Coord Privacy Policy

Effective date: August 1, 2026

This Privacy Policy explains how Coord ("Coord," "we," "us," or "our") collects, uses, stores, shares, and protects information when you use the Coord application and related services (the "Service").

We've written this in plain language because we want you to actually understand what happens to your information. If anything here is unclear, contact us at help@mycoord.com.

The short version

• Coord helps your household stay organized by pulling schedule information out of emails, calendars, PDFs, and things you enter manually, and putting it into one place — for any household member, not just kids.
• We read email only from the specific senders and organizations you designate (a school, a sports team, a contractor, a travel provider). We do not read your whole inbox.
• We use AI (the Anthropic Claude API) to pull events and tasks out of that content, to generate activity summaries for Coord Movements, and to power Coord's assistant features. We do not use your data — including data from Gmail — to train AI models.
• If you use Coord Connect to message other members of your household, those messages are visible to the household members you send them to or mention, not to us for any purpose beyond operating the feature, and not outside your family account.
• We do not sell your data, and we do not share it with anyone outside your own family account.
• You can disconnect Gmail or Calendar, export your data, correct it, or delete your account and everything in it, at any time.

The rest of this policy gives you the detail behind each of those points.

1. Who this policy applies to

This policy applies to people who create and use a Coord account. Coord is intended for adults (18 or older) who coordinate information for their household. Children do not create or use Coord accounts.

Coord lets you add information about members of your household — including children — so the Service can organize their schedules, and lets you invite other adults to join your family's account. When you add information about another person, you confirm that you have the authority to do so on their behalf. See Section 13 (Children and family member information) for more.

2. Information we collect

We collect the following categories of information.

a. Account and identity information

When you sign in with Google Sign-In, we receive your name, email address, and Google account identifier. We use this to create and secure your account.

b. Household member information

Information you add about your household — including children, adults (such as parents or other account holders), caregivers, and pets — including names, birthdates, relationships, and any notes you choose to add. Coord may infer related details from what you provide (for example, estimating a school grade from a birthdate) to reduce the amount you have to type. Coord's household-management features are not limited to children — any adult member of your household can be added and assigned events, action items, and conversations.

c. Source information

Details about the organizations you designate as "sources" or "connections" — such as schools, sports teams, activity providers, contractors, healthcare providers, and travel companies — including organization names, contact information, and the email senders or domains you tell Coord to recognize.

d. Email content from designated sources

Coord connects to your Gmail account through Google's API. Coord accesses email content only from the senders and domains you designate as sources. Coord does not read, index, or store email from anyone else in your inbox. From designated-source emails, Coord processes the content to extract events, action items, schedule changes, and related details.

e. Calendar events, tasks, notes, and Movements

Events, tasks, and notes that you create manually, plus events and tasks that Coord extracts from your sources. If you connect a Google Calendar, Coord accesses the calendar list and events you authorize so it can show and reconcile them alongside other sources. Coord may also group related events, tasks, sources, and notes into a "Movement" (for example, a home renovation or a trip involving multiple sources) and generate a short activity summary describing recent updates, as described in Section 4.

f. AI assistant conversation history

When you use Coord's conversational assistant (Coord Chart), we store your questions and the assistant's responses so the feature works and keeps context across your session.

g. Messages between household members (Coord Connect)

If your account uses Coord Connect, we store the messages, @mentions, and file attachments that household members send to one another, along with which event, action item, source, Movement, or note (if any) a conversation relates to. These messages are visible to other members of your household with access to the relevant item, as described in Section 6. If a message is deleted, its content is permanently removed and is not retained.

h. File attachments you upload

Files you choose to upload, files sent in a Coord Connect message, or files that arrive from a designated source — such as photos and PDFs — and any information Coord extracts from them.

i. Technical and usage information

Standard technical data needed to run and secure the Service, such as device and browser information, IP address, log data, and basic usage events (for example, that a feature was used). We use this for security, troubleshooting, and keeping the Service reliable.

3. How we use your information

We use your information to:

• Provide the core Service — collecting, organizing, and displaying your household's schedule, tasks, and information in one place, for any household member.
• Extract events, tasks, and schedule information from your designated-source emails, calendars, and uploaded files using AI.
• Identify related events, tasks, sources, and notes and group them into Coord Movements, and generate plain-language activity summaries describing them.
• Generate personalized briefings and evening digests.
• Power the Coord Chart assistant so it can answer questions about your household's schedule.
• Power Coord Connect so household members can message one another about shared events, tasks, Movements, and plans.
• Authenticate you, secure your account, and prevent abuse.
• Communicate with you about the Service, including transactional messages (for example, account or security notices).
• Diagnose problems, maintain reliability, and improve how the Service works.

We rely on the information you provide and the sources you connect; we do not go looking for data beyond what you authorize.

4. How AI processing works

AI is central to how Coord works, so we want to be specific about it.

What gets sent to AI. To extract events and tasks, to generate Coord Movement activity summaries, and to answer your questions in Coord Chart, Coord sends relevant content — such as the text of designated-source emails, uploaded file content, your schedule data, and your assistant questions — to the Anthropic Claude API for processing.

Why. This processing exists only to deliver Coord's user-facing features: turning messy inputs into a clean schedule, identifying related activity and summarizing it in Coord Movements, generating briefings and digests, and answering your questions. The AI returns its results to Coord, and Coord stores those results in your account.

Anthropic acts as our processor. Anthropic processes this content on our behalf to return results to you. Under Anthropic's Commercial Terms of Service, content submitted through the API is not used to train Anthropic's models. Anthropic's handling of the data is further described in Anthropic's Privacy Policy.

We do not train AI models on your data. We do not use your data — including any data obtained from Google APIs — to develop, train, or improve generalized or foundational artificial intelligence or machine-learning models. AI is used only to operate features you can see and use within Coord.

AI can be wrong. AI extraction, Movement summaries, and assistant answers can contain mistakes — a missed event, a wrong time, a misread date, or an inaccurate summary of recent activity. Coord is an aid, not an authoritative system of record. Always confirm important details (especially anything time-sensitive) against the original source. This is covered further in our Terms of Service.

5. Google API Services and Limited Use

Coord uses Google APIs, including the Gmail API and Google Calendar API, to provide its features. Coord currently requests the following Google scopes:

• Gmail (read-only, restricted scope) — to read email from the senders and domains you designate.
• Calendar events (read-only) — to show and reconcile events from a Google Calendar you connect.
• Calendar list (read-only) — to identify which of your Google Calendars exist, so events can be shown with the correct calendar name and color.

Coord does not request the ability to create, modify, or delete anything in your Gmail account or Google Calendar.

Email data accessed through the Gmail API is treated by Google as "restricted scope" data, and we hold ourselves to Google's specific requirements for it.

Limited Use commitment. Coord's use and transfer of information received from Google APIs to any other application will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice, that means:

• We use Google user data only to provide and improve the user-facing features described in this policy — namely, reading email from the sources you designate and turning it into events, tasks, and schedule information you see inside Coord, and showing your connected Google Calendar alongside it.
• We do not sell or transfer Google user data to third parties such as advertising platforms, data brokers, or information resellers.
• We do not use Google user data for advertising of any kind, including personalized, retargeted, or interest-based advertising.
• We do not use Google user data to determine creditworthiness or for lending.
• We do not use Google user data to train, develop, or improve generalized or foundational AI/ML models. Google user data is used only to operate Coord's features for you. The AI processing described in Section 4 exists solely to deliver those user-facing features and does not feed model training.
• Humans do not read your Google user data, except in the narrow circumstances Google permits: (i) with your prior consent (for example, to troubleshoot an issue you've raised); (ii) where necessary for security purposes, such as investigating abuse; (iii) where required to comply with applicable law; or (iv) where the data has been aggregated and anonymized and is used only for internal operations.

You're in control of Google access. You can disconnect Coord's access to your Gmail or Calendar at any time, either from within Coord or directly from your Google Account at myaccount.google.com/permissions. Disconnecting stops further access; see Section 9 for how this interacts with data we've already stored.

6. Visibility within your family account

Coord accounts are built around a household, not a single person. When you or another adult creates a family account, additional household members can be invited to join it, and information within that account is generally visible to the other approved members of the same family account, consistent with their role:

• Conductor — the original account creator, with full access to manage the account, including household members, sources, and settings.
• Player — an approved household member with broad access to view and manage shared events, tasks, sources, and Coord Connect conversations.
• Audience — an approved household member (for example, a grandparent or caregiver) with read access to shared information, and the ability to participate in Coord Connect conversations.

Because Coord is designed for shared household coordination, events, tasks, sources, notes, Movements, and Coord Connect messages are generally visible to other approved members of the same family account, not kept private to the person who created them, unless a feature specifically says otherwise. If you invite someone to your family account, they will be able to see the shared information appropriate to their role once their invitation is accepted.

7. Who we share information with

We do not sell your personal information, and we do not share it with anyone outside your own family account for their own purposes. We share information only in these limited situations:

Service providers (subprocessors). We use a small set of vendors to run the Service. They process data only to provide services to us and are bound to protect it:

We do not use any advertising, analytics, or tracking vendor, and we do not use any payment processor at this time.

Legal and safety. We may disclose information if required by law, regulation, legal process, or enforceable governmental request, or where we believe disclosure is reasonably necessary to protect the rights, safety, or property of users, the public, or Coord.

Business transfers. If Coord is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will require the recipient to honor this policy, and where Google user data is involved, we will obtain your consent as required by Google's policies.

8. Where your data is stored and how we protect it

Your data is stored in the United States, in databases hosted by Supabase, and the Service runs on infrastructure hosted by Cloudflare.

We take reasonable and appropriate measures to protect your information against unauthorized access, use, alteration, loss, or disclosure. This includes encryption of data in transit and at rest, access controls, and authentication safeguards. No system is perfectly secure, but we work to protect your information and to limit who can access it.

9. How long we keep your data and how to delete it

We keep your information for as long as your account is active and as needed to provide the Service.

• Account deletion. You can delete your account at any time. When you do, we delete your account and the personal data associated with it from our active systems. Residual copies may persist briefly in encrypted backups before being overwritten on our normal backup cycle, and we may retain limited information where we are legally required to.
• Disconnecting Gmail or Calendar. Disconnecting stops Coord from accessing any further email or calendar data. Information Coord already extracted and stored in your account remains until you delete the relevant items or your account; you can remove it at any time.
• Coord Connect messages. If you delete a message you sent, its content is permanently removed and is not retained by Coord.
• Movement summaries. Activity summaries for a Movement are retained as part of that Movement and are deleted when you delete the Movement.
• Conversation history and extracted data are retained as part of your account and deleted when you delete those items or your account.

10. Your rights and choices

You can exercise the following at any time, from within Coord or by contacting us at help@mycoord.com:

• Access / portability — request a copy of your data.
• Correction — fix inaccurate information.
• Deletion — delete specific items or your entire account and its associated data.
• Disconnect Google access — revoke Coord's access to your Gmail or Calendar.

We will respond to requests within the timeframes required by applicable law.

If you are in the European Economic Area or the United Kingdom (GDPR)

You have the rights to access, correct, delete, restrict, and object to processing of your personal data, and to data portability. Where we rely on consent, you may withdraw it at any time.

The legal bases we rely on are:

• Performance of a contract — to provide the Service you've signed up for.
• Consent — for connecting Gmail or Calendar and processing designated-source email content; you can withdraw consent at any time.
• Legitimate interests — to secure the Service, prevent abuse, and keep it reliable, balanced against your rights.
• Legal obligation — where we must process data to comply with the law.

You also have the right to lodge a complaint with your local data protection authority. Because your data is stored in the United States, see Section 12 on international transfers.

If you are a California resident (CCPA/CPRA)

In the past 12 months, we have collected the categories of personal information described in Section 2, which map to the following statutory categories: identifiers (name, email, account ID); customer records (household member details you provide); internet or network activity (usage and log data); and the contents of communications from designated sources, and between household members via Coord Connect, that you authorize us to access.

• We collect this information for the business purposes described in Section 3.
• We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
• You have the right to know what we collect, to access and delete it, to correct it, and to not be discriminated against for exercising these rights.

To exercise these rights, contact us at help@mycoord.com.

11. Communications

We may send you transactional messages necessary to operate the Service, such as security alerts, account notices, invitations, and the briefings and digests you've enabled. Where required, you can control or turn off non-essential messages.

12. International data transfers

Coord is operated from, and stores data in, the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you understand that your information will be handled as described in this policy.

13. Children and family member information

Coord is intended for adults aged 18 and older. We do not knowingly allow children to create or use Coord accounts, and the Service is not directed to children as users.

Coord does allow you, as an adult account holder, to store information about members of your household, including children (for example, a child's name and birthdate), so the Service can organize their schedules. This information is provided by you, not collected from the child. By adding it, you confirm you are the child's parent or guardian, or otherwise have authority to provide it. If you would like us to remove information about a household member, you can delete it in the app or contact us.

14. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the effective date at the top and notify you through the Service or by email before the changes take effect. If a change affects how we access or use data obtained through Google APIs in a way not previously disclosed, we will prompt you and obtain your consent before making that change. Continued use of the Service after an update means you accept the revised policy.

15. How to contact us

For any privacy question or to exercise your rights:

Coord

Email: help@mycoord.com

© 2026 Coord