Privacy

• Your name, email, and the answers you gave in onboarding.
• Your rooms — name, type, rough dimensions, jobs, and inventory you add.
• Photos you upload of your rooms.
• Your wishlist and any price-drop alerts you set.
• Diagnosis snapshots (what the rulebook found in a room, at a point in time).

• Serve you your own recommendations, diagnoses, and price alerts.
• Nothing else. We don’t sell it. We don’t share it. We don’t train models on your photos.

• Encrypted in transit and at rest.
• Photos live in a private bucket. Every view uses a short-lived signed URL (5 minutes) scoped to your session.
• Row-level security is enforced at the database — one account’s home is unreachable from another’s session, at the data layer, not just the query layer.
• Third-party services (currently Supabase for storage + auth, Vercel for hosting, Claude for LLM copy) never receive your home content unless they’re operating under a written no-retention agreement with us.

We ask for age bands, not birthdates. Kids’ names are optional flavor and never leave your own views. Nothing about children is an input to anything external — not analytics, not ad networks, not our own machine-learning training runs.

• Export your data. Your home is your data — you can pull it out in a readable format from Settings.
• Delete your account. Deletion is real: Class-S (photos, scans) and Class-P (personal) data — including derived data like diagnosis snapshots — cascade out within 30 days.
• Turn off any alert at any time from Settings.

Some product links on Koi Cocoon are affiliate links — we earn a small commission when you buy through them, at no cost to you. Outbound affiliate clicks include click and session identifiers required for commission attribution and nothing about your home, household, or profile. Full disclosure lives at /legal/disclosure.

Privacy questions, deletion requests, or anything data-related: reach us at [email protected].