Privacy
Privacy Policy
Effective: April 19, 2026
Your memory is personal. So is the data you trust us with. This policy explains what we collect, why we collect it, and what you can do about it.
What we collect
Account data (email, password hash, locale), learning data (decks, sessions, recall scores) you create while using Cogni, and basic technical data (IP address, browser, device type) needed to operate the service.
Why we collect it
To provide the service, personalize your spaced repetition schedule, keep your account secure, and improve product quality. We do not sell your data.
Who we share it with
Only the providers we need to run Cogni — hosting, payment processing, transactional email, and AI features — and only the minimum data each one needs. All processors are bound by data processing agreements.
AI features and Google as a sub-processor
Cogni uses AI for its in-app assistant and for scoring certain cognitive exercises (for example creative-association answers). The relevant prompts, messages, and answers are sent to Google (Gemini API, Google LLC / Google Ireland Ltd.) for processing. We minimize what is sent and never include account secrets. Google may process this data outside the EEA under appropriate transfer safeguards. Google's terms for the API tier we currently use permit Google to retain and use inputs to improve their service; we are working on moving these calls to Google's enterprise zero-data-retention tier so that prompts and answers are not retained or used to train Google's models.
How long we keep it
Account and learning data is kept while your account is active. If you delete your account, we erase your personal data within 30 days, except where law requires us to retain specific records (e.g. invoices for tax purposes).
Your rights
Under GDPR you have the right to access, correct, export, and delete your data, as well as to object to or restrict certain processing. You can act on most of these directly from your account settings, or contact us at the address below.
Cookies
We use a small number of strictly necessary cookies (session, CSRF) and an optional preferences cookie (locale, theme). We do not use advertising or cross-site tracking cookies.
Changes to this policy
If we make material changes, we'll notify you by email or in-app before they take effect. The current version is always available at this page.
For privacy requests or questions, contact us at privacy@cogni.center