At a Glance
Cozy is built local-first and privacy-first. Your mood entries, notes, Heart Rate Variability (HRV) samples, and pet companion state are stored on your device by default. Nothing leaves the device unless you explicitly enable iCloud sync. We do not require an account, do not collect personally identifiable information (PII), and do not sell or share your data. This policy explains what data Cozy touches, how it is used, and the choices you have.
1. What We Collect — and Where It Lives
1.1 Stored Locally on Your Device
The following data is created and stored on your device only (SwiftData / SQLite, inside Cozy's iOS app sandbox):
- Mood entries: the face you tap, the tags or moments you select, and any private notes you write.
- Pet companion state: your pet's growth stage, customization, and interaction history.
- App preferences: appearance, language, notification timing, and similar settings.
By default, none of this data is uploaded to Cozy's servers.
1.2 HealthKit (HRV) — Read Only, Never Uploaded
If you enable the HRV stress trends feature (Premium), Cozy requests read-only permission to access your Heart Rate Variability (HRV) samples through Apple HealthKit.
- Cozy never writes to HealthKit.
- Cozy never uploads HRV samples or any HealthKit data off your device.
- All HRV analysis (trend curves, weekly insights) is performed locally on-device.
- You can revoke HealthKit access at any time in iOS Settings → Health → Data Access & Devices → Cozy.
1.3 iCloud Sync — Optional, Your Container
If you opt in to iCloud sync, your mood entries and pet state are synchronized through your own iCloud container using Apple's CloudKit. The data is end-to-end protected by your Apple ID and stays on Apple infrastructure — it does not pass through, and is never stored on, Cozy's servers. You can disable sync at any time, and you can delete the iCloud copy from iOS Settings → Apple ID → iCloud → Manage Storage.
1.4 No Accounts, No Logins
Cozy does not require an account to use any feature. There is no email, phone number, name, or other PII collected at sign-in — because there is no sign-in.
1.5 Anonymous Analytics (Opt-Out Available)
Cozy collects anonymous app-usage events (e.g., "a mood was logged", "the weekly insights screen was opened") and crash reports to improve stability and usability. These events do not include:
- Your mood content, notes, or photos
- Your HRV values or HealthKit data
- Your name, email, contacts, or any other PII
You can turn this off entirely at any time in Settings → Privacy → Anonymous Analytics.
1.6 What We Do Not Collect
- We do not access your contacts, calendar, photos, microphone, or location.
- We do not use third-party advertising SDKs.
- We do not build advertising profiles or sell data to data brokers.
- We do not perform facial recognition.
2. Third-Party SDKs
Cozy does not embed third-party advertising, marketing, social, or tracking SDKs.
The only third-party platforms involved are Apple HealthKit and Apple CloudKit (iCloud), both of which are Apple system frameworks governed by Apple's own privacy policies, and both of which only ever operate within your own Apple account and device.
3. How We Use the Data
| Data | Where it goes | What it powers |
|---|---|---|
| Mood entries & notes | On-device only (optional: your iCloud) | Year-in-Pixels, weekly insights, pet growth |
| HRV samples (Premium) | On-device only | Stress trend visualization |
| Pet companion state | On-device only (optional: your iCloud) | Companion animation & progression |
| Anonymous usage events | Aggregated analytics service | Bug fixes and product improvement |
4. Data Retention & Deletion
- On-device data: persists until you delete it. Deleting a mood entry inside the app removes it immediately. Uninstalling Cozy removes all local data.
- iCloud data (if enabled): lives in your iCloud container. You can delete it via iOS Settings → Apple ID → iCloud → Manage Storage → Cozy.
- Anonymous analytics: retained in aggregate for a maximum of 24 months, then purged. Because the data is anonymous, it cannot be linked back to a specific user or device.
There is no "delete my account" action — because we do not create an account in the first place.
5. Your Rights
Because Cozy stores your content locally, you are always in direct control:
- Access / export: view and export your mood entries from within the app.
- Delete: delete individual entries, reset the pet, or uninstall Cozy to wipe everything.
- Revoke HealthKit: iOS Settings → Health → Data Access & Devices → Cozy.
- Disable iCloud sync: in Cozy's settings, or via iOS iCloud settings.
- Opt out of analytics: Cozy → Settings → Privacy → Anonymous Analytics.
If you have a specific request we can help with, contact us at the address in section 9.
6. Children's Privacy
Cozy is not directed at children under 13. We do not knowingly collect personal information from children under 13. Because Cozy does not require an account and does not collect PII, the practical surface for such collection is minimal — but if you are a parent or guardian and believe a child has provided information of concern, please contact us.
7. Security
We rely on iOS sandboxing, Apple's CloudKit security, and on-device encryption (file-level encryption provided by iOS) to protect locally stored content. Because Cozy does not transmit your mood entries or HRV data, traditional server-side breach risk does not apply to user content.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be surfaced via an in-app notice. Continued use of Cozy after the effective date of an update indicates acceptance of the revised policy.
9. Contact Us
Support contact: [email protected]
If you have questions about this policy or how Cozy handles your data, we are happy to help.