Privacy policy
Draft, not yet reviewed by a lawyer
This page is a working draft and will change before Lawki’s public release.
This policy explains what information Lawki collects, why, who receives it and the choices you have. It covers the Lawki iPhone app and this website, lawki.app. Lawki is run by [CONFIRM: legal name of the person or company that runs Lawki].
The short version
- This website sets no cookies, has no analytics and loads nothing from other companies.
- You can search and read case pages in the app without an account.
- We do not sell your information or use it for advertising.
- AI features are optional. The app asks before any of your information goes to our AI provider.
- You can delete your account in the app at any time.
- Lawki is only for adults 18 and older.
Information we collect
When you visit this website
This website is hosted by Cloudflare. Like any web host, Cloudflare receives your IP address and basic details of each request, such as the page and your browser type, so it can deliver the page and protect the site from attacks.
The website itself sets no cookies, uses no analytics or tracking tools, and loads no scripts, fonts or images from other companies.
When you sign up for the beta
We keep the email address you enter, your answers to the two questions on the form, which version of the signup notice you saw, the page and date you signed up on, and later whether and when we invited you. We use them only to contact you about the beta.
To stop automated abuse, our server uses your IP address to limit how many signups can come from one address. Lawki’s database stores only a scrambled code made from the address with a secret key, not the address itself, and keeps it for [CONFIRM: how long abuse-prevention records are kept]. Our server provider also keeps request logs (see “Logs kept by our server provider” below).
When you open a case link
A link such as lawki.app/case/… opens the case in the Lawki app if you have it. If you do not, this website shows a page that explains how to open it. For now, that page does not show the case’s details, and your browser does not ask our server about the case.
When you email us
If you email us, we keep your message and your email address so we can reply. [CONFIRM: support mailbox provider and how long support emails are kept].
In the app, without an account
You can search and read case pages without an account. Your searches go from the app to our server, which asks CourtListener on your behalf, so CourtListener does not see who searched. Lawki’s own logs never contain the words you search for, but our server provider’s request logs can (see below). [CONFIRM: whether cached search results are stored with the search words].
When you open a free court document, your iPhone downloads it directly from CourtListener’s file storage, which receives your IP address like any website you visit.
In the app, with an account
If you create an account, we store:
- Your email address. With Sign in with Apple, this may be a private relay address from Apple.
- The cases you save and the private notes you write. They sync to our database and are kept on your iPhone so you can read them offline.
- The cases you follow and your device’s push notification token, so we can tell you about new filings.
- Your app settings, such as whether AI features are on.
- If you use Sign in with Apple, the account ID that Apple gives Lawki for you. [CONFIRM: what else Lawki keeps from Sign in with Apple (your name if you share it, tokens used to cancel Apple sign-in when you delete your account)].
Each time you sign in, our sign-in service (run by Supabase) records the event with your IP address and your device’s browser or app details, to protect your account. These records are kept for [CONFIRM: how long sign-in records are kept].
Your saved cases and notes are private. Each account can read only its own, and they are never part of a public case link.
Your age
Lawki is only for adults. To check, the app asks Apple for an age range (never your birth date), or asks you to confirm that you are 18 or older.
AI features
AI features are optional and labeled as AI. Before you first use one, the app asks for your permission. If you agree:
- Smart search sends the words you type to Anthropic, our AI provider, so it can turn them into a search.
- A case summary sends the public documents and details of that case to Anthropic.
You can turn AI features off in the app’s settings. We keep a record of AI requests to enforce our spending limits. [CONFIRM: what the AI request record (ai_events) contains and how long it is kept]. [CONFIRM: how Anthropic handles and keeps data sent through its API, from Lawki’s agreement with Anthropic].
Logs kept by our server provider
Supabase, which runs our server, keeps logs of the requests that reach it so the service can run and be protected. Its documentation says these logs include each request’s headers, which carry your IP address, and what was sent: for example which case page was asked for, the words of a search, or a beta signup. The Lawki team can read these logs. They are kept for [CONFIRM: how long Supabase keeps request logs for Lawki’s plan].
Diagnostics
[CONFIRM: whether the app collects crash reports or usage analytics, and from which provider].
How we use information
- To run the app and this website: sign-in, syncing, alerts and support.
- To send the email you need: sign-in codes, alerts you turned on, and messages about the beta.
- To invite beta testers.
- To prevent abuse and keep the service within its limits.
We do not sell your information or share it for advertising.
Who receives information
We use these companies to run Lawki. Each receives only what it needs to do its part.
- Supabase runs our database, sign-in and server functions. It stores account data, saved cases, notes, follows and beta signups. Data location: [CONFIRM: Supabase data region].
- Cloudflare hosts this website and runs its domain name service.
- Resend sends our emails, such as sign-in codes and alerts.
- Anthropic provides the AI for smart search and case summaries, only after you agree.
- Apple provides Sign in with Apple, push notifications, TestFlight for beta testers and the App Store.
- CourtListener, a project of Free Law Project, is the source of the public court records. It receives requests from our server that are not linked to you, and it serves free documents directly to your iPhone.
- PACER: if you follow a link to buy a document, you deal with PACER directly under its own terms.
[CONFIRM: disclosures required by law (lawyer to write)].
How long we keep information
- Account data, saved cases, notes and follows: until you delete your account. Deleting your account removes them from our database. Copies in our backups are removed after [CONFIRM: backup retention period].
- Beta signups: [CONFIRM: how long beta signups are kept].
- Abuse-prevention codes: [CONFIRM: how long abuse-prevention records are kept].
- Request logs at our server provider: [CONFIRM: how long Supabase keeps request logs for Lawki’s plan].
- Sign-in records: [CONFIRM: how long sign-in records are kept].
- Copies of public court records: for a short time. When CourtListener reports that a record was removed, we delete our copy.
- Support emails: [CONFIRM: support mailbox provider and how long support emails are kept].
Your choices
- Use search and case pages without an account.
- Turn AI features off in the app’s settings.
- Turn notifications off in your iPhone’s settings.
- Delete your account in the app, in Settings.
- Email us to ask for a copy of your information, to correct it, or to delete it, including a beta signup.
[CONFIRM: rights and response times under California and other state privacy laws (lawyer to write)].
Children
Lawki is only for adults 18 and older. We do not knowingly collect information from anyone under 18. If you think a minor has given us information, email us and we will delete it.
Security
We limit who and what can reach your information: private data in our database is protected so that each account can read only its own records, service keys stay on our servers and never in the app, and connections are encrypted (HTTPS). No system is perfectly secure, so we cannot promise that information will never be exposed.
Do Not Track
This website does not track you across other websites and has no ads or analytics, so there is nothing for a browser’s Do Not Track signal to switch off.
Changes to this policy
When we change this policy, we will update the date at the top of this page. If a change is significant, we will also tell you in the app or by email.
Contact
Questions or requests: email [CONFIRM: support email address]. Lawki is run by [CONFIRM: legal name of the person or company that runs Lawki].