Privacy Policy

Who we are

Cogni is operated by Cognifly Ltd (“Cogni”, “we”, “us”). The product is a study tool: notes, flashcards, spaced-repetition reviews, sync across devices, and optional AI card generation.

Questions about this policy, access, export or deletion: [email protected].

What we collect

Account. If you create an account we store your email address. If you sign in with Google or Apple we receive the identifier and email those providers share with us (Apple may give us a private relay address instead of your real one). We do not store your password in a recoverable form; authentication is handled by our identity provider.

Study content. We store the notes, flashcards, images and other media you upload, review history, streaks, deck settings, imported Anki decks, and anything you save so the product can sync and schedule reviews.

Technical logs. We keep device type, operating system, app or browser version, language, approximate location derived from IP, timestamps, and error reports so we can run and fix the service.

Payments. Web checkout goes through Stripe. Mobile purchases go through the App Store or Google Play, with subscription status synced by RevenueCat. We store plan, store, and period information. We do not store full card numbers or CVV.

Support. If you write to us we keep the message and the email you used, so we can reply and keep a record of the request.

This website. If you accept analytics cookies we collect page views and which links you use, as described below. If you decline, we only receive aggregated, cookieless counts.

How we use it

We use this information to:

• create and secure your account, and sign you in;
• host, sync and display your notes and cards across web, iOS and Android;
• schedule reviews with spaced repetition and apply free-plan limits;
• generate cards when you ask, from notes, a PDF, a photo or a topic;
• process subscriptions and show you the plan you paid for;
• diagnose crashes, abuse and outages;
• understand which pages on this site help people find Cogni;
• reply to support, privacy and billing requests;
• comply with law, enforce these terms, and protect Cogni, our users and the public.

We do not sell your study content or personal information, and we do not use it to show you third-party ads.

Legal bases (UK GDPR / GDPR)

Where those laws apply, we process personal data because:

• it is necessary to perform the contract (account, sync, reviews, paid features you buy);
• we have a legitimate interest in keeping the service secure, understanding product and marketing-site usage, and improving Cogni — balanced against your rights;
• you have consented, for analytics cookies on this website;
• we must comply with a legal obligation (for example tax, accounting, or a binding request from a public authority).

You may withdraw cookie consent at any time without affecting other processing that does not rely on consent.

Analytics, cookies and crash reports

This website (cogni.cards). We use Google Analytics 4 to see which pages people visit and which links they use (page views and clicks through to the app or the stores). Analytics cookies are set only after you accept them in the banner. If you decline, Google receives only aggregated, cookieless counts. IP addresses are truncated, advertising features and Google signals are off, and Google processes the data on our behalf under its data processing terms. You can change your choice at any time via “Analytics settings” in the footer. The website and web app share your analytics choice in a cookie on cogni.cards for 180 days. You can change it through Analytics settings in the website footer.

Web app (app.cogni.cards). We use Sentry for crash reporting only: uncaught errors and error-boundary crashes. There is no performance tracing, no session replay, and we do not send names, emails or card text as a matter of configuration. If a DSN is not configured, Sentry is not loaded at all. We use Google Analytics on the Cogni website and web app to measure visits and key actions. Analytics cookies are allowed only if you accept. Your choice applies to both and can be changed using Analytics settings in the website footer. The website and web app share your analytics choice in a cookie on cogni.cards for 180 days. You can change it through Analytics settings in the website footer.

Mobile apps. We use PostHog for product analytics (how the app is used) and Adjust for campaign attribution (which ads or links bring new users). You can limit tracking in iOS and Android settings (for example App Tracking Transparency, or resetting/limiting the advertising ID).

We do not run a session-replay or keystroke-capture tool in Cogni.

Who processes data for us

We share data only with services that help us operate Cogni, under contracts that limit them to our instructions:

• Supabase — authentication and the database that holds accounts and study data;
• DigitalOcean — hosting the website, the web app and the API, and object storage (Spaces) for images and media you upload and for the ready-made deck library;
• Stripe — web payments and the customer billing portal;
• RevenueCat — subscription entitlements shared across web and mobile;
• Apple and Google — App Store / Google Play purchases, and Sign in with Apple or Google if you choose those methods;
• Google Analytics — measurement on this website, as above;
• Sentry — crash reports in the web app;
• PostHog — product analytics in the mobile apps;
• Adjust — mobile campaign attribution;
• AI providers — only when you use card generation: the material you submit is sent so they can return suggested cards.

Some of these companies are in the United States or other countries outside the UK/EEA. Where required we rely on adequacy decisions or standard contractual clauses.

We may also disclose information if the law requires it, to protect rights and safety, or if Cogni is sold or restructured, in which case the new operator must honour this policy or give you notice.

AI-generated cards

When you ask Cogni to generate flashcards from notes, a PDF, a photo or a topic, the content you submit is sent to AI providers that process it on our behalf and return suggested cards. We use that material to provide the feature you asked for. We do not sell it, and we do not use your notes or cards to train a Cogni model.

Generated text can be incomplete, outdated or wrong. You decide what to save. Do not submit information you are not allowed to share (exam embargoes, other people’s private data, secrets, or content you do not have the right to use).

How long we keep it

Account and study data stay while your account is open. If you ask us to delete the account we remove or anonymise personal data, except records we must keep for billing, tax, security, dispute-handling or the law (for example Stripe and store receipts, which those providers also keep under their own rules).

Support email is kept as long as needed to handle the request and maintain a basic record.

Analytics cookies on this site last according to Google’s periods for GA4; your consent choice stays in the browser until you clear site data or change it.

Crash reports are retained in Sentry according to that product’s retention settings, for diagnosing issues.

Security

We use HTTPS in transit, access controls on the systems that hold data, and industry-standard practices at our hosts. No online service is perfectly secure. Keep your password to yourself, use a unique one, and tell us at [email protected] if you think your account was used without you.

Your rights

You can access, correct or export much of your study data from the app, and you can ask us to delete your account.

Depending on where you live (including the UK, EEA, Switzerland, and some US states such as California) you may also have the right to access, correct, delete, restrict or object to certain processing, to receive a copy of data you provided, to withdraw consent, and to complain to a supervisory authority (in the UK, the ICO).

Write to [email protected]. We will respond within the time the law allows — typically one month. We may need to verify that the request comes from the account holder.

We do not sell personal information as that term is used in US state privacy laws, and we do not share it for cross-context behavioural advertising.

Children

Cogni is not directed at children under 13, and we do not knowingly collect their personal information. You must be old enough to agree to these terms in your country (and at least 13). If you believe a child has created an account, contact us and we will delete it.

Changes

We may update this page when the product or the law changes. The date at the top is the latest version. For material changes we will also try to notify you in the product or by email. Continued use after a change means you accept the updated policy, except where the law requires a different form of consent.