Privacy Policy for Coconudge

Last updated: 1 August 2026

This privacy policy explains how Coconudge collects and uses information about you. We have tried to write it in clear language, so it is easy to understand – including if you are young.

Who is responsible

Cocoapps AS (org. no. 927386283), Solliveien 24A, 3150 Tolvsrød, Norway, is the data controller for your information. Contact: support@coconudge.com.

What information we collect

• Email address and password – when you create an account. The password is always stored securely – never in plain text (it is "hashed") – and we never see it.
• Name/display name – optional, only if you provide it.
• Age confirmation – at registration you confirm that you are at least 13 years old. We do not ask for your date of birth.
• Your content – the study material you upload, the cards, folders, quiz answers and your settings.
• Subscription information – whether you have the free or paid version (payment is handled by Stripe; we do not store your card number).

We use no tracking, analytics tools or advertising, and we do not log your IP address in our own code.

Why we use the information, and the legal basis

We use the information only to provide the service to you – creating your account, generating and displaying question cards, and managing your subscription. The legal basis is that it is necessary to perform the contract with you (GDPR Art. 6(1)(b)). For accounting records we have a legal obligation to retain data (Art. 6(1)(c)).

Who we share with (data processors)

We use some trusted providers that process data on our behalf, under a data processing agreement:

• Supabase (database and login) – data is stored in the EU (Ireland).
• Vercel (operation of the service) – EU region (Stockholm, Sweden).
• OpenAI (generates the question cards) – in the USA. We send only the subject-matter content, never your name or email. The content is not used to train AI models.
• Stripe (payment) – handles the purchase as merchant of record (via the Link service). Stripe processes your payment details, email address and account ID to complete and manage the subscription, and sends receipts and invoices directly to you. We never store your card number.

Transfers to the USA are protected by the EU Standard Contractual Clauses (SCC). We never sell your information.

International users

Coconudge is available internationally. Wherever you live, your information is processed primarily in the EU (database and operations), with certain transfers to the USA (AI generation and payment) protected by the EU Standard Contractual Clauses (SCC). The rights described below apply to all users, regardless of country. If you live outside the EU/EEA, you may have equivalent rights under your local privacy law – contact us at support@coconudge.com and we will help you.

How long we store data

• Data is kept as long as your account is active.
• If you delete your account, everything is removed within 30 days.
• Accounts that have not been used for 24 months are deleted automatically.
• Accounting records are kept for 5 years, as required by law.

Your rights

You can at any time request access to, correction of, deletion of or a copy of your information, and you can object to or request restriction of the processing. Contact us at support@coconudge.com. You can also lodge a complaint with the Norwegian Data Protection Authority (datatilsynet.no), or with the supervisory authority in your own country.

Children and young people

Coconudge is for you who are 13 years or older. If you are under 18, you can use the free version, but an adult must complete any purchase of premium.

Security

We protect your data with database-level access control, encryption in transit and strict separation of keys.

The browser extension

To show practice questions while you browse, the Coconudge extension checks locally which website you are on (against the sites you have chosen) and displays its own quiz content on top of the page. It does not read or transmit the content of the websites you visit, and does not store your browsing history. Your account and study data are handled as described above.

Changes

We may update this policy. In the event of significant changes, we will notify you in the app or by email.

Governing language

This English version is the legally authoritative version of this privacy policy. Translations into other languages, including Norwegian, are provided for convenience only; in the event of any discrepancy, the English text prevails. This does not affect any mandatory rights you have under the law of the country where you live.