Privacy Policy

Effective July 28, 2026. Advocary is in early access, and this policy may be updated as the service grows.

What we collect

• Account information: your email address and password (the password is handled by our sign-in provider; we never see it in plain text).
• Information you enter: child profiles, goals, communication logs, tracker entries, meeting notes, deadlines, contacts, and anything else you type into the app.
• Documents you upload: IEPs, notices, evaluations, photos of paperwork, and other files you add to your records library.
• Your U.S. state, if you choose to set it, so the app can show state-specific information.
• Basic technical records kept by our service providers, such as sign-in timestamps and error logs.

We do not collect your location, contacts, or browsing history, and we do not use advertising or analytics trackers.

How we use it

Everything you store in Advocary is used for one purpose: providing the app's features to you. Your records populate your own library, timelines, and drafts. Nothing you enter is used for advertising, sold to anyone, or shared with schools or districts.

AI features

When you use an AI feature (for example, reading an uploaded document, reviewing a notice, or drafting a letter), the relevant text or image is sent to Anthropic, the company that provides the AI model, to generate the result. Under Anthropic's commercial API terms, this data is not used to train their models. AI features run only when you invoke them.

Where your data lives

Advocary runs on Google Firebase. Your data is stored on Google Cloud servers in the United States, encrypted in transit and at rest. Access rules restrict every record to the account that created it.

Getting your records in, and who sees them

There are two ways to get a document into Advocary, and neither of them hands it to a company that does not already have it.

• Uploading from your device. The file goes from your phone or computer straight into your Advocary account. Nobody sits in the middle.
• Importing from Google Drive. The file is already in your Google Drive, so Google already holds it. Advocary asks Google for the narrowest permission it offers: it receives only the files you tick in Google's own chooser, it never receives a list of what is in your Drive, and it has no access to anything you did not pick, then or later.

Both routes are equally private in the sense that matters most: no additional company handles your document. Importing from Drive is not more exposed than uploading by hand, and for many families it is less work, which is usually what decides whether records get kept at all.

Sending a package out to Drive. A package can go the other way, into a folder Advocary makes in your Google Drive. The permission is the same narrow one, which also covers files the app creates: Advocary can put the folder and its records there, and it can still see nothing else in your Drive. That folder is yours. It stays where it is, owned by you, whether or not you carry on using Advocary, and anyone you share it with is someone you chose.

If we ever add a way to email documents in, that would be different, because an email has to pass through a mail provider on its way here. We would say so plainly on that feature before you used it.

Children's privacy

Advocary accounts are for adults: parents, guardians, and authorized advocates. Information about children in Advocary is entered by the adult account holder as part of their own records. We do not knowingly collect information directly from children.

Retention and deletion

Your data stays in your account as long as the account exists. You can delete individual records inside the app at any time.

You can also delete the whole account yourself, without asking us and without waiting for anyone. It is in the app under Settings, then Your data. It removes every record you have uploaded, the communication log, your trackers, letters, prep sheets, plans, notes and deadlines, for every child on the account, along with your sign-in. It happens immediately and it is permanent: afterwards nobody can retrieve it, including us, because there is nothing left to retrieve.

The same screen offers a download of everything in your account, in one file that opens without Advocary and without an account. If there is any chance you will want your records later, take that copy before deleting.

We do not delete inactive accounts. If that ever changes, we would tell you first and give you time to download your records.

Sharing

We share data only with the service providers that operate the app:

• Google Firebase (authentication, database, file storage, hosting)
• Anthropic (AI processing, only when you use an AI feature)

We would disclose data if legally required to, and we will tell you if that ever happens unless the law prevents it.

Changes

If this policy changes in a meaningful way, we will ask you to review it again the next time you sign in.

Questions about your data? Write to info@advocary.app. · Terms of Use