Privacy Policy

Effective Date: April 20, 2026

Cogo ("we," "us," or "our") operates the Cogo mobile application (the "App"). This Privacy Policy explains how we collect, use, store, and share your information when you use our App.

1. Information We Collect

1.1 Information You Provide

Data	Purpose
Phone number	Account creation and login via SMS one-time password (OTP)
Display name	Your chosen username shown to group members
Profile photo	Optional avatar displayed on your profile
Goal and activity data	Goals, sub-goals, milestones, action logs, and progress you create within the App
Photos attached to actions	Optional images you upload as proof of progress
Reactions and comments	Emoji reactions and text comments on group activities

1.2 Information Collected Automatically

Data	Purpose
Push notification token	Delivering push notifications to your device
Device platform (iOS/Android)	Sending platform-appropriate notifications

1.3 Information Accessed but Not Stored

Contacts: When you choose to invite someone to a group, we access your device contacts to let you select a phone number. We do not upload, store, or sync your full contact list. Only the phone number of the person you invite is saved to send the invitation.
Camera and Photo Library: Used to take or select photos for your profile avatar or action log attachments. We only access photos you explicitly select.
Microphone: Used for audio features within the App. Audio is only accessed when you initiate recording.

2. How We Use Your Information

Authenticate your account and maintain your session
Display your profile and activity to members of your groups
Track goal progress and calculate XP, streaks, and levels
Send push notifications for check-in reminders, teammate activity, due dates, and milestone celebrations
Generate AI-powered action suggestions for your goals (goal titles are sent to our server-side AI service; your personal data is not included)
Enable GIF search for reactions (search queries are sent to GIPHY)

3. Third-Party Services

We use the following third-party services to operate the App:

Service	Purpose	Data Shared
Supabase	Authentication, database, file storage	Phone number, profile data, goals, photos
Expo Push Notifications	Delivering push notifications	Device push token, notification content
OpenAI	AI-generated goal action suggestions	Goal titles only (server-side; no personal data)
GIPHY	GIF search for reactions	Search queries

Each service is governed by its own privacy policy. We encourage you to review them:

4. Data Storage and Security

Your data is stored on Supabase's cloud infrastructure with row-level security policies ensuring users can only access data within their own groups.
Authentication is handled via SMS OTP — we do not store passwords.
Profile photos and action attachments are stored in secure cloud storage buckets with scoped access policies.
We do not sell, rent, or trade your personal information to third parties.

5. Data Retention

Your account data is retained as long as your account is active.
Group invitation records expire after 30 days.
If you delete your account, your profile data and personal content will be removed. Shared group content (e.g., group activity history) may be retained in anonymized form.

6. Children's Privacy

Cogo is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Withdraw consent for optional features (e.g., push notifications, contacts access)

To exercise any of these rights, contact us at support@cogoal.app.

7a. Account Deletion

You can request the permanent deletion of your account and all associated personal data at any time. Once processed, your profile, goals, and personal content will be removed. Shared group content may be retained in anonymized form.

Request Account Deletion

8. Analytics and Tracking

Cogo does not use any third-party analytics, advertising, or tracking SDKs. We do not serve ads and do not share your data with advertisers.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the App or by other means. The "Effective Date" at the top indicates when the policy was last revised.

10. Contact Us

If you have questions about this Privacy Policy, contact us at:

Email: support@cogoal.app
Website: https://cogoal.app