Privacy Policy

Data controller

The controller of your personal data is Fundacja Wschodnioeuropejskie Centrum Ekologicznej Edukacji Niekonwencjonalnej, ul. Rosy 3B, 20-516 Lublin, Poland (NIP 9462732127; KRS 0001058035; REGON 526399727). We process your personal data under the GDPR (Regulation (EU) 2016/679). For any privacy request, contact fundacja@wceen.com.

What we collect

Account data (email, password hash, locale), learning data (decks, sessions, recall scores) you create while using Cogni, and basic technical data (IP address, browser, operating system, and screen characteristics) needed to operate the service.

Signing in with Google

If you choose "Continue with Google", Google shares three things with us: your email address, your name, and the URL of your profile picture (the userinfo.email and userinfo.profile scopes). We never receive your Google password and we request nothing else from your Google Account — no Gmail, Drive, Calendar or contacts access. We use the email to create or match your Cogni account, the name as your initial display name, and the picture URL as your initial avatar; you can change both afterwards. We also store your Google account identifier and the access token Google issues, so the connection keeps working. This data is used only to sign you in and run your account — never for advertising, and never shared with anyone beyond the processors listed above. You can disconnect Google at any time in your account settings, as long as you keep another way to sign in, and deleting your account erases it along with everything else.

Why we collect it

To provide the service, personalize your spaced repetition schedule, keep your account secure, and improve product quality. We do not sell your data.

Who we share it with

We share only the data needed to run Cogni with providers for hosting, payment processing, transactional email, AI features, and product monitoring. Providers act as processors where their role and contract provide for this. Meta's separate role in advertising measurement is described below: we and Meta are joint controllers for collection and transmission through the Meta Pixel, and Meta is an independent controller for its subsequent processing.

AI features and Google as a sub-processor

Cogni uses AI for its in-app assistant and for scoring certain cognitive exercises (for example creative-association answers). The relevant prompts, messages, and answers are sent to Google (Gemini API, Google LLC / Google Ireland Ltd.) for processing. We minimize what is sent and never include account secrets. Google may process this data outside the EEA under appropriate transfer safeguards. Google's terms for the API tier we currently use permit Google to retain and use inputs to improve their service; we are working on moving these calls to Google's enterprise zero-data-retention tier so that prompts and answers are not retained or used to train Google's models.

How long we keep it

Account and learning data is kept while your account is active. If you delete your account, we erase your personal data within 30 days, except where law requires us to retain specific records (e.g. invoices for tax purposes).

Your rights

Under GDPR you have the right to access, correct, export, and delete your data, as well as to object to or restrict certain processing. You can act on most of these directly from your account settings, or contact us at the address below.

How to delete your account and data

You can delete your Cogni (Fundacja WCEEN) account and its data yourself — in the Android app or in your browser:

1. Sign in to the Cogni app or at cogni.center.
2. Open Settings → Privacy & data.
3. Choose “Schedule Account Deletion” and confirm. You can cancel for 30 days — after that, your account and data are permanently deleted.

Can't sign in? Email us from the address linked to your account (address below) and we will delete it within 30 days. We delete your account data (email, password, name, profile photo), learning data (decks, sessions, results, notes, mind maps, memory palaces) and your AI conversation history. We keep only records the law requires — invoices and payment records for the period required by tax law (up to 5 years). Deleted data also disappears from encrypted database backups as they rotate, at the latest 14 days after deletion.

Cookies and browser storage

We use strictly necessary cookies and browser storage for security, authentication, preferences, and core service operation. Your optional-tool choices are stored on the server with your current guest session or account for 180 days. If you allow product-quality reporting, PostHog uses browser storage for technical session and device identifiers. If you allow advertising measurement, Meta may set or read identifiers such as _fbp and _fbc. PostHog and Meta storage is not activated before the relevant choice is enabled; withdrawing that choice stops collection and removes the associated browser identifiers we control.

Product quality and error reporting

With your consent, PostHog collects browser errors, path-only page visits, active-time and scroll-depth summaries, technical session and device identifiers, and basic browser and operating-system data. We identify this data only with your internal Cogni user ID, not your email. Collection starts only after you enable Product quality and error reporting and stops when you disable it; it is disabled during impersonation. Query strings and credential-like event and console values are removed or redacted. Session replay and replay console capture are enabled: page text and non-password input values may be visible, while password fields and content marked private are blocked. PostHog processes this data in its EU region under its data-processing terms.

Advertising measurement with Meta

With your consent, the Meta Pixel sends Meta Platforms Ireland Limited page-view information, the page URL and referrer, browser and operating-system information, IP-derived request data, and Meta identifiers so we can measure whether our Facebook and Instagram campaigns work. We do not activate the Pixel before Advertising measurement is enabled. For collection and transmission through the Pixel, we and Meta are joint controllers under Article 26 GDPR; Meta is an independent controller for subsequent processing under its own privacy policy. Meta may combine this information with data from its services and transfer it outside the EEA using its stated safeguards. When server-side advertising measurement is enabled, confirmed registration, trial and subscription events are processed in PostHog EU and forwarded to Meta. Matching data can include hashed email and internal account identifiers, Meta browser/click identifiers, originating IP address and user agent; subscription events include value and currency. These advertising events do not enable browser recordings or product-quality reporting. Withdrawal stops new locally authorized collection; events already sent may still be processed downstream.

Managing or withdrawing consent

You can accept, reject, or separately control product-quality reporting and advertising measurement in Your privacy choices on this page. Optional tools are off until you choose otherwise. Changing a switch takes effect immediately without requiring you to delete your account. Withdrawing consent does not affect processing that was lawful before withdrawal.

Changes to this policy

If we make material changes, we'll notify you by email or in-app before they take effect. The current version is always available at this page.