Scope and who is responsible
This Privacy Policy applies to the Coya mobile application and related services (the “Service”). Coya is responsible for deciding how personal information covered by this Policy is processed. “Personal information” means information that identifies, relates to, or can reasonably be linked with an individual, as defined by applicable law.
This Policy does not change the visibility choices you make when publishing content or sending it to another user. Please read those choices carefully before sharing.
Information we process
We process the following categories only when they are relevant to features you use:
Account identifiers and profile details you choose to provide, such as a display name, username, profile image, and coffee-related profile information.
Photos, captions, coffee recipes, calibration details, prompts, AI outputs, challenge entries, comments, and other content you publish.
Direct messages and shared content needed to deliver and maintain your conversations, support safety, and respond to reports.
Follows, reactions, comments, saves, shares, content selections, reports, and similar actions used to provide community features.
Text prompts, chosen styles, optional reference images, generation settings, and generated results when you use AI Studio.
Purchased item, subscription status if offered, transaction references, Credit grants, usage, and balance. Your app marketplace handles payment credentials; Coya does not need your full payment-card details.
Limited device, app-version, security, crash, and diagnostic information necessary to operate and protect the Service, plus information you include in support requests.
Why we use information
We use relevant information to:
- create and maintain your account and profile;
- display feeds, community posts, challenges, profiles, and interactions;
- deliver messages and content you choose to share;
- perform AI generation requests and return results;
- record purchases, subscriptions if offered, and Credit balances and usage;
- personalize in-app content based on actions within Coya;
- provide support, process reports, and communicate service or policy updates;
- prevent spam, fraud, abuse, infringement, and security incidents;
- diagnose errors and maintain performance and reliability; and
- comply with law and enforce our agreements.
Legal grounds
Where applicable law requires a legal basis, we rely on performance of our contract with you, our legitimate interests in operating and securing Coya, your consent for an optional use where requested, and compliance with legal obligations. You may withdraw consent for future processing at any time without affecting processing already completed.
AI Studio privacy
Coya’s AI models are developed, trained, and deployed by us. We do not send your prompts, reference images, or generated content to a third-party AI model service.
When you request a generation, our systems process the prompt, selected aesthetics and canvas style, optional reference image, and technical generation settings necessary to create the output. We may also process limited operational records—such as completion status and Credit charge—to deliver the feature, investigate failures, and prevent misuse.
We do not use private AI Inputs or private AI Outputs to train our models by default. If we ever offer an optional contribution program, it will use a clear, separate choice and any consent required by law. Declining would not prevent ordinary use of AI Studio.
Reference images and outputs receive reasonable administrative, technical, and organizational safeguards. Avoid submitting material you do not have permission to use or highly sensitive personal information that is unnecessary for your creative request.
Visibility, disclosures, and sharing
At your direction
Content you publish to a feed, profile, showcase, or challenge can be viewed and interacted with according to the feature’s visible settings. Direct messages are shared with the selected recipient. If you use an in-app sharing function, we disclose the selected content as you direct. Other users may capture or redistribute information visible to them, so share thoughtfully.
Operational processing
We do not share personal information with unrelated third parties. Information may be processed by infrastructure or operational providers only when reasonably necessary to host, secure, deliver, or support the Service, under contractual duties to follow our instructions, protect the information, and not use it for their own unrelated purposes. Our AI model processing is not outsourced to third-party AI model services.
Purchases
Your device’s app marketplace processes in-app payment and subscription transactions under its own privacy terms. We receive transaction status and identifiers needed to provide purchased access or Credits, manage restoration, and address payment issues; we do not receive your full payment-card number.
Safety, legal requests, and business continuity
We may preserve or disclose limited information if reasonably necessary to comply with law, respond to a valid legal process, protect a person from serious harm, investigate fraud or abuse, or defend legal rights. If Coya undergoes a merger, financing, reorganization, or sale, information may transfer subject to this Policy or protections at least as protective, and any notice required by law.
How long information is kept
We keep personal information only as long as reasonably necessary for the purposes described above, including providing the Service, maintaining security, resolving disputes, and meeting legal or accounting obligations.
While your account is active
We retain account information, active content, messages, preferences, and Credit records needed to provide your experience.
When you delete content
Deleted content is removed from active presentation within a reasonable period, subject to copies already shared by others and limited backup, legal, fraud-prevention, or security retention.
When you delete your account
We delete or de-identify account-linked information unless retention is required for transactions, disputes, security, legal compliance, or enforcement. De-identified information that cannot reasonably identify you may be retained.
Your controls and privacy rights
Depending on where you live, you may have some or all of the following rights. We do not discriminate against you for exercising them.
Use available account controls or email support@coya.store. We may verify your request to protect your account and may retain a limited record of the request. An authorized agent may submit a request where local law permits, subject to proof of authority and identity verification.
Security and international processing
We use reasonable administrative, technical, and organizational safeguards designed to protect accounts, photos, messages, User Content, AI Inputs and Outputs, and other personal information against unauthorized access, alteration, loss, or disclosure. Measures are reviewed according to the nature and sensitivity of the information. No system is perfectly secure, so we cannot guarantee absolute security.
If information is processed outside your country, we use safeguards appropriate to applicable law and the nature of the processing. You may contact us for more information about relevant transfer protections.
If you believe your account or information has been compromised, contact us promptly and secure your sign-in credentials.
Children’s privacy
Coya is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. Where a higher minimum age or parental consent requirement applies, users must meet that requirement. If you believe a child provided personal information without valid authorization, contact us so we can investigate and take appropriate action.
Changes to this Policy
We may update this Policy to reflect changes in Coya, law, or our privacy practices. We will post the revised version with a new “Last Updated” date. If a change materially affects your privacy rights, we will provide additional notice in the Service or through available contact information when required.
Contact and privacy requests
For privacy questions, rights requests, or concerns about how Coya handles information, contact Coya Support.
support@coya.store