Handoff
Handoff privacy policy
Last updated 11 September 2026.
Handoff holds a co-parenting calendar, the expenses between two households, and a message log that can be exported for a court. This policy explains what is kept and, above all, who else can see it.
The other parent sees the shared record. Assume everything is on the record.
This is the part that matters most, so it is here rather than at the bottom. When you join an arrangement, the other party sees the custody days, the expenses and every message in the log. That is the point of the app.
Messages cannot be edited or deleted once sent, by you or by them. That is deliberate, because a log that either side could quietly revise would be worthless in the situation it exists for. Write every message as though it will be read aloud in a courtroom, because it may be.
What a court export contains
An export is the complete message log and expense record for the arrangement, with timestamps, in the order things happened. It is not filtered, and it is not your side only. Either party can produce one. We are not a party to your matter, we do not send anything to any court, and we take no position on how an export is used.
This is information about children
An arrangement names the children it concerns and records where they are on which days. We ask for as little as the app can work with: a name and, where a schedule needs it, a date of birth. There is no photograph, no school record and no location tracking of any kind. Children have no account here, we never contact them, and nothing about them is used for advertising in any form.
What is stored
- Your email address, and whether your subscription is active.
- The arrangement, the parties in it and the invites sent.
- The children it concerns, and the custody days recorded.
- Every message in the log, with the time it was sent.
- Every expense: what it was for, the amount, and how it splits.
What is not stored
No password, because there is not one. Signing in is by a code sent to your email address. No location, no phone number, no court file, no order document and no payment card details.
Who else is involved
Supabase hosts the database and sends the sign in codes. RevenueCat sits between the app and the app store and tracks whether your subscription is active, receiving the purchase events and an identifier for your account. Apple handles the payment itself; card details go to Apple and never to us. Nothing in your arrangement is sent to a language model, and none of it reaches any of the three. We do not sell any of it and we do not send it to advertisers.
Deleting it
Deleting your account removes your own profile. It does not erase the shared arrangement, because the other party's copy of a joint record is not yours to delete, and a message log that vanished when one side left would defeat its purpose. Your messages remain in the log they were sent to.
Contact
Handoff is published by Jeffrey L Carrier.