Privacy Policy

Last updated: 7 November 2026

1. Who we are

Cokoon ("Cokoon", "we", "us") is provided by [OWNER: legal entity name], [OWNER: registered address]. For anything about this policy or your data, write to [email protected].

2. What we store, and why

To run your account

• A device key, stored as a fingerprint. When you first open Cokoon, the app creates a random private key and keeps it on your phone (in the iOS Keychain, set so it doesn't sync to iCloud or move to another phone). Our server stores only a one-way fingerprint (a SHA-256 hash) of that key, never the key itself. This is how the app knows it's you without an email or password.
• The name you type (up to 30 characters) and the reasons you picked during onboarding.
• Your settings, such as notification choices, quiet hours, topics you'd rather skip, reduced motion and text size.
• Sign-in tokens that keep your session open.

To make the shared home work

• Pairing details: the invitation code, who invited whom, and when you paired or disconnected.
• What you share: moods and their context, notes and replies, answers and predictions in activities, drawings and photos you add (with captions, places and dates you type), important dates (which may include a name you enter, for example for a birthday), and the choices you make for your home and pet.
• Drafts: an answer you've started but not sent is saved so you don't lose it. Your partner can't see it until you send it, and answers are only revealed once you've both replied.
• Stars, items and themes your home has earned or unlocked.

For purchases

• If you subscribe to Cokoon Plus, Apple handles the payment. We receive and store the transaction details Apple signs for us (product, transaction ID, purchase and renewal dates, status) so we can turn Plus on for both of you. We never see or store your card or payment details.

For notifications

• If you allow notifications, we store your device's push token so we can tell you, for example, that a note is waiting. By default notifications use neutral wording and don't include what your partner wrote, unless you turn on private text in previews.

To keep the service working and safe

• Usage events: a short internal log of things like "an activity was completed" or "a purchase was verified". These events carry account IDs and categories only—never the text of your notes, answers or drawings.
• Technical data: our hosting provider processes IP addresses and request details to deliver the service, limit abuse (for example, too many pairing attempts) and diagnose errors.

3. What we don't collect

• No email address, phone number or password.
• No location, contacts, microphone or health data.
• No advertising identifier and no cross-app tracking. Cokoon does not show ads, and we don't run third-party advertising or analytics tools in the app. If that ever changes, we'll update this policy first and, where Apple requires it, ask your permission in the app.

4. Who can see your content

• Your partner. Everything you send in your shared home is visible to the partner you paired with. Before pairing, your home is visible only to you.
• Our service providers, only to run Cokoon (see below).
• Nobody else. We don't sell or rent personal data and we don't share it for advertising. We'd only disclose data if the law requires it.

5. Where your data is stored, and who processes it

• Cloudflare, Inc. hosts our server (Cloudflare Workers) and database (Cloudflare D1). Your account and shared-home content are stored there. Cloudflare runs a global network, so data may be processed in countries other than yours, including the United States. Data is encrypted in transit (HTTPS).
• Apple processes App Store payments and delivers push notifications, under Apple's own privacy policy.

[OWNER: confirm D1 location / jurisdiction setting and the transfer mechanism you rely on for EU/UK users]

6. How long we keep it

• While your account exists, we keep your account and shared-home content so it's there when you open the app.
• If you disconnect from your partner, the home you shared becomes a read-only archive that both of you can still look at, and each of you starts a fresh home. The partner who subscribed keeps Plus; the other partner's included Plus ends.
• If you delete something original (a photo or drawing you added), it's removed from History and from any frame showing it, for both of you.
• If your account is deleted, we delete your account data and the content you authored within [OWNER: deletion period, e.g. 30 days], except where we must keep records (for example, purchase records) to meet legal obligations.
• Technical logs kept by our hosting provider are short-lived and are deleted on their own schedule.

7. If you lose your phone

Because there's no email or password, your access lives with the private key on your phone. We can't restore it on a new phone, and we can't recover your home for you. If you lose your phone, your partner keeps the shared home and everything in it. To share a home again, your partner can disconnect and send you a new code.

8. Your choices and rights

• See and download: in the app, go to Us → Privacy and choose Download my content for your notes, answers, captions and dates; images can be downloaded one by one.
• Correct: change your name and settings in the app at any time.
• Remove content: remove items from Memories, or delete an original photo or drawing you added.
• Disconnect: either partner can disconnect in the app (Us → Privacy → Disconnect partner).
• Delete your account: email [email protected] with the subject "Delete my Cokoon account". Because there's no email on file, we'll ask for details that help us find the right account and confirm the request is yours (for example, your display name, your partner's name and roughly when you paired). Deleting your account doesn't cancel an App Store subscription—cancel that in your App Store settings.
• Notifications: turn them off in the app or in iOS Settings.

Depending on where you live (for example in the EU, UK or California), you may have additional rights, such as to access, correct, delete or port your data, to object to or restrict processing, and to complain to your local data protection authority. Write to us and we'll respond within the time the law requires. We don't sell or "share" personal information as those terms are defined under California law. [OWNER: legal basis wording (contract / legitimate interests) and EU/UK representative, if required]

9. Children

Cokoon is made for adult couples and isn't directed at children. You must be at least [OWNER: minimum age, e.g. 18] to use it. If you believe a child has given us personal data, contact us and we'll delete it.

10. Security

We use encryption in transit, store only a fingerprint of your device key, and limit access to your home to the two members of it. No system is perfectly secure, so please keep your phone locked.

11. Changes

If we make a meaningful change, we'll update the date at the top and, where appropriate, tell you in the app before it applies.

12. Contact

[email protected] · [OWNER: legal entity name and postal address]