The App is designed around one principle: your health data never leaves this device.
Our Approach (Privacy First)
In the App, reading your Apple Health (HealthKit) data and interpreting it with AI (your daily insight, observations, your weekly review, and chatting with Coco) all happen entirely inside your device. The values of your health data are never sent to our servers or to any external AI service. The on-device AI can generate insights even when your device is offline.
The only thing we send off the device is anonymous usage data (facts about actions) used to improve the App's quality, as described below.
Information Handled Only on Your Device
The following is read and stored on your device and is not sent to us or any third party.
- Health data read from Apple Health (sleep, steps, heart rate, heart rate variability, active energy, body weight, water, and so on)
- Moods you log (a two-axis selection and an optional short note)
- The history of insights and daily messages Coco generates
- App settings such as your free-trial count and notification time
Information We Collect (Usage Analytics)
To improve the App's quality, we collect anonymous usage data through Firebase Analytics (Google LLC). We collect only "facts about actions" — never the values of your health data or the contents of your conversations.
3.1 What we collect
- Feature-usage events (e.g., generated an insight; logged mood, weight, water, or a workout; viewed a metric's detail; viewed the paywall; completed, canceled, failed, or restored a purchase; chatted with Coco)
- Metadata attached to each event (the type of entry, a "band" for input length, which AI was used — on-device AI or rule-based — free vs. paid, Health connection status, and so on)
- General usage statistics that Firebase collects by default (launches, sessions, device type, OS version, app version) and an anonymous app-instance identifier
- The fact that a purchase occurred (which may include amount and currency)
3.2 What we do NOT collect
- The actual values of your health data (sleep duration, heart rate, body weight, steps, etc.)
- The text of your mood notes or your conversations with Coco
In-App Purchases and Subscriptions
Downloading the App, and logging health data, your condition score, and viewing metrics are free. Coco's daily insight (on-device AI) is free to try for the first few days, after which the paid plan "Coco Plus" makes it unlimited (monthly / yearly / lifetime; the yearly plan includes a 7-day free trial). Plus also unlocks chatting with Coco, connection-finding, and your weekly review.
- Payment information: Payments are processed through Apple's App Store. Apple manages payment details such as credit-card numbers; we never receive them.
- Subscription status: To manage and verify whether a plan is active, its type, and trial status, we use RevenueCat (RevenueCat, Inc.). RevenueCat receives your purchase/subscription status and an associated anonymous in-app identifier. We do not share contact details such as your name or email.
- The fact of a purchase: Starting, completing, failing, or restoring a purchase is also recorded as an anonymous event in the usage analytics above (which may include amount and currency).
- Ad-effectiveness measurement (Apple Search Ads): If we run Apple Search Ads, we obtain an "attribution token" via Apple's mechanism (AdServices) and relay it through RevenueCat to understand, anonymously, which ad led to use. This is Apple's privacy-preserving mechanism — it is not the advertising identifier (IDFA) and does not require tracking permission (ATT). It contains no personal information or health data.
Notifications, Siri, and Shortcuts
The morning insight notification is scheduled as a local notification on your device. Its content and time are never sent to an external server.
The App supports Siri commands like "Log my weight in Coco" and logging shortcuts (App Intents). These run on your device, and entries are written to Apple Health or to on-device storage. Voice recognition by Siri follows Apple's Siri mechanism.
What the App Does Not Use
The App does not use the following information or capabilities.
- Advertising or ad SDKs, or advertising identifiers such as IDFA
- Sending health data or conversations to external AI / machine-learning APIs (OpenAI, Google Gemini, Claude, etc.) — all AI runs on your device
- Location, contacts, photos, microphone, or camera
- Account registration (email, password, or social sign-in)
Third-Party Services (Disclosure and Processors)
We use the following external services only to the extent necessary to provide and improve the App.
- Firebase Analytics (Google LLC): anonymous usage analytics
- RevenueCat (RevenueCat, Inc.): managing subscription status and processing ad attribution
- Apple (App Store / Search Ads): app distribution and payment processing, and search-ad attribution (AdServices)
International Transfer
Some of the external services above host servers outside Japan (such as in the United States). As a result, usage data and subscription status may be processed or stored outside Japan; we handle this appropriately in accordance with applicable laws.
Security
Keeping the most important information — such as your health data — on the device is itself the most reliable safeguard. The analytics data we send off the device contains no content (health-data values or conversations), is anonymized, and is transmitted over encrypted connections. In the unlikely event of a leak involving information we handle, we will work to verify the facts, investigate the cause, and prevent recurrence, taking the steps required by law.
Retention and Deletion
On-device data (your mood logs, insight history, and app settings) is retained for as long as you use the App and is deleted when you uninstall it. Health data read from Apple Health is managed by Apple's Health app; you can delete it or revoke the App's access from the Health app or Settings.
The usage analytics we collect are retained only as long as necessary to achieve their purpose, and are appropriately deleted or anonymized when no longer needed.
Your Rights
You may request disclosure, correction, suspension of use, or deletion of the information we handle. You can revoke Health access at any time from Settings › Privacy & Security › Health. You can manage or cancel your subscription from Settings (your Apple ID subscriptions). For other requests, please contact us using the details below; after verifying your identity, we will respond as promptly as the law allows.
Children's Privacy
The App is not designed to collect personal information from a specific age group. No account is required, and your health data and entries remain on your device. We do not knowingly collect personally identifiable information from children.
Changes to This Policy
We may revise this policy in response to changes in laws or the service. If there are significant changes, we will announce them on this page or on our website.
Contact
Kagoshima-shi, Kagoshima 892-0823, Japan