. We CAN access encrypted messages for specific, narrow operational reasons; every operator access is logged immutably so we can show you who accessed what and when.
- Encryption: messages are stored encrypted in our database with a server-managed key
- Who can read: you, the other parent on the thread, and our platform (under the conditions below)
- Why we sometimes read: court orders, fraud or abuse investigations, AI features you have explicitly opted into (see Section 4)
- Audit trail: every operator access is recorded in an append-only log we cannot tamper with
- Your alternative: if you need true end-to-end encryption, use a dedicated messenger for that conversation and link to Parli for the schedule
18When your family changes
Some records belong to the whole family rather than to one person, so they stay when the family changes. This is what we keep, who can see it and for how long:
- When an adult leaves: If an adult deletes their account or moves to another family, the family keeps its shared history. The events they added stay on the family calendar, marked as added by them. Shared expenses, payments and receipts are kept and archived, with a closing statement of the balance on the day they left. The messages they sent stay in the conversation. The adults who stay can see a record of the departure: the date, whether the person deleted their account or moved to another family, and the name, family role and form of address they had at the time. These records are kept for as long as the family uses Parli. If the person deleted their account, the rest of their account data is erased as described in this policy
- When a family closes: When the last adult deletes their account or moves to another family, the family's data is deleted, including the children's profiles; the records described in the next two points are kept. A child who had their own sign-in can still sign in for 30 days, only to see a short notice that the family's space in Parli has closed — it gives no reason and names no one. After 30 days the child's sign-in is erased
- Change records: Each change to how the family uses Parli ("Two homes", "One home" or "On my own") is recorded with the setting before and after, when it changed, who changed it and which adults were in the family at the time. Changes to custody (the schedule, swaps and holidays), to who is taking care of an event or task, and to what the children's phones show are recorded too: what changed, when and who changed it. In these records people appear as internal identifiers and roles, not by name. They are kept even after the family is deleted, so that every change can be traced. Changing the family's setting deletes nothing: in "One home", for example, the custody schedule and its history are kept
- Access after a household plan ends: If a household plan stops covering an adult — because the family no longer lives as one home, or because the adult who paid for it left — Parli may keep that adult's access for a limited time at no charge. We record each such period: which account it covered, why it began, which account's plan had covered that adult before, and when it began and ended. These records are kept for audit, even after the accounts involved are deleted