Your memory is personal. So is the data you trust us with. This policy explains what we collect, why we collect it, and what you can do about it.
Privacy Policy
Privacy
Your privacy choices
Choose which optional tools Cogni may use. Necessary storage remains active so the service and your saved choice can work.
Necessary
Required for security, remembering your privacy choice, and the basic operation of Cogni.
Data controller
The controller of your personal data is Fundacja Wschodnioeuropejskie Centrum Ekologicznej Edukacji Niekonwencjonalnej, ul. Rosy 3B, 20-516 Lublin, Poland (NIP 9462732127; KRS 0001058035; REGON 526399727). We process your personal data under the GDPR (Regulation (EU) 2016/679). For any privacy request, contact fundacjawceen@gmail.com.
What we collect
Account data (email, password hash, locale), learning data (decks, sessions, recall scores) you create while using Cogni, and basic technical data (IP address, browser, operating system, and screen characteristics) needed to operate the service.
Signing in with Google
If you choose "Continue with Google", Google shares three things with us: your email address, your name, and the URL of your profile picture (the userinfo.email and userinfo.profile scopes). We never receive your Google password and we request nothing else from your Google Account — no Gmail, Drive, Calendar or contacts access. We use the email to create or match your Cogni account, the name as your initial display name, and the picture URL as your initial avatar; you can change both afterwards. We also store your Google account identifier and the access token Google issues, so the connection keeps working. This data is used only to sign you in and run your account — never for advertising, and never shared with anyone beyond the processors listed above. You can disconnect Google at any time in your account settings, as long as you keep another way to sign in, and deleting your account erases it along with everything else.
Why we collect it
To provide the service, personalize your spaced repetition schedule, keep your account secure, and improve product quality. We do not sell your data.
Who we share it with
We share only the data needed to run Cogni with providers for hosting, payment processing, transactional email, AI features, and product monitoring. Providers act as processors where their role and contract provide for this. Meta's separate role in advertising measurement is described below: we and Meta are joint controllers for collection and transmission through the Meta Pixel, and Meta is an independent controller for its subsequent processing.
AI features and Google as a sub-processor
Cogni uses AI for its in-app assistant and for scoring certain cognitive exercises (for example creative-association answers). The relevant prompts, messages, and answers are sent to Google (Gemini API, Google LLC / Google Ireland Ltd.) for processing. We minimize what is sent and never include account secrets. Google may process this data outside the EEA under appropriate transfer safeguards. Google's terms for the API tier we currently use permit Google to retain and use inputs to improve their service; we are working on moving these calls to Google's enterprise zero-data-retention tier so that prompts and answers are not retained or used to train Google's models.
How long we keep it
Account and learning data is kept while your account is active. If you delete your account, we erase your personal data within 30 days, except where law requires us to retain specific records (e.g. invoices for tax purposes).
Your rights
Under GDPR you have the right to access, correct, export, and delete your data, as well as to object to or restrict certain processing. You can act on most of these directly from your account settings, or contact us at the address below.
Cookies and browser storage
We use strictly necessary cookies and browser storage for security, authentication, preferences, and core service operation. The cogni:consent cookie stores your optional-tool choices for 180 days. If you allow product-quality reporting, Grafana Faro uses browser storage for a technical session identifier. If you allow advertising measurement, Meta may set or read identifiers such as _fbp and _fbc. Faro and Meta storage is not activated before the relevant choice is enabled; withdrawing that choice stops collection and removes the associated browser identifiers we control.
Product quality and error reporting
With your consent, Grafana Faro collects browser errors, console events, page and navigation information, performance measurements, request traces, session identifiers, and basic browser and operating-system data. We use this information to diagnose technical problems and improve Cogni. Collection starts only after you enable Product quality and error reporting and stops when you disable it. Telemetry is sent through our same-origin collector to Grafana Cloud. Grafana acts as our processor under its data-processing terms and may process data outside the EEA using applicable transfer safeguards.
Advertising measurement with Meta
With your consent, the Meta Pixel sends Meta Platforms Ireland Limited page-view information, the page URL and referrer, browser and operating-system information, IP-derived request data, and Meta identifiers so we can measure whether our Facebook and Instagram campaigns work. We do not activate the Pixel before Advertising measurement is enabled. For collection and transmission through the Pixel, we and Meta are joint controllers under Article 26 GDPR; Meta is an independent controller for subsequent processing under its own privacy policy. Meta may combine this information with data from its services and transfer it outside the EEA using its stated safeguards.
Managing or withdrawing consent
You can accept, reject, or separately control product-quality reporting and advertising measurement in Your privacy choices on this page. Optional tools are off until you choose otherwise. Changing a switch takes effect immediately without requiring you to delete your account. Withdrawing consent does not affect processing that was lawful before withdrawal.
Changes to this policy
If we make material changes, we'll notify you by email or in-app before they take effect. The current version is always available at this page.
For privacy requests or questions, contact us at fundacjawceen@gmail.com