Account: your email and password (password stored hashed by our auth provider). Case records you enter: case details, journal entries, finances, dates, and documents or photos you upload — which may include sensitive information such as court filings, bank statements, and your children's names. Payment: handled by Stripe; we never see or store full card numbers. Cookies and local storage: first-party only, to keep you signed in, remember preferences, and understand whether Homefront is working — no third-party advertising cookies, pixels, or behavioral trackers run on the public site or inside the signed-in app. Diagnostics and usage: ordinary technical logs, first-party error reports if something crashes (the error message and page — never your case content), how you found us (e.g., a referral code), and, if you enable notifications, a push subscription identifier. Public pages: if you submit a form on our marketing pages (contact, partner, or referral interest), we collect the details you provide.
Only to provide Homefront to you: storing your records, generating the documents and summaries you request, sending service emails and notifications you enable, processing payments, and keeping the Service secure and working. Account-level basics — your plan, sign-in dates, and the U.S. state your case is in — also guide what we build next and how we support you. We do not sell your data, and we do not use your case content for advertising. When you use an AI feature, the relevant content is sent to our AI provider to produce your result; it is used to serve your request, is not used to train AI models, and is not used to build advertising profiles.
Your case is private to your account — other users can never see it. Limited access exists inside Homefront: if you are on the All-In plan, your assigned Homefront Expert sees the materials you share with them (and Expert conversations may be reviewed for quality and compliance); and a small number of administrators can access records only as needed to run the Service, respond to your support requests, or apply the safety and legal-process policies below. Nobody at Homefront browses member cases.
Supabase (database, file storage, authentication), Vercel (hosting), Stripe (payments), OpenAI and Anthropic (AI processing for features you invoke), and Resend (transactional email). Each receives only what its role requires. Your case records are isolated per account with row-level security; files are stored privately and served through short-lived signed links.
To keep the platform lawful and safe, uploads may be scanned automatically (for example, hash-matching against known illegal material). When federal law requires it — apparent child sexual abuse material — we report to the National Center for Missing & Exploited Children and preserve related records for law enforcement. If we believe in good faith that there is an emergency involving danger of death or serious physical injury to any person — including a child — we may disclose relevant information to law enforcement, child protective services, or emergency services without delay, and Homefront personnel may make reports where state law requires or permits. See the abuse protocol in our Terms of Service.
We make anyone who wants your data use the front door. Civil demands for your content get a "no": federal law (the Stored Communications Act, 18 U.S.C. § 2702) prohibits us from producing the contents of your account in response to a civil subpoena — including one from the opposing party in your case — and we assert that protection; they must seek your records from you, not from us. Out-of-state subpoenas must be properly domesticated under our home state's law before we will respond, and defective process receives an objection, not your data. Except in the safety situations above, disclosure happens only under valid legal process that actually binds us, and — unless legally prohibited — we make reasonable efforts to notify you first so you can object yourself. Because Homefront is not your attorney, attorney-client privilege does not attach to your records here, and the opposing party can seek them from you in discovery like any other records you keep. Full policy: Terms of Service, "Subpoenas and legal process."
Homefront is for adults. Information about your children exists in Homefront only because you enter it as part of your own case records, and it stays inside your account like everything else.
Anyone with access to your device or email can see what's on it. If you share a device with someone who may monitor you, consider a private device, a fresh email account, and clearing your browser history — and consider leaving Homefront notifications off, so previews never appear on your lock screen. The National DV Hotline (1-800-799-7233) can help you plan safely.
We keep your records while your account exists so your case history stays intact. You can download your documents and drafts from the app, and you can request a full export — or account and data deletion — any time via our contact form; we honor both within 30 days, except where the law requires longer retention (e.g., billing records) or where we must preserve records under our safety and legal-process policies. Depending on your state, you may have additional rights (access, correction, deletion, portability); contact us and we will honor them. Remember: deleting material relevant to pending or anticipated litigation can have serious consequences in your case (see the Terms) — what you delete is your decision and responsibility.
Material changes to this policy will be posted here with a new date. Contact us any time via homefront.legal/contact.