Privacy policy

Who this covers

This policy covers the Coop app on iOS and Android and the Coop website. There is no Coop user account.

What stays on your phone

Alarms, mission setups, wake history, streaks, settings, barcodes, place hashes, thumbnails, and backups stay on your device. We do not upload them.

Widgets and Live Activities read a small local snapshot. That snapshot does not leave the phone.

Sensors

Steps, shake, and squats use sensors on the phone. Coop does not use HealthKit or Google Fit.

Sensor readings are not stored. We only keep that you finished the mission, on the phone.

What gets sent, and when

Four missions can send a photo: Object hunt, Sky, Make bed, and Custom proof. Other camera missions stay on the device.

When you use one of those four, Coop sends one small image. EXIF, GPS, and account ids are stripped. The phone also sends a device check token so the endpoint cannot be abused. That token is not a Coop login.

A Cloudflare worker holds the model key. It has no database. The worker discards the frame when the request ends and does not write it to logs. OpenAI checks the image under their API terms. It is not used to train a model.

If the check fails or the network is down, Coop falls back on the device so you are not stuck.

How to send nothing

Turn on On-device missions only in Settings. AI-verified missions hide, and no photo leaves your phone.

Payments

Apple or Google handle payment. RevenueCat stores receipts tied to your store account, not a Coop login. We do not receive your full card number.

Backups

Export writes a file you keep. You can lock it with a passphrase, or save it open after a warning. Import asks for that passphrase only when the file is locked.

Pro can keep a weekly copy in app storage on this phone. Your phone's own backup may include it. We never see the file.

The website

The Coop website is hosted by Vercel. Vercel Web Analytics counts page views and button taps without cookies and without a name or email.

We do not run ads on the site. We do not sell site data. The app does not send usage analytics to us.

Erase and leave

Erase everything in Settings deletes alarms, streak, history, and settings on that phone. Uninstalling also removes local data.

We have no copy of your mornings on a server to delete. Store history stays with Apple or Google until you ask them.

Children

Coop is not directed at children under 13. Do not use it if you are under 13.

Your rights

Because alarm data stays on your phone, we cannot send you a server copy of it. You already have it. You can export or erase it in the app.

For payments, use Apple or Google tools. For a privacy question we can answer, write to support@coop.alarm.

Changes

We may update this policy. The date at the top is the current version.

Contact

Privacy questions: support@coop.alarm