Your records and original files
Vindicated stores the notes, imported files, recordings, reviewed details, corrections, schedules and preferences you choose to keep. Saved workspace contents and originals are encrypted in app storage on your device. When you enable automatic backup, the app uploads encrypted copies to private Supabase storage in the United States. Encryption happens on your device. The backup service receives no readable records, original filenames or recovery key. If you choose optional cloud drafting, the note you select is sent as described below. Records are not automatically sent to the other parent or a lawyer.
Recording, recognition and drafts
Recording audio and opening file previews temporarily requires readable files inside app storage. A failed or interrupted voice save can retain one unfinished recording in app-private storage until you retry saving or explicitly discard it. On iOS, new recording files are protected while the device is locked and excluded from OS backup. Unfinished audio is not yet part of an encrypted Vindicated backup. Requested share/preview copies are removed afterward on a best-effort basis, including cleanup after interruptions.
On supported iPhones, Apple Vision reads images/PDFs, Apple Speech performs on-device transcription and eligible Apple Intelligence models can suggest factual wording. Vindicated requires on-device speech recognition and does not fall back to uploading audio. When optional cloud drafting is available, it asks you to review and send a selected note each time. If you choose it, the selected readable note travels through Supabase to Cloudflare Workers AI and the suggested wording returns to your device. Attachments, other records and your recovery key are not sent for drafting. Cloudflare says standard inference inputs and outputs are processed only as needed to provide the service and are not used to train its models, subject to legal and security exceptions; see Cloudflare’s data usage policy. We keep limited daily request counters linked to the account to prevent abuse. Individual counters are deleted with the account or by routine cleanup after 30 days, triggered by a later drafting request. Service providers may retain technical and security information under their policies. AI can change meaning, including who did what; compare any suggestion with your original before using it. Manual editing remains available.
Permissions you control
Microphone and speech-recognition permissions support voice capture/transcription. Camera and selected photo/file access support attachments and imports. Optional foreground location access can add coordinates, measurement time and accuracy to a local record for you to review. Notification permission supports local exchange reminders. Device authentication is used for optional app lock. Denying a permission leaves alternative manual workflows available. You can change permissions in iOS Settings.
Device keys, backup and recovery
New iPhone workspaces keep a random credential in OS Keychain with device-only accessibility. App lock uses device authentication as an application unlock gate; it does not claim that the encryption key is itself bound cryptographically to Face ID. An iPhone app-switcher cover hides the app’s content while inactive; it does not prevent a person taking screenshots while using the app. Manual backups are encrypted files you choose to save. Optional automatic backup uses Sign in with Apple or a verified email account to find your private saved copies. Email accounts use an eight-digit sign-in code that expires after ten minutes. Resend delivers these messages and processes the recipient email address, authentication message and delivery metadata; messages contain no readable records or recovery keys. Supabase processes your account identifier, verified email or Apple relay address when supplied, authentication sessions, encrypted archive parts, opaque workspace/backup identifiers, sizes, fingerprints, upload times and technical request information. Your recovery key stays separate and is needed to decrypt a copy on a replacement phone. We cannot reset that key or decrypt your records. Backup does not merge edits between devices. See Supabase’s privacy policy and Resend’s privacy policy.
Copies you choose to save in iCloud Drive, another cloud service, email or another app are handled by that destination under its terms. Your device’s own backup settings may also apply to app data. Keep recovery credentials separate and private.
Subscriptions and RevenueCat
When the subscription integration is available, Apple processes store purchases and RevenueCat uses an anonymous app-user identifier, transaction/subscription information and technical app/device/request information to verify access and provide subscription analytics. This includes information needed to deliver the service, such as network requests. Vindicated does not attach record contents, filenames, children’s details, searches, schedule information or location to RevenueCat requests. We do not receive full payment-card details. See RevenueCat’s privacy policy and Apple’s privacy policy.
Analytics, advertising and website hosting
The app does not currently mount PostHog analytics or advertising SDKs. Optional Supabase authentication and encrypted backup are described above. This website uses locally hosted assets and no application analytics, ad pixels, contact forms or record uploads. Its hosting provider processes request, device/network and access information to serve and secure the site. Hosting-platform access controls apply when the site is private. This website does not collect your parenting records.
Cloud account deletion
Delete your cloud account and backup copies in Settings → Account & backup. Local records remain on the iPhone. If you used Apple sign-in, the app attempts to revoke its Apple authorization. If that cannot be completed, it offers Apple’s instructions for removing the authorization yourself; this does not delay deletion of your cloud account or copies.
Support messages
If you email support, your email provider, Cloudflare Email Routing and our Gmail inbox process your address, message, attachments and delivery information. We use those details to respond and investigate the issue. Send only what is needed; do not email recovery keys, passwords or full family records. Support correspondence is kept as needed to resolve requests and handle applicable billing, security or legal obligations. You can contact us to request access, correction or deletion of information you sent, subject to those obligations and provider retention.
Retention and deletion
Your local records remain until you delete them or remove the app; OS storage and device failures can also affect availability. Use the app’s explicit local-removal flow to delete workspace data and unfinished recordings on that device. Deletion does not cancel subscriptions or remove backups/exports stored elsewhere. Delete those copies with the relevant provider. Apple and RevenueCat retain transaction and technical information under their policies and legal obligations. We cannot delete or decrypt local records remotely. Automatic backup keeps the newest five completed copies for each workspace after a verified new copy. Pausing backups keeps existing cloud copies. Deleting your cloud account in Account & backup removes active backup objects and the account and blocks new uploads during deletion. It leaves records on your iPhone intact. Provider security logs, caches and infrastructure backups may persist under provider retention; deletion is not a promise of immediate forensic erasure. Copies you exported elsewhere remain with their destinations.
Adults, security and changes
Vindicated is for adults, not accounts for children. Parents may record sensitive information about family members; only keep and share material you are entitled to use. Encryption and local fingerprints do not guarantee truth, independent timing, authorship or court acceptance. The app has not completed an independent security audit. No system can guarantee absolute security.
We will update this policy if processing changes. New analytics or other external processing requires an updated disclosure before use. For privacy questions or requests, email support@getvindicated.com.