Welcome to Cohot, your gentle, private lipstick journal built exclusively for beauty lovers who want a quiet space to save lip swatches, face-of-the-day shots, and texture notes — no social feeds, no public reviews, no algorithmic noise. We didn’t write this document to check a legal box: this is our binding promise to you about exactly how we protect every piece of content and data you save in Cohot, because privacy is the core of what makes this app special.
What We Will Never Do With Your Data
- We will never scan, analyze, or process your saved swatch photos, FOTD shots, or personal texture notes for advertising targeting, content recommendation, or any commercial purpose unrelated to features you explicitly request.
- We will never sell, rent, lease, or share any of your personal data or saved content with third parties for any reason, unless we are legally required to do so by applicable mandatory regulations.
- We will never build public profiles, social ranking systems, or feed algorithms based on your Cohot usage. There are no public-facing features in Cohot, so none of your content will ever be visible to other users by default.
- We will never store unencrypted cloud backup content on our servers. All cloud-synced data is end-to-end encrypted, and we have zero access to your unique encryption keys.
- We will never send you unsolicited marketing emails, push notifications for non-app-related content, or spam of any kind.
What We Do Collect (And Exactly Why We Need It)
- Local device data (default mode): 100% of the content you save in Cohot by default is stored only on your personal device. We have no access to this data at all, it never leaves your phone unless you explicitly choose to enable cloud backup. This includes all swatch photos, FOTD images, text notes, tag labels, and lipstick collection logs.
- Optional account data (for cloud backup only): If you choose to sign up for end-to-end encrypted cloud backup, we only collect your email address (for account recovery and security alerts) and a hashed version of your account password (we never store your plain text password). We do not have access to any of the content you sync to cloud backup.
- Voluntary crash and performance reports: If you choose to submit a bug report or crash log to our team, the data we receive only includes anonymous app performance metrics and error codes. We will never pull your personal saved content into these reports unless you explicitly attach it to your support request.
- Aggregated anonymous usage statistics: We collect fully anonymized, non-personally identifiable data about how users interact with Cohot features (for example: how many users use the texture note feature, how many swatches are saved on average per month) to help us improve app functionality. This data cannot be traced back to any individual user.
Important Note About End-To-End Encrypted Cloud Backup
When you enable cloud backup, all of your content is encrypted on your device before it is sent to our servers, using an encryption key that is stored only on your personal devices. We do not hold a copy of this key, which means we cannot view, restore, or share your encrypted backup content for any reason. If you lose all of your devices and your encryption recovery phrase, we will not be able to help you recover your backed up data — this is an intentional design choice to prioritize your privacy over convenience.
Your Full Control: Your Data Superpowers
- You can export all of your Cohot data (both local and cloud-synced) at any time as a downloadable ZIP file, with no restrictions or hidden fees. The export will include all full-resolution photos, notes, and tags you have saved.
- You can permanently delete all of your Cohot data at any time. If you use cloud backup, deleting your account will immediately and irreversibly erase all of your synced data from our servers, with no residual copies stored. Local data can be erased by clearing your app storage or uninstalling Cohot.
- You can turn off cloud backup at any time and switch to fully local-only mode, which will remove all of your synced data from our servers and stop any future data from being sent to our systems.
- You can update your account email, reset your password, or modify your notification preferences at any time directly in the app settings.
- You can opt out of anonymous usage statistics collection at any time in your app privacy settings, with no impact on your ability to use any Cohot features.
Updates To This Promise
We may update this Privacy Promise occasionally to reflect changes to Cohot features or applicable privacy requirements. If we make any material changes that impact how we handle your data, we will notify you via in-app notification or email at least 30 days before the changes take effect, and give you the option to export or delete all of your data before the new terms apply.