Privacy Policy

This Privacy Policy (“Policy”) explains how Cozy Technologies, Inc. (“Cozy,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit https://www.getcozy.org, use the Cozy mobile applications, or communicate with us (collectively, the “Services”). It also explains the choices and rights available to you.

1. Scope

This Policy applies to personal information we process as the operator of the Services. It does not apply to websites, applications, or services operated by others, even if they are linked from Cozy. Those services are governed by their own privacy policies.

Some Cozy features described below may not yet be available in every version or location. We collect a category of information only when the relevant feature is available and you use it. We will update this Policy and any applicable app-store privacy disclosures before materially changing our data practices.

2. Information we collect

The information we collect depends on how you interact with the Services.

2.1 Information you provide

• Account information. If Cozy offers accounts and you create one, we may collect your email address, display name, login credentials or authentication token, and account preferences. If you sign in through Apple, Google, or another provider, we receive the information that provider makes available with your permission.
• Preferences and saved activity. You may choose to save favorite scenes, playback settings, downloads, timers, or similar preferences. Some settings may remain only on your device; others may be associated with your account if sync is available.
• Communications. If you contact us, participate in a survey, join a waitlist, or send feedback, we collect the information you provide, such as your email address, message, and any attachments.
• Marketing preferences. If you ask to receive product news or promotional messages, we collect your contact information and communication preferences.

2.2 Information collected automatically

• Website analytics. Our website uses Vercel Web Analytics to collect anonymous, aggregated information such as pages viewed, referral source, date and time, general geographic area, browser, operating system, and device type. Vercel Web Analytics does not use cookies and does not associate these data points with an individual or IP address.
• Website performance. We use Vercel Speed Insights to measure page-load and responsiveness metrics, along with route, device type, browser, operating system, network type, country, and event time. These measurements are not designed to identify you or reconstruct your browsing session.
• Service and device data. When you use the app, we may receive information needed to deliver and secure it, such as app version, device and operating-system type, language, time zone, network information, session timestamps, feature interactions, and error or diagnostic information. The app-store listing and in-app notices will identify the data collected by the version you use.
• Local storage. The Services may use device storage or similar technologies to remember settings, maintain a session, and support offline features. We do not currently use advertising cookies or third-party tracking pixels on the Cozy website.

2.3 Purchases and subscriptions

If you buy a subscription or other digital content through the Apple App Store, Google Play, or another marketplace, that marketplace processes your payment. We may receive a purchase receipt or transaction token, product purchased, subscription status, renewal or expiration date, storefront or country, and limited information about refunds. We do not receive your full payment-card number or marketplace password.

2.4 Notifications and device permissions

If you enable notifications, we or our notification provider may process a device push token and your notification preferences. Cozy will request access to protected device capabilities only when needed for a feature you choose to use. You can revoke a permission at any time in your device settings, although the related feature may stop working.

2.5 Information from other sources

We may receive information from app marketplaces, authentication providers, hosting and security providers, and other vendors acting on our behalf. We may combine it with information described in this Policy when needed to provide the Services, validate a purchase, prevent fraud, or respond to your request.

2.6 Sensitive information

Cozy is an ambient entertainment and general-wellness service. We do not currently seek to collect precise location, contacts, photos, microphone recordings, health records, or biometric information. Please do not send us sensitive personal information in a support request unless it is necessary for us to assist you.

3. How we use information

We use personal information to:

• provide, personalize, maintain, and troubleshoot the Services;
• create and secure accounts, sync preferences, and restore purchases;
• verify subscription status and deliver purchased features or content;
• respond to support requests, feedback, and other communications;
• send service, security, legal, and—if you opt in—marketing messages;
• measure performance, understand aggregated usage, and improve Cozy;
• detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service; and
• comply with law, enforce agreements, and establish, exercise, or defend legal claims.

3.1 Legal bases for processing

If privacy law requires a legal basis, we rely on one or more of the following: performance of our contract with you; our legitimate interests in operating, securing, supporting, and improving Cozy; compliance with legal obligations; protection of vital interests; and your consent. Where we rely on consent, you may withdraw it at any time without affecting processing that occurred before withdrawal.

4. How we disclose information

We may disclose information in the following circumstances:

• Service providers. Vendors may process information on our behalf for services such as hosting, content delivery, analytics, performance monitoring, authentication, subscription management, customer support, communications, and security. They may use the information only to provide services to us or as permitted by law and must protect it consistent with their contractual obligations.
• App marketplaces and platforms. We exchange limited information with Apple, Google, and other platforms to distribute the app, validate transactions, provide platform features, process refunds, and prevent fraud. Their independent processing is governed by their own policies.
• Legal and safety reasons. We may disclose information if we reasonably believe it is necessary to comply with law or legal process; protect the rights, safety, and property of Cozy, our users, or others; investigate fraud or abuse; or enforce our agreements.
• Business transactions. Information may be reviewed or transferred as part of a financing, merger, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, subject to appropriate confidentiality protections where required.
• With your direction or consent. We may disclose information when you ask us to or give us permission.

We may use and disclose information that has been aggregated or deidentified so that it cannot reasonably be linked to you. We will not attempt to reidentify deidentified information except to test whether our deidentification processes comply with law.

4.1 No sale, sharing, or targeted advertising

We do not sell personal information for money or other valuable consideration. We do not share personal information for cross-context behavioral advertising or process it for targeted advertising as those terms are defined by applicable U.S. state privacy laws. We also have not done so during the preceding 12 months. If this changes, we will update this Policy and provide any legally required opt-out mechanism before beginning that practice.

5. Your choices and controls

• Account. If accounts are available, you may update certain details in the app. You may request account deletion from the in-app settings or by emailing us. Deleting the app from your device does not, by itself, delete an account or cancel a subscription.
• Subscriptions. Manage or cancel a marketplace subscription through the subscription settings for the marketplace account used to purchase it.
• Marketing. You may unsubscribe from marketing email using the link in the message. We may still send non-promotional messages about your account, purchases, security, or legal updates.
• Push notifications. You can disable push notifications in the app or device settings.
• Device permissions. Review or revoke app permissions through your operating-system settings.
• Do Not Track. Because there is no consistent industry standard for browser “Do Not Track” signals, our website does not respond to them. We do not use the website for targeted advertising or cross-site tracking.

6. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. Retention depends on the type of information, why we collected it, whether an account remains active, and legal, security, tax, accounting, and dispute-resolution needs.

• Account and synced preference data is generally retained while your account is active and deleted or deidentified after a valid deletion request, subject to backup cycles and legal exceptions.
• Support communications are generally retained for up to three years after the matter is closed, unless a longer period is reasonably needed for security, legal, or recordkeeping purposes.
• Transaction and subscription records may be retained for up to seven years where needed for tax, accounting, fraud prevention, or legal compliance.
• Anonymous website analytics and performance data is retained according to our provider configuration and is not maintained as a user profile.

When information is no longer needed, we delete it, deidentify it, or isolate it from further use until deletion is possible. We may retain information when necessary to comply with law, protect the Services, resolve disputes, or enforce agreements.

7. Your privacy rights

Depending on where you live and subject to legal exceptions, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information. You may also have the right to object to or restrict certain processing, withdraw consent, or appeal our decision on a request.

To submit a request, email us at legal@getcozy.org and describe the request. We may ask for information reasonably necessary to verify your identity and authority. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and direct identity verification. We will not discriminate against you for exercising a privacy right.

7.1 Additional U.S. state disclosures

The categories of personal information we may have collected during the preceding 12 months are identifiers; customer-record information; commercial or transaction information; internet or other electronic activity; approximate geolocation derived from network information; and inferences limited to content preferences. The sources, purposes, and recipients for these categories are described in Sections 2–4. We do not use or disclose sensitive personal information for purposes that require a right to limit under California law.

7.2 EEA, United Kingdom, and Switzerland

Cozy Technologies, Inc. is the controller of personal information covered by this Policy. In addition to the rights above, you may have the right to lodge a complaint with your local data-protection authority. We encourage you to contact us first so we can try to resolve your concern.

8. Children’s privacy

Cozy is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If local law sets a higher minimum age for a child to consent to data processing, a parent or legal guardian must provide any required consent. If you believe a child has provided personal information to us in violation of this section, contact us and we will take appropriate steps to delete it.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for using a unique password, protecting your device and credentials, and notifying us if you suspect unauthorized account access.

10. International data transfers

Cozy is based in the United States. We and our service providers may process information in the United States and other countries that may have different data-protection laws than your home country. Where required, we use recognized safeguards for international transfers, such as contractual protections, and apply supplementary measures as appropriate.

11. Changes to this Policy

We may update this Policy to reflect changes in the Services, our practices, or the law. We will post the revised Policy here and update the date above. If a change materially affects your privacy rights, we will provide additional notice when required, such as through the app or by email. The version posted when information was collected will govern that processing unless applicable law permits otherwise.

12. Contact us

For questions, concerns, account-deletion requests, or privacy-rights requests, contact:

Please include “Privacy Request” in the subject line and tell us the country and, if applicable, U.S. state where you live so we can respond under the correct law.