Legal
Privacy Policy
Effective date: June 1, 2026 · Updated October 16, 2026
What we collect
When you create an account, we collect your email address and display name, and your phone number if you choose to add one, via Clerk, our authentication provider. When you create a matter, the information you enter — narrative, key facts, documents, photos you take or upload — is stored in encrypted Supabase Storage and a Supabase Postgres database with row-level security enforced per user. If you enter a ZIP code or state to find the law or an attorney, we use it to show results for that area.
We also record a small set of in-app events linked to your account (for example, that a matter was created or a deadline was saved) to measure whether MOFRD actually helps people meet their deadlines. These events contain no document text. If you turn on notifications in the iOS app, we store your device’s push token to send deadline reminders; you can turn notifications off at any time in iOS Settings.
How we use it
Your matter data is used solely to power your workspace: organizing codes, computing deadlines, generating your Attorney-Ready Packet, and running the redaction-by-default privacy review. We do not train models on your matter data. We do not sell your data.
AI processing (Anthropic)
MOFRD uses Claude, an AI model provided by Anthropic, PBC, to read documents, extract text from images, classify matters, suggest relevant law and answer questions. When you use these features, the text involved — document contents, matter details and the questions you type — is sent to Anthropic to produce the result and returned to MOFRD. Anthropic does not use this data to train its models. We ask for your permission before any of your information is sent for AI processing, and you can withdraw it any time under Account & Privacy; without it, AI features stay off and the rest of MOFRD keeps working.
Service providers
We use these providers to run MOFRD, each only for the purpose listed: Clerk (sign-in), Supabase (database and file storage), Vercel (hosting), Anthropic (AI processing, above), Stripe (web payments), Apple (In-App Purchases and push notifications in the iOS app) and Resend (account and deadline emails). We do not sell your data or share it for advertising, and we do not track you across other companies’ apps or websites.
What we share
Nothing leaves your account unless you explicitly export it. The Attorney-Ready Packet is generated on your device and shared only when you choose to. If you request an attorney review, only the redacted version you approved is shared — never the unredacted original.
Payments
On the web, payments are processed by Stripe; in the iOS app, by Apple through In-App Purchase. We never see or store your card number, bank account, or other financial credentials. We store only what we need to manage your plan: the Stripe customer ID or Apple transaction ID, the product purchased and its status.
Data retention
Your matter data persists as long as your account is active. You can delete your account at any time from Account & Privacy in the app or on the web. If you delete your account, we soft-delete your user record and retain matter data for 90 days for compliance purposes, then permanently purge it. You can request immediate deletion by emailing privacy@mofrd.com.
Cookies
We use only essential authentication cookies managed by Clerk. We do not use advertising cookies, tracking pixels, or third-party analytics that identify you personally.
Your rights
You may request access to, correction of, or deletion of your personal data at any time by contacting privacy@mofrd.com. California residents may exercise rights under the CCPA. We respond to all requests within 30 days.
Contact
Questions about this policy: privacy@mofrd.com
This policy may be updated as MOFRD adds features. Material changes will be communicated via the email on your account. Continued use after notice constitutes acceptance.