Privacy Policy
Your thoughts deserve clear answers.
Last updated October 7, 2026.
Cogni is operated by Shrey Patel (“we,” “us”). This policy explains how information is handled in the Cogni iPhone app and on this website, and the choices you have.
The short version
- Your note library is stored on your device, for both Free and Pro. Cogni does not automatically back it up or sync it between devices.
- We never sell your data.
- In Assist, you preview selected note excerpts and confirm sharing for that request before they and your question are sent through Supabase to OpenAI.
- Accounts, purchases, optional AI, submitted feedback, and app updates involve online services and technical request information. Local note capture does not require an AI request.
- Exporting local content, deleting local notes, deleting an account, and cancelling an Apple subscription are separate actions.
Information we collect
Account information. If you create an account, we use Supabase to handle authentication. This includes your email address, a unique user identifier, and security events like sign-ins. Session tokens are stored in your device’s secure storage.
Your local library. Notes, links, tasks, organization details, and captured media are stored on your device. Signing in or buying Pro does not upload that library or make it available on another device. Local search and the Brain visualization do not require uploading your library. Keep an export of important text and save attachment and recording files separately.
Optional AI requests. In Assist, the note excerpts you preview, their source identifiers, your question, and the selected request mode pass through our Supabase backend to OpenAI to generate a response. You must confirm sharing for each request. The backend records account-linked request identifiers, usage, outcomes, and generated responses to enforce usage limits and handle repeated requests. Generated responses may contain information from the notes you shared. OpenAI may retain request data for safety monitoring; see the retention section below.
Cloud indexing is separate. Our backend supports indexing content explicitly submitted for that purpose, which can store submitted note text, text chunks, and embeddings for retrieval. The current iPhone interface does not automatically upload or index your library, and does not offer a cloud-index-management control. This backend capability is not a note backup or device-sync service.
Subscription information. If you subscribe to Cogni Pro, Apple processes your payment — we never see your card details. RevenueCat helps us verify your subscription status; it may process your app user ID, product ID, and purchase/entitlement records.
Website data. This website doesn’t use advertising trackers or ask for your email. Hosting runs on Vercel, which may process basic technical information (like IP address and request timing) needed to serve and secure the site.
Feedback and support. When you choose to send in-app feedback and confirm its sharing notice, we store a report identifier, your Cogni account identifier, the category and message you entered, an optional reply email, the app version, and the platform. We use these to investigate issues, improve the app, and respond where appropriate. Your notes, attachments, and recordings are not automatically attached. If you email support, we receive the message and contact information you send. Please do not include private notes, passwords, or login codes.
Technical service information. Services used for sign-in, subscriptions, AI, feedback, app-update delivery, and website hosting may process request information such as IP addresses, request timing, and service errors to deliver and secure those services. This is separate from uploading your note library.
How we use information
To provide the app’s features, authenticate your account, process subscriptions, respond to support requests, investigate feedback, generate AI responses you explicitly request, and keep the service secure. We do not sell or rent your personal information.
Who we share it with
The services involved depend on the features you use:
- Supabase — authentication, backend AI processing, and storage of account-linked service and feedback records
- OpenAI — processes content submitted for optional AI requests
- RevenueCat — subscription and entitlement verification
- Apple — payment processing and App Store distribution
- Expo — app-update delivery
- Vercel — hosts this website
These providers may also retain technical, security, or transaction records under their own policies and legal obligations. We may disclose information when required by law. We do not sell your information.
Your choices and rights
- Export from Settings → Your data → Export a backup. The JSON backup does not contain attachment or recording files; save those separately. It is not an automatic cloud backup.
- Delete local notes using the note controls, then permanently delete them from Settings → Your data → Trash when you no longer want to keep them.
- Delete your account from Settings → Account → Delete account and follow the confirmation steps. This removes your account and associated app-database records, but leaves notes on your device. It does not cancel an Apple subscription.
- Decline AI sharing by not enabling consent or not sending the request. Local capture, search, and organization remain available. Changing your mind after sending cannot recall data already processed by a provider.
- Access, correct, or request deletion of your personal information by emailing support@getcogniapp.com. If you’re in the EU/UK or California, you have additional rights under GDPR/CCPA (access, portability, correction, deletion, and objection to processing) — email us and we’ll respond within the legally required window.
Children’s privacy
Cogni isn’t directed at children under 13, and we don’t knowingly collect personal information from children under 13. If you believe a child has provided us information, contact support@getcogniapp.com and we’ll delete it.
Data retention
On your device. Local notes remain until you remove them. Notes in Trash remain recoverable until permanently deleted. Deleting your Cogni account does not erase this local library. Removing the app or losing your device can result in loss of local data; signing in again does not restore it. Copies you export or share are controlled separately by you and the destination you choose.
Cogni account and service records. Account information, feedback, and AI usage records are separate from your local library and remain associated with your account until removed through account deletion or a supported data-deletion request. The in-app account-deletion action removes the account and its associated records from the app database. It does not promise immediate removal from every backup, operational log, or independent provider system.
Provider records. OpenAI may retain AI request data for safety monitoring. Apple and RevenueCat may retain purchase and subscription records, and service providers may retain security logs or backups under their applicable policies and obligations. Deleting a local note or a Cogni account does not itself erase those independent records. For a retention or deletion request, contact support@getcogniapp.com.
Security
We use industry-standard measures — encryption in transit, secure device storage for session tokens, and access controls on our backend — to protect your information. No system is perfectly secure, but we take this seriously.
Changes to this policy
We’ll update the date at the top when this policy changes, and for material changes, we’ll let you know in the app before they take effect.
Contact
Cogni is operated by Shrey Patel. For privacy questions, data requests, or general help, email support@getcogniapp.com.