Privacy policy

Who this covers

This policy covers the Coop app on iOS and Android and the Coop website. There is no Coop user account.

What stays on your phone

Coop records are stored on your device. Kip chats, drafts, memories, preferences, action receipts and check-ins are local too. Widgets read a local snapshot. Optional processing is described below.

Sensors

Steps, shake, and squats use sensors on the phone. Coop does not use HealthKit or Google Fit.

Sensor readings are not stored. We only keep that you finished the mission, on the phone.

What gets sent, and when

Four missions can send a photo: Object hunt, Sky, Make bed, and Custom proof. Other camera missions stay on the device.

When you use one of those four, Coop sends one small image. EXIF, GPS, and account ids are stripped. The phone also sends a device check token so the endpoint cannot be abused. That token is not a Coop login.

A Cloudflare worker holds the model key. The worker discards the frame when the request ends and does not write it to logs. OpenAI checks the image under their API terms. It is not used to train a model.

If the check fails or the network is down, Coop falls back on the device so you are not stuck.

Kip sends relevant messages and enabled Coop records through Coop’s shared Cloudflare backend to OpenAI. Recorded audio is sent for transcription; replies can be sent for speech. Live audio starts only when you choose Live. Ending Live, backgrounding, or an alarm interruption closes the microphone. No automatic calls or background AI reasoning are provided.

The Kip service handles content temporarily, without a transcript or audio database or ordinary content logs. OpenAI API terms and account retention controls apply. We do not promise zero provider retention.

Raw audio is temporary by default. You can choose to keep recordings locally. Audio files are excluded from backups.

Your controls

On-device missions only controls mission photos. Kip record categories start enabled. What Kip knows lets you turn them off, edit or forget memories, and stop new memories.

Payments

Apple or Google handle payment. RevenueCat stores receipts tied to your store account, not a Coop login. We do not receive your full card number.

Kip uses attested anonymous credentials in secure storage to verify Pro and meter usage without a Coop login. Installation bindings expire after 30 days. Usage counters last two days; request and webhook IDs seven days; ended-session metadata one day. Daily cleanup can add one day. Pending provider termination records stay until termination is confirmed.

Backups

Export writes a file you keep. You can lock it with a passphrase, or save it open after a warning. Import asks for that passphrase only when the file is locked.

Pro can keep a weekly copy in app storage on this phone. Your phone's own backup may include it. We never see the file.

Backups can include Kip chats, memories, preferences and check-ins, with optional passphrase encryption. Credentials and live tokens are excluded. Import merges by local ID precedence or replaces data; imported receipts never execute actions. Subscription restore restores access, not chats. There is no automatic chat sync.

The website

The Coop website is hosted by Vercel. Vercel Web Analytics counts page views and button taps without cookies and without a name or email.

We do not run site ads or sell site data. Kip keeps minimal usage and reliability metadata without message content in ordinary logs.

Erase and leave

Deleting a chat can also delete its derived memories. Settings offers forget-memory and Kip-data deletion without Pro. Full erasure ends sessions and clears local data. Offline service deletion retains only a secure revocation credential and retries when connected. Usage hashes can remain briefly to prevent quota resets.

Deletion cannot remove your exported files or override provider and store retention. Importing an older backup can restore its contents. Store payment history remains with Apple, Google and RevenueCat.

Children

Coop is not directed at children under 13. Do not use it if you are under 13.

Your rights

Because alarm data stays on your phone, we cannot send you a server copy of it. You already have it. You can export or erase it in the app.

For payments, use Apple or Google tools. For a privacy question we can answer, write to admin@umratech.com.

Changes

We may update this policy. The date at the top is the current version.

Contact

Privacy questions: admin@umratech.com