Cookmoji Privacy Policy

Account details: your email address; when you sign in with Apple or Google, the identifier and email they give us, and a display name and avatar if they provide one.

What you create: the photos and references you upload, the stickers generated from them, the names and captions you write, and what you publish to the plaza.

Device and usage data: device model and system version, app version, language and region, crash and performance diagnostics, and the time and result of requests.

We do not read your contacts, collect precise location, or track you for advertising.

To provide and maintain the service: signing in, generating stickers, keeping your work, publishing and browsing the plaza.

For safety and abuse prevention: spotting unusual sign-ins, handling reports, enforcing the terms.

To improve the service, using aggregated statistics and crash diagnostics.

To meet legal obligations.

We do not sell your personal information.

Service providers: cloud hosting, object storage, the email code provider and the AI model providers. They process data only as far as providing the service to us requires, under contract.

Legal reasons: when the law requires it, or when it is necessary to protect the rights and safety of people using Cookmoji or the public.

Business changes: in a merger, acquisition or sale of assets information may transfer with the business, and we will tell you beforehand.

Public content: work you choose to publish to the plaza is visible to other signed-in people.

Traffic uses TLS 1.3 or higher. Sign-in credentials stay in the device keychain and are readable only on that device.

The service is not end-to-end encrypted, so our servers can access what you upload and publish. No system is perfectly secure; please do not upload sensitive information.

Account details and your work are kept while the account exists.

You can permanently delete your account under Settings, Delete account. Once accepted, the account is frozen at once, every device is signed out, published work is taken down immediately, and the current service data is then removed in the background.

After deletion, data in historical backups is kept for at most 30 days before it is overwritten. We keep a separate, long-lived deletion record so that restoring a backup cannot bring deleted data back.

Files already exported or downloaded onto your device or someone else's are outside the scope of this deletion.

You can see and change your display name and avatar in the app, withdraw published work at any time, and delete your account permanently.

To request a copy of your data, or to object to how we handle it, write to us at the address below.

California (CCPA/CPRA): you have the right to know, delete, correct, limit the use of sensitive personal information, and not be treated differently for exercising these rights. We do not sell personal information and do not share it for cross-context behavioural advertising.

Nevada: we do not sell personal information as that state's law defines it.

EU and EEA (GDPR): we rely on performing our contract with you, our legitimate interests and your consent. You have the rights of access, rectification, erasure, restriction, portability and objection, and you may complain to your local supervisory authority.

Cookmoji is not for people under 18. If we learn that someone under 18 has created an account, we delete the account and its data.

When this policy changes we update the date at the top of this page, and we flag material changes in the app.

For privacy questions, write to us at the address below.