Your case, your control.
Effective October 30, 2026 · Last updated November 6, 2026
This policy describes the account-enabled application. Sign-in, payments and account storage are available only after those services are activated.
Sign-in, verification and account administration
Google or Apple can verify your identity through Supabase Authentication. If email sign-in is enabled, Supabase sends the requested verification message through Resend. These providers process the account information needed for that sign-in. The app does not receive your Google or Apple password. Account access follows the verified account identifier, not an email address supplied in a form. The service keeps the verified account email, sign-in provider, account creation time and a recent-activity time for account administration and support. The restricted operator dashboard shows those account details and aggregate case, purchase and document counts; it does not display case answers, party details or document contents.
Case answers and account storage
Saving a case to your account sends its ordinary interview answers and progress to the application server. Cloudflare D1 stores the case record and private R2 storage holds the documents you save. Case-answer and document contents are encrypted using a server-held key. The operator can decrypt them to provide the service; this is not end-to-end encryption. Case labels, file metadata and payment records are separate metadata. To support resume and troubleshoot the product, the service also keeps limited progress metadata—the last interview step, completion percentage and missing-item count—and content-free operational events such as resume, document success or failure, checkout failure and support-link opening. These records do not include case answers, party details, filenames or document contents.
Confidential entries and document permission
Dedicated confidential form entries remain in the current device session and are excluded from ordinary case saving and JSON backups. A generated PDF or ZIP can contain those entries. Such a document is saved to the account only after you allow confidential document saving for that session. Ordinary notes are not confidential-entry fields; avoid placing identification numbers there. Signing out or leaving the case clears the confidential session permission.
Authentication storage on each device
The web app keeps its sign-in session in the current browser session storage. The native app uses the operating system’s secure storage for sign-in credentials and its PKCE verifier, with iCloud synchronization disabled. Ordinary optional device case storage and exported JSON, PDF, ZIP and text files are not application-encrypted. Protect your device and any copies you download or share.
Payment providers and case purchases
Stripe handles web checkout. Apple or Google handles purchases made inside the mobile app, and RevenueCat verifies store transactions using an account-specific identifier. Card details are entered with the payment provider, not into the case interview. The application retains transaction identifiers, status and case assignment so a verified purchase unlocks one divorce case and cannot be reused for another. A refund or dispute can remove the associated purchase access.
Synchronization, downloads and sharing
An opened account case saves ordinary changes while connected. A visible error or conflict means recent edits may not be saved; an account copy does not update while the device is disconnected. Generated documents are available on another signed-in device after successful account saving. A device download or system share dialog does not prove cloud saving, delivery, signature, service or court filing. Copies saved or shared to another application follow that application’s handling.
Account deletion and retained records
Use Account → Delete account to request deletion after a recent sign-in. The service removes saved case answers, progress and documents, then deletes the authentication account. Minimal purchase and account-security records remain for payment reconciliation and preventing reuse of deleted credentials. If deletion is interrupted, the account remains unavailable while the operation is retried. Downloaded or shared copies outside the service are not removed. Deleting an account does not itself request or issue a refund.
Sources, messages and service logs
Opening an official court source shares ordinary access information with that website; case answers are not added to its URL. Verification email is sent only when requested. The app does not send case answers to a translation service or an advertising service. Authentication, email delivery, payment and hosting providers may keep the service and security records described by their own policies. This build does not include advertising or a separate analytics SDK.
Retention, backups and deletion
Saved cases and documents remain until you remove them or delete the account, unless records must be kept longer for security, disputes, accounting or legal obligations. Encrypted D1 backups may retain deleted database records for up to 180 days. A one-way deletion tombstone remains so restored account data is blocked and deleted again after a backup restore. Live R2 documents are removed during deletion; copies you downloaded, shared or stored with another provider must be removed separately.
Service providers and analytics
Cloudflare hosts the application, D1 database, private R2 files and ordinary security/access logs. If Cloudflare Web Analytics is enabled, it receives limited page, device and network measurements used to understand site performance; the application does not intentionally send case answers, document contents, Social Security numbers or payment-card details to analytics. Supabase provides authentication, Resend may deliver requested email, Stripe handles web payments, and Apple, Google and RevenueCat are used only for the mobile sign-in or purchase features that are enabled. For product improvements, we record a coarse device category (desktop, mobile, tablet or unknown) with content-free operational events. We do not save raw browser identification in those event records.
Privacy · Support: support@divorcefilingpath.com