Last updated 3 November 2026

Privacy Policy

This policy covers the Cosapp.si app for iPhone, Android and the browser at app.cosapp.si, the cosapp.si website and the Cosapp.si waitlist. It explains what leaves your device, why, who handles it for us, how long we keep it and how to get it deleted.

In short:

• Without an account, your builds, events and photos stay on your device. We never see them.
• An account is optional for your personal studio. Pro cloud sync and private groups need an account; joining a group is free when the feature is available.
• We run no analytics, no crash reporting, no ads and no cross-app tracking, and the website sets no cookies.
• We never sell your personal information or share it for advertising.
• You can delete your account from the app; shared group text is retained as described under private groups.

Who we are

Cosapp.si is owned and operated by Shuk Labs LLC, a New York limited liability company. Shuk Labs LLC decides how the personal information described here is used (it is the “controller”). “We” and “us” in this policy mean Shuk Labs LLC.

Postal address: Shuk Labs LLC, 418 Broadway Ste N, Albany, NY 12207, United States. Email: [email protected].

Using the app without an account

Everything you make in Cosapp.si (builds, pieces, tasks, budgets, events, schedules, packing lists, notes and photos) is stored in the app’s own storage on your device. Without an account none of it is sent to us or to anyone else. In the web app, the local planner and photos are kept in your browser’s IndexedDB storage. Clearing site data or ending a private browsing session can erase that copy; browser persistence does not prevent you from clearing it. Keep an exported backup somewhere safe.

• Personal reminders are scheduled by your phone’s own notification system; the reminder times are included in Pro sync when enabled. The web app can edit those times but does not send notifications. Group update notifications, when enabled, use Expo push as described below.
• Backups you export are a file on your device. It goes wherever you choose to send it, such as Files or iCloud Drive, under that service’s terms. We never receive it.
• Uninstalling the phone app deletes its local data from the device, so keep a backup.

If you create an account

You can sign in with Apple, with Google, or with an email address and password. We then store:

• Your email address and, if the provider shares them, your name and (from Google) a link to your Google profile photo. With Sign in with Apple you can hide your email address; we then only get Apple’s relay address.
• For an email and password login, a salted hash of your password (never the password itself) and short-lived one-time codes we email you to confirm the address or reset the password.
• The username and display name you choose, and the sign-in methods linked to your account.
• For Sign in with Apple, a token Apple issues so that we can revoke Cosapp.si’s access when you unlink Apple or delete your account.
• Session tokens that keep you signed in. The phone uses the system’s secure storage; the web app uses your browser’s localStorage.
• An optional profile picture (see Photos and the camera).

Your account has no public profile or feed. When you join an invite-only group, its members see your display name and the content you explicitly share, never your email address.

Cosapp.si Pro: cloud backup and sync

If you subscribe to Cosapp.si Pro and turn sync on for a device, the app uploads a copy of your personal studio, including its photos, to your account, and keeps your devices in step. Your phone keeps its local copy; the web app keeps a browser copy of the synced data. Synced data and photos are private to your account and are only served to your own signed-in devices.

Subscriptions are sold and billed by Apple (App Store) or Google (Google Play). We never see your card or payment details. Purchases happen in the phone app, not the browser. RevenueCat manages the subscription for us: when you open the Pro screen on the phone the app starts RevenueCat with your account’s ID (not your email or name), and RevenueCat receives the purchase and renewal records from the store. We store only whether your plan is active and when that last changed. If you never open the Pro screen on the phone, nothing is sent to RevenueCat except when you delete your account: we send your account ID to RevenueCat to remove any subscriber record, even if you never used Pro.

Private groups (when available)

Groups are cloud-first shared spaces, separate from your local-first personal studio. Convex stores group names, membership, invitations, events, character claims, chosen progress snapshots, checklists, notes and small photo previews. Members can read that shared content and cache it on their devices. Your personal notes, costs and photos are not automatically shared. Sending a build copy is an explicit file handoff and can include those details.

Free groups keep 256px album previews for 90 days after the event, and roster cover previews for 90 days after upload. A Pro owner enables hosted full-size photos on Cloudflare R2, when configured, and no preview expiry while Pro is active. If the owner's Pro ends, there are 14 days of grace, then 30 days to save hosted full-size photos before deletion. The group stays live; the free preview retention clock starts no earlier than the downgrade. Inactive free groups become read-only after a year without edits and with no future events. Group deletion markers and shared text remain to preserve the remaining members' plan.

Opens and edits record recent activity, not continuous location or background presence. If you allow notifications, we store your Expo push token, device platform and time zone and send generic group-update notices through Expo, Apple and Google. Per-group settings control mute, categories, quiet hours and event-day notifications. Reports are kept in a private support inbox for investigation. Blocking hides a member's content and prevents invitations between you. Contact [email protected] for removal or safety concerns.

Leaving removes future access but cannot recall copies another member already saved. Deleting your account removes memberships and your hosted photos; shared text remains attributed to “Former member”. An owner's departure transfers the group to another member. Group caches are not included in personal backups or personal Pro sync.

Photos and the camera

• The app reads only the photos you pick yourself, when you add one. It never scans your library.
• Build, piece, event and reference photos added from this version on are resized and re-encoded on your device before the app stores or syncs them. The details your camera adds to a photo, such as when and where it was taken, the camera model and any embedded thumbnail, are removed on the device first. Only the picture itself is kept. Without Pro these photos stay on your device; with Pro that cleaned copy is backed up to your account. Existing cloud photos and backups made by earlier versions are not changed and may still contain camera details, including location.
• Profile pictures are cropped and resized to a small square on your device, with photo metadata such as location left out. Our server checks the image and re-encodes it before storing it.
• You can take build, piece, event and profile photos with the camera. The app uses the camera for nothing else.

We use your photos only to store and display them to you and, for explicitly shared group photos, to group members. We never use them to train AI models.

Emails

We send email only to confirm a sign-up or a new email login, to send a password-reset code, and, if you joined the waitlist and confirmed, about the launch. We do not send marketing to the email address on your account. Every launch or product email will include an unsubscribe link and our postal address.

The waitlist

When you join the waitlist on cosapp.si we store:

• Your email address.
• A record of your consent: which version of the sign-up wording you saw (listed at the end of this page) and when you agreed.
• Whether you have confirmed or unsubscribed, and when; and when we last sent you a confirmation email.
• That you signed up on cosapp.si.

Joining sends one plain email with a confirmation link (double opt-in). Until you open it you stay unconfirmed and get nothing else from us. Once you confirm, we email you about the launch of Cosapp.si and occasional product updates. The legal basis is your consent, which you can withdraw at any time with the unsubscribe link in every email. We do not store your IP address, browser details or location with your sign-up.

This website

cosapp.si sets no cookies and runs no analytics or ads. Fonts are served from cosapp.si itself, not from a third party. Cloudflare, which hosts the site (with Vercel until our move to Cloudflare is complete), processes your IP address to deliver pages and keeps standard server logs under its own policy.

What we do not collect

• Analytics or crash reports, in the app or on the website. Groups record only the recent activity described above, not general usage tracking.
• Advertising identifiers, or any tracking across other companies’ apps and websites.
• Your location from the device. Event venues and cities are text you type.
• Contacts, calendars, health data or any photo you have not picked.
• Payment card details (Apple and Google handle payment).

How we use information, and on what basis

We use the information above only to:

• sign you in, keep your account secure and let you link or unlink sign-in methods;
• back up and sync your personal studio between your devices, when you have Pro;
• provide the private sharing and notifications described under groups;
• check whether your subscription is active;
• send the emails described above;
• stop abuse, such as limiting how often codes can be emailed to one address; and
• meet legal obligations and enforce our Terms of Service.

If you are in the European Economic Area, the UK or Switzerland, our legal bases are: performing our contract with you (your account, sign-in, Pro sync and private group sharing); your consent (waitlist and launch emails); our legitimate interest in keeping the service secure and preventing abuse; and compliance with legal obligations.

Who processes it for us

We use a small number of service providers. Each acts only on our instructions:

• Convex runs our backend: the account database, synced data and photos, profile pictures and the waitlist, as well as private group data and small previews when groups are enabled.
• Cloudflare hosts this website and the web app on Pages, and stores Pro groups' full-size albums on R2 when configured.
• Expo delivers group push notifications to Apple and Google using device push tokens.
• RevenueCat manages Pro subscriptions.
• Resend sends our emails.
• Vercel also hosts the website until our move to Cloudflare is complete.
• Apple and Google provide sign-in, if you choose them, and sell and bill subscriptions through their app stores. They handle that information under their own privacy policies.

We may also disclose information if the law requires it, or where needed to protect the rights, safety or security of our users, of Shuk Labs LLC or of others. If Shuk Labs LLC or Cosapp.si were ever sold or merged, your information would move under this policy and we would tell you.

Where your data is stored

Shuk Labs LLC is in the United States, and our providers store data in the United States. Transfers from the EU, the UK and Switzerland rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework (and their UK and Swiss extensions), as each provider offers under its data processing agreement.

How long we keep it

• Personal studio data on your phone stays in the app’s storage until you uninstall the app; the web app’s local copy stays in browser storage until it is cleared. Deleting an item in the app marks its record as deleted rather than erasing it; the record, including any notes, remains on your device, hidden from the app’s normal views.
• With Pro sync, deleting a personal studio item removes its content, including any notes, from the cloud. The cloud keeps only a deletion marker so your other devices delete the item too. The marker holds the item’s record ID, which kind of item it was, when it was created, last changed and deleted, and a sync sequence number; a deleted photo’s marker also holds its file name and the ID of the build or event it was in, and a deleted event day’s marker holds the event’s ID and the day’s date. Every other field is emptied or set to a fixed default. Record IDs and photo file names are made by the app, never typed by you: random codes for what you create, except that the ID of an event day or of a packing item made from a piece is built from the related items’ IDs (and the day’s date). Records deleted before this was in place have been emptied the same way. Deletion markers stay in the cloud until you delete your account. Deleting your account does not erase the records on your device.
• Synced photo files are deleted from the cloud when no undeleted photo record uses them, or when you delete your account. Account data and your current profile picture are kept until you delete your account; replacing or removing your profile picture deletes the old file.
• The log of sign-in code emails sent to an address: deleted daily, so kept for up to about 25 hours.
• Unfinished attempts to link a Google account: deleted once they expire.
• Unconfirmed waitlist sign-ups: deleted automatically after 30 days.
• Confirmed waitlist addresses: kept until launch emails are done, then deleted or, if you stay subscribed, moved to the Cosapp.si mailing list under the same consent.
• If you unsubscribe, we keep only your address and the date so that we never email you again. Ask and we will delete that too.
• Purchase records are kept by Apple or Google, and by RevenueCat until your account is deleted.

Deleting your account

In the app, open Settings and tap Delete account below the groups. This permanently deletes your account, your sign-in methods, your profile picture and your personal Pro cloud-sync data including photos, and revokes Sign in with Apple. We also send your account ID to RevenueCat to remove any subscriber record, even if you never opened the Pro screen. Your personal studio stays on the device, and you can keep using Cosapp.si without an account. Group memberships and hosted photos are removed as described above. If you no longer have the app, email [email protected] from the address on the account and we will delete it for you.

Deleting your account does not cancel a Pro subscription: Apple or Google keep billing until you cancel it in your App Store or Google Play subscriptions. Copies in our providers’ routine backups may remain for a short time until those backups expire.

Your rights

Wherever you live, you can ask us for a copy of your personal information, have it corrected or deleted, withdraw consent or object to how it is used. The app’s backup export gives you your personal studio content in one file; group data is separate, as described above. Email [email protected] and we will answer within 30 days. We may need to confirm that a request comes from the account’s owner.

If you are in the EU, the UK or Switzerland you can also complain to your data protection authority. California residents have the same rights under California law. We do not sell or share personal information as California law defines those terms, and we do not use it for targeted advertising.

Children

Cosapp.si is for people aged 13 and over and is not directed to children under 13. Please don’t create an account or join the waitlist if you are younger. If your country sets a higher age for agreeing to the use of your data (up to 16 in some EU countries), you need a parent’s or guardian’s permission to create an account. If we learn that we hold personal information from a child under 13, we delete it. Parents can contact us at [email protected].

Security

Data travels encrypted between the app, the website and our providers. Synced data, photos and profile pictures in your personal studio are served only to your signed-in devices. Group content is served to current members; short-lived full-photo download links can be used by anyone holding them until they expire. Only the developer can reach the backend, through accounts protected with two-factor authentication. No system is perfectly secure; if your information were ever exposed, we would tell you and, where the law requires, the authorities.

Changes

If this policy changes, we update it here and change the date at the top. If a change is significant, we will also tell you in the app or by email before it applies. Using your information in a new way that needs consent will ask for your consent again.

Contact

Questions or requests about your privacy: [email protected], or write to Shuk Labs LLC, 418 Broadway Ste N, Albany, NY 12207, United States.

Sign-up wording on record

Each waitlist sign-up stores the version of the wording shown next to the form:

Version 2026-10-30

By joining you agree to a confirmation email now and Cosapp.si launch and product-update emails later. You must be 13 or older. Unsubscribe any time.