Privacy
Your data stays yours.
A plain-English statement of how Cocoacorn apps handle your data — in one place, without the lawyer voice.
No analytics, no trackers
No Google Analytics, no Firebase, no Mixpanel, no Sentry, no Crashlytics. No third-party SDKs phoning home about how you use the app.
No accounts, no sign-ups
You don’t make an account with me. There’s nothing to sign up for and nothing to log into.
No servers I can read
Your data lives on your device. If you turn on iCloud, it syncs through your private iCloud account — not mine. I can’t see what you log, even if I wanted to.
No selling, no sharing
Nothing to sell, because there’s nothing collected. Nothing to share with advertisers, brokers, insurers, or anyone else.
Where your data actually lives
Every Cocoacorn app stores your data on your device, in Apple’s on-device database. If you have iCloud turned on, your data syncs across your Apple devices through your private iCloud account.
I don’t run a server with a copy of your data. There is no Cocoacorn database somewhere with your name on it. Uninstalling an app does not necessarily remove its iCloud data or copies you have exported. See your app’s privacy policy below for its deletion controls. Backups and exported files need to be managed separately.
Where Apple Health is involved, the app reads and writes through Apple’s own permissions. That data lives in the Health app on your device, governed by Apple’s privacy model, not mine.
What I actually know about you
If you email me or use the contact form, I receive your email address, your message, and any name or app context you provide. I use those details to reply and help with your request.
I don’t know which app you opened today, which features you used, how long you spent in them, or whether you opened the app at all. I find out about bugs the same way you do — someone tells me.
This website and your messages
The website is separate from the data you record in the apps. The contact form sends your message and contact details through our email service. If you ask to hear when an app launches, your email address and the app you selected are also sent to Cocoacorn by email.
Visiting the website requires its hosting service to process connection information, such as your IP address and the page requested, to deliver the page. Google Analytics is not enabled on this website.
To reduce form spam, the website checks submissions and temporarily keeps hashed identifiers derived from email addresses and submitted content, with counters and expiry times. Where configured by our hosting service, this also includes a hashed IP address. These records help limit repeated submissions; they are not used for advertising or analytics. Protection windows last up to one hour, and expired records are removed when the protection store is next used.
Please only send information you are comfortable sharing. To ask about a message you have sent, or request its deletion, contact hello@cocoacorn.com.
Why it works this way
I built Cocoacorn for someone I love, who lives with chronic illness. Health data is some of the most sensitive data a person has — the kind of thing insurers, employers, and advertisers would very much like to get hold of. So I designed the apps so I couldn’t hand it over even if I were asked. Not as a feature. As a default.
Per-app privacy policies
The official privacy policy for each app, as required by the App Store.
Questions?
If anything here isn’t clear, ask me. I’ll tell you what I know and what I don’t.
Get in Touch