Privacy policy

1. Who we are

Cohl is run by Jumpstart Developments Limited, a company registered in New Zealand. We are responsible for the personal information described in this policy, which covers cohl.app and the Cohl app. If anything here is unclear, email support@cohl.app and we'll explain it properly.

2. What we collect

We collect as little as we can while still making the product work well. Here is the full list:

• Account details: your email address and name, through Firebase Authentication, including when you sign in with Google.
• Your content: the projects you create, the slides in them, images you upload, and copies of public posts you link as inspiration.
• Usage analytics: how the product is used, through PostHog. Measurement is cookieless by default: nothing is stored on your device unless you accept the consent banner, and declining keeps it that way (each visit then looks like a new anonymous visitor).
• Technical logs: server logs of errors and of the requests our AI systems make while working on your projects, kept in our Google Cloud infrastructure so we can fix problems and spot abuse.
• Payment details: your subscription state and a Stripe customer id. Card numbers go directly to Stripe and never reach us; we never store them.

3. How we use your information

We use it to:

• run the service: sign you in, store your projects, generate your slides
• bill you and manage your subscription
• help you when you contact support
• keep the service safe: investigate abuse and debug errors
• understand and improve the product, using cookieless analytics (a device cookie only if you consented)
• meet legal obligations, like tax and accounting records

For users in the EEA and UK, our legal bases are the contract we have with you (running the service), our legitimate interests (keeping it safe and working, and understanding usage through cookieless analytics), your consent (the analytics cookie), and our legal obligations (records we must keep).

4. AI processing

Cohl is built on AI models. When you ask for slides, your prompts, project content and relevant images are sent to the AI providers that do the work: OpenRouter and Anthropic for text, and Replicate for images. They process your content on our behalf to produce your output. We keep server logs of these requests so we can monitor quality and investigate abuse.

5. The inspiration feature

When you link a public Instagram post or Pinterest pin, we use Apify to fetch it and store a private copy in your account as reference material for your designs. It stays private to you, and you can delete it in the app whenever you like.

6. Who we share it with

We share personal information only with the services that help us run Cohl. They process it on our instructions:

• Google Cloud: hosting and storage, in the United States
• Stripe: payments and subscriptions
• OpenRouter, Anthropic and Replicate: AI processing of your prompts and content
• Apify: fetching the public posts you link as inspiration
• PostHog: product analytics (cookieless unless you consent to the cookie)

We do not sell personal data, and we do not share it with advertisers. Beyond the list above, we would disclose information only if the law required it, or as part of a sale or restructure of our business, in which case this policy would continue to apply.

7. International transfers

We are a New Zealand company, and your information is processed in the United States and other regions where our providers operate. Wherever it goes, it travels under standard safeguards: for EEA and UK data, that means standard contractual clauses or an equivalent lawful mechanism.

8. Retention and deletion

We keep your account data for as long as you have an account. You can delete projects, uploads and inspiration in the app whenever you like. To delete your whole account, email support@cohl.app and we'll remove it along with your content. Some records survive deletion where the law requires it, such as invoices and tax records, and we keep those only as long as we must.

9. Your rights

You are in control of your information. Depending on where you live:

• EEA and UK (GDPR): you can ask for access to your information, correction, deletion, a portable copy, and restriction of processing, and you can object to processing based on legitimate interests. You can also complain to your local supervisory authority.
• New Zealand (Privacy Act 2020): you can ask for access to and correction of your information, and you can complain to the Office of the Privacy Commissioner.
• California (CCPA): you can ask what we collect and request deletion, and you'll never be treated differently for exercising your rights. We do not sell or share personal information as the CCPA defines those terms.

To exercise any of these rights, email support@cohl.app. We answer within the timeframes the relevant law sets.

10. Cookies

We keep cookies simple:

• Strictly necessary cookies: always on. They keep you signed in and keep the service secure, and the service can't work without them.
• Analytics cookies: only with your consent. Our analytics is cookieless by default — nothing is stored on your device, and each visit looks like a new anonymous visitor. Accepting the banner sets one PostHog cookie so we can recognize return visits. If you change your mind after accepting, email us and we'll remove it.
• Advertising cookies: none. We don't run ad trackers.

11. Age

Cohl is for people aged 16 and over, and we don't knowingly collect personal information from anyone younger. If you believe someone under 16 has an account, email support@cohl.app and we'll delete it.

12. Changes and contact

When we change this policy, we'll post the new version here and update the date at the top. If a change is material, we'll tell you by email or in the app before it takes effect. Questions, requests and complaints all go to support@cohl.app. We read everything.