COCO is operated by UXUI W.L.L. (CR 124544-2), Shop 480, Building 57, Road 383, Block 305, Manama Center, Kingdom of Bahrain ("we", "us"). Contact: [privacy@ email — INSERT].
What COCO does
COCO stores documents you upload, uses artificial intelligence to detect their expiry dates, and reminds you before they expire.
Information we collect
- Account data: name, email address, sign-in identifiers (Google sign-in or email/password). Passwords are handled by Firebase Authentication; we never see or store them in readable form.
- Documents you upload: images and PDFs of documents you choose to add, and the details extracted from them (document type, numbers, dates, issuing organization).
- Preferences: notification settings, theme, reminder times.
- Device data: push notification token, app version, device type.
- Usage records: an audit log of sensitive actions (upload, view, edit, delete) kept for security.
AI processing — plain disclosure
When you upload a document, it is transmitted securely to a third-party AI provider (Anthropic) solely to extract the fields shown to you on the confirmation screen. The document is sent from our servers, not your device; the provider processes it to return the extraction and does not use your documents to train its models under our API agreement.
How we protect your documents
Documents are stored in private, encrypted cloud storage. They are never publicly accessible; the app retrieves them only through short-lived signed links. All traffic uses HTTPS. Access is restricted to your authenticated account — our systems enforce that you can only ever access your own documents.
What we never do
We do not sell your data. We do not show advertising. We do not share your documents with anyone except the AI provider described above and our cloud infrastructure providers (Google Firebase; our API hosting), each bound to process data only on our instructions.
Your controls
- Delete any document at any time — the file and its reminders are permanently removed.
- Delete your account in Profile → Delete account — all documents, files, reminders and personal data are permanently erased. See our account deletion guide.
- Disable push or email reminders at any time.
Retention
Documents and account data are kept until you delete them or your account. Backup copies are purged within 30 days of deletion. Audit logs are kept for 12 months.
Legal basis and jurisdiction
We process your data to provide the service you request, consistent with the Kingdom of Bahrain Personal Data Protection Law (Law No. 30 of 2018). Questions or complaints: contact us at the address above.
Children
COCO is not directed at children under 16 and we do not knowingly collect their data.
Changes
We will notify you in the app of material changes to this policy.
This document was prepared with AI assistance and should be reviewed by a qualified Bahraini lawyer before publication.