Privacy Policy

Effective 27 October 2026

Who is responsible

Cogu is made by [NAME], [ADDRESS], Denmark ("we"). We are the data controller for the processing described here. Questions or requests: [EMAIL].

What stays on your iPhone

These are stored only on your device, in Cogu's own storage and the storage it shares with its Screen Time extensions. We never receive them:

• Your rules (schedules, time limits, open limits), their schedules and settings
• The apps and categories you choose. iOS gives Cogu only opaque tokens for these, never app names
• Focus sessions, intentions and the history Cogu shows you
• Your settings

They are deleted when you choose Start over in Settings or delete the app.

Screen Time

Cogu uses Apple's Screen Time frameworks (Family Controls, Managed Settings and Device Activity) with your permission. Apple keeps your usage data inside iOS: the figures you see on Cogu's Today page are drawn by Apple's own report view, which cannot send anything out, not even to Cogu. You can withdraw the permission at any time in iOS Settings › Screen Time.

What leaves your iPhone

1. Cogu Pro (RevenueCat)

Payment is handled by Apple; we never see your card or your Apple Account. To know whether you have Pro, Cogu uses RevenueCat, Inc. (USA) as our processor. When Cogu starts, and when you buy or restore, RevenueCat receives:

• a random ID created on your iPhone (not your name, email or Apple Account)
• your App Store purchase and subscription history for Cogu (product, dates, price, currency, store transaction IDs)
• country and language, device model, iOS and app version, and your IP address, as with any internet request

Purpose: to give you the Pro you paid for, on this and your other devices if you restore. Legal basis: performance of our contract with you (GDPR art. 6(1)(b)). RevenueCat keeps this for as long as it is needed for your subscription and our accounting obligations. RevenueCat transfers data to the USA under the EU–U.S. Data Privacy Framework and/or the EU Standard Contractual Clauses. See RevenueCat's privacy policy.

2. Your account, if you sign in (Google Firebase, Resend)

You can use Cogu without an account. If you sign in (with Apple, with Google, or with a code sent to your email), so that Pro follows you to a new phone, we keep an account with Google Firebase (Google Ireland Ltd. / Google LLC) as our processor:

• your email address, and your name if Apple or Google give it
• the sign-in ids Apple or Google give for Cogu, and which way you signed in
• a random user ID, the day the account was made and last used, the platform and Cogu's version

Nothing from Screen Time, your rules or your focus sessions is part of the account. If you sign in with a code by email, the code is sent through Resend, Inc. (USA), which receives your email address to deliver it. Your user ID is also given to RevenueCat, so Pro can follow your account. Purpose: to keep your account and your Pro across devices. Legal basis: performance of our contract with you (art. 6(1)(b)). Google and Resend may process data in the USA, under the EU–U.S. Data Privacy Framework and/or the EU Standard Contractual Clauses. We keep the account until you delete it: in Cogu, open the menu › your name › Delete account, which deletes it at once (and, for Sign in with Apple, withdraws Cogu's access with Apple). See Firebase's privacy information and Resend's privacy policy.

3. App updates (Expo)

Cogu checks for small updates when it starts, using EAS Update from Expo (650 Industries, Inc., USA). The check sends the iOS version, Cogu's version, random IDs used to count updated devices and roll updates out gradually, and, as with any internet request, your IP address. Expo keeps request logs for a limited time for operations and security. Legal basis: our legitimate interest in keeping Cogu working and secure (art. 6(1)(f)). See Expo's privacy policy.

4. Apple

Apple handles downloads, payments, refunds and, if you allow it in iOS Settings, shares anonymous crash reports and app analytics with us. That is governed by Apple's privacy policy.

What we never do

• No advertising, and no data sold or shared for advertising
• No tracking across apps or websites, and no advertising identifier
• No analytics or profiling of how you use your phone

Your rights

Under the GDPR you can ask for access to, correction or deletion of your personal data, restriction of or objection to its processing, and a copy to take elsewhere. If you have an account, write to us from its email address, or delete it yourself in Cogu. Without an account we can only find RevenueCat's records with your purchase details; write to us with your App Store order ID (from Apple's receipt email). Everything else is on your iPhone and fully in your hands.

You can complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk, or the authority where you live.

Children

Cogu is meant for people managing their own phone and is not directed at children under 13.

Changes

If this policy changes, we update it here and change the date at the top. If a change affects what leaves your iPhone, we will also say so in the App Store update notes.