Privacy Policy
Version 1.0.6
Effective Date: February 7, 2026
Last Updated: April 9, 2026
Viorai Technology Limited ("we," "us," or "our") operates the Cocomate mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. By using Cocomate, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Company Information
Company Name: Viorai Technology Limited
Contact Email: privacy@viorai.ai
App Name: Cocomate
2. Information We Collect
2.1 Information You Provide
- Name: Display nickname, name from Apple/Google Sign-In
- Email Address: Used for registration, login, and account identification
- Photos or Videos: User-uploaded avatars and pet photos
- User Content: Calendar events (title, description, date/time), quick notes, AI chat messages, user feedback
- Customer Support: User-submitted feedback and support requests
2.2 Automatically Collected Information
- User ID: Internal account identifier, SSO provider user ID (Google/Apple)
- Device ID: Push notification device identifier
- Product Interaction Data: Consecutive login days, intimacy level, last login date, calendar sync logs
- Diagnostic Data: AI task execution status, error logs, processing duration
- Device Information: User timezone, device name/platform, device language
2.3 Sensitive Information
We collect the following sensitive information to provide personalized AI experiences:
- Daily mood check-ins and emotional states during AI conversations
- AI-extracted user memories (preferences, habits, emotional insights)
- Digital pet customization (nickname, animal type, gender preference)
This data is used solely to personalize your experience and improve AI interactions within the App.
3. Information We Do NOT Collect
We do not collect the following:
- Health & Fitness data
- Financial information
- Location data
- Contacts
- Browsing history
- Search history
- Purchase history
- Phone number
- Physical address
4. How We Use Your Information
We use your information for the following purposes:
- App Functionality: Provide core features including account management, calendar sync, AI chat, and push notifications
- Product Personalization: Customize AI conversations and digital pet interactions based on your preferences and mood data
- Customer Support: Respond to your inquiries and provide assistance
- Service Improvement: Analyze usage patterns to improve app performance and features
5. Pet Photos and User-Uploaded Images
5.1 How We Use Your Pet Photos
User-uploaded pet photos and avatars are used solely for the following purposes within the App:
- Generating and displaying your personalized digital pet
- Providing AI-powered image generation features (e.g., stylized pet portraits)
- Displaying your profile avatar within the App
5.2 How We Do NOT Use Your Pet Photos
We will not use your uploaded pet photos or any images derived from them for:
- Advertising or marketing materials (including Cocomate's own promotional content)
- Selling or licensing to any third party
- Training any AI models — Cocomate does not train its own AI models, and we do not provide your pet photos to any third party for the purpose of AI model training
- Sublicensing to partners, affiliates, or any other entity
- Creating stock imagery or any publicly available image library
- Any commercial purpose beyond providing the App's core services to you
5.3 Third-Party AI Processing
To generate stylized images of your pet, your photos may be sent to third-party AI services (currently Wavespeed AI). When this occurs:
- Only the minimum necessary image data is transmitted
- We require our third-party AI providers to process your images solely for the purpose of generating your requested output
- We require that third-party providers do not retain your images beyond the processing session, subject to their own privacy policies
- We encourage you to review Wavespeed AI's privacy policy for details on their data handling practices
5.4 Deletion of Pet Photos
When you delete a pet photo, change your avatar, or delete your account:
- The image will be removed from our active storage (Amazon S3) within 30 days
- We will send deletion requests to third-party processors where applicable
- Encrypted backups containing the image will be permanently deleted within 90 days
6. Third-Party Services and Data Sharing
We share data with third-party services solely to provide core app functionality. We do not sell your data or share it for advertising or marketing purposes.
All third-party service providers are required to handle your data with the same or equivalent level of protection as described in this Privacy Policy. We carefully evaluate each provider's data handling practices before integrating their services.
Third-Party Services:
- Google Sign-In: Email, name, profile picture (User authentication SSO)
- Apple Sign-In: Email, user ID (User authentication SSO)
- Google Calendar API: Calendar events (title, description, date/time, location) (Two-way calendar sync)
- Expo Push Notifications: Device push tokens, notification content (Deliver push notifications)
- Amazon S3 (AWS): User-uploaded photos, AI-generated images (Media file storage)
- OpenRouter: Chat messages, conversation context, calendar events (when used in AI chat features such as planning) (AI-powered chat assistant)
- Wavespeed AI: Pet photos, image generation prompts (AI image generation for digital pet)
- Amazon SES (AWS): Email address, verification codes (Email verification)
Data NOT Shared:
- No data shared for advertising or marketing
- No data shared with analytics platforms
- No data shared with data brokers
- No location data shared
- No health or financial data shared
- Passwords are never sent to any third party (hashed locally)
7. Data Tracking
This App does not use data for tracking. We do not track you across apps or websites owned by other companies for advertising purposes, and we do not share your data with data brokers.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption: Data is encrypted in transit (TLS/SSL) and at rest
- Secure Authentication: OAuth 2.0 for third-party sign-in; passwords are hashed using BCrypt
- Access Controls: Limited employee access to personal data on a need-to-know basis
- Token Security: Google Calendar OAuth tokens are stored server-side and encrypted
9. Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this Privacy Policy:
- Account data: Until account deletion + 30 days grace period
- User-generated content: Until account deletion
- Chat history and AI memories: Until account deletion
- Diagnostic logs: 90 days
After account deletion, we will remove your data from our active systems within 30 days. Some data may be retained in encrypted backups for up to 90 days before permanent deletion.
10. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
10.1 For All Users
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate personal data
- Deletion: Request deletion of your personal data
- Data Portability: Request a copy of your data in a machine-readable format
10.2 For California Residents (CCPA/CPRA)
You have additional rights under the California Consumer Privacy Act:
- Right to Know: Request information about the categories and specific pieces of personal information we collect
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: You have the right to opt-out of the sale of your personal information. Note: We do not sell personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
To exercise your rights, contact us at: privacy@viorai.ai
11. Children's Privacy
Cocomate is not directed at children under 13 years of age. The App is designed for a general audience (ages 13+). It includes AI-powered chat features, calendar management, and digital pet interactions intended for teens and adults. We do not:
- Collect data from children under 13
- Include content or features specifically designed to appeal to children under 13
COPPA Compliance: We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect personal information from children under 13. If we become aware that a user is under 13, their account will be promptly deleted. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at privacy@viorai.ai and we will delete that information.
12. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. When we transfer your data internationally, we implement appropriate safeguards to protect your information in accordance with applicable law.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date at the top of this Policy
- Sending you an email notification (for significant changes)
We encourage you to review this Privacy Policy periodically for any changes.
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Viorai Technology Limited
Email: privacy@viorai.ai
For data protection inquiries or to exercise your rights, please email us with the subject line "Privacy Request."
15. Consent
By using Cocomate, you consent to the collection and use of your information as described in this Privacy Policy.