Legal

Privacy Policy

Last updated: 7 June 2026 · Effective: 7 June 2026

Cope is built and operated by Atlas & Co Solutions, based in Manila, Philippines. In this policy, "Cope," "we," "us," and "our" refer to that entity. "You" refers to the person using the Cope mobile application.

This policy explains what data Cope collects, why we collect it, where it is stored, who we share it with (no one, intentionally), and the rights you have over your information. We've written it in plain English on purpose. If anything is unclear, write to us at copemoodtracker@gmail.com and we'll explain it personally.

1. What we collect and why

A. Account information

• Email address: required to create and sign in to your account.
• Encrypted password: stored as a one-way hash by our authentication provider. We never see or store your password in plain text.
• A unique account identifier (UUID) generated when you sign up.

Used for: signing you in, recovering your account if you forget your password, and associating your reflections with the correct account.

B. Reflection content

• Mood scores (1–5)
• Anxiety scores (1–5)
• Sleep hours and quality
• Energy levels
• Journal entries, thought records, expressive writing, gratitude logs
• Habit completion logs and routine progress
• Personal notes and recovery-day markers

Used for: showing you your own data, generating your insights and reports, and producing the in-app suggestions that help you notice patterns. This data never leaves your account.

C. App preferences

• Notification preferences, your display name as you set it, and routine-stack configurations.

Used for: making the app behave the way you set it up.

D. Technical data

• If the app crashes, basic crash reports may be generated by Apple to help us fix bugs. These are processed by Apple and governed by Apple's privacy policy. Cope does not run any third-party crash or analytics SDKs.

We do NOT collect: location, contacts, photos (except ones you choose to add yourself, which never leave your device), browsing history, search history outside the app, advertising IDs, or any data used for tracking across other apps and websites.

2. How we store your data

Your reflection content is stored in a managed PostgreSQL database operated by Supabase, Inc., located in [Supabase region — e.g., "the Asia Pacific (Sydney) region"]. Data is:

• Encrypted in transit using TLS 1.2 or higher.
• Encrypted at rest using AES-256.
• Protected by row-level security: each row is tied to your account ID, and the database enforces that only requests authenticated as you can read or write your rows.
• Backed up daily for disaster recovery purposes only.

We chose Supabase because it allows us to enforce these protections without us having direct administrative access to your individual reflections.

Authentication is also handled through Supabase. Your password is hashed using bcrypt before storage. We cannot view or recover the plain-text password.

3. Who we share data with

We do not sell, rent, lease, or share your personal data with third parties for marketing or advertising. We have never done this and we have no commercial interest in starting.

The only third parties involved in operating Cope:

• Supabase, Inc. — our database and authentication provider. They process data on our behalf under their Data Processing Agreement and do not use it for any other purpose.
• Apple Inc. — for app distribution and (if you've opted in to share with developers) basic crash reports.

We may disclose your information if compelled by a valid legal request (such as a court order). If this ever happens, we will tell you unless the order forbids it. To date, this has never happened.

4. Your rights

You have the following rights over your data. You can exercise all of them yourself, in-app, without contacting us:

• Access: Open the app — your data is shown to you.
• Export: Settings > Reports > Download report generates a PDF copy of your insights, mood entries, and journal entries.
• Correct: All entries are editable from within the app.
• Delete an entry: Tap any entry and delete it. Deletion is permanent.
• Delete your account: Settings > Sign Out > (then choose "delete account" — coming in version 1.1; until then, email copemoodtracker@gmail.com and we will delete it within 7 days).
• Withdraw consent: Stop using Cope. Your account remains until you delete it; once deleted, all rows are removed within 30 days from active databases and within 90 days from backups.

If you are in the European Union, the United Kingdom, or California, you have additional rights described in Section 7.

5. Data retention

We keep your data until you ask us to delete it. There is no inactivity timer that purges your reflections — we know how painful it is to lose years of journal entries, and we'd rather store them indefinitely than risk that.

When you delete your account:

• Active database: rows removed within 30 days.
• Backups: rows removed within 90 days as backup snapshots cycle out.
• Authentication record: removed immediately so the email can be reused.

6. Children

Cope is not intended for children under 13. We do not knowingly collect data from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at copemoodtracker@gmail.com and we will delete the account.

Cope contains mental-health content that may not be appropriate for younger teens without parental guidance. The App Store age rating reflects this.

7. Regional rights

A. European Union and United Kingdom (GDPR / UK GDPR)

Our lawful basis for processing your reflection content is Article 6(1)(b) — performance of a contract with you (the Cope app) — and where applicable Article 9(2)(a) — your explicit consent — because mood and mental-health data constitute special-category data.

You have the right to: access your data, request rectification, request erasure, request data portability (we provide PDF export), object to processing, and lodge a complaint with your local data protection authority.

B. California (CCPA / CPRA)

We do not sell or share personal information as those terms are defined under the CCPA. You have the right to know what personal information we collect (see Section 1), the right to delete it (see Section 4), the right to correct inaccurate information, and the right to non-discrimination if you exercise these rights.

To submit a request, email copemoodtracker@gmail.com. We will verify your identity by asking you to authenticate from the Cope app.

C. Other jurisdictions

Where local law gives you stronger rights than this policy describes, those rights apply.

8. Security

We use industry-standard measures to protect your data:

• TLS 1.2+ encryption for all network traffic.
• AES-256 encryption at rest.
• Row-level security so the database itself enforces access controls.
• Bcrypt-hashed passwords.
• Principle of least access — only essential personnel have any access to the production environment, and never to individual user content.

No system is perfectly secure. If a breach were to occur, we would notify affected users within 72 hours of becoming aware of it, consistent with GDPR requirements and good practice.

9. Third-party links

Cope's Library section includes references to crisis hotlines and informational resources. Tapping these may take you to a phone dialer or a third-party website. We are not responsible for the privacy practices of those services. We recommend you read their policies before disclosing personal information.

10. Mental health disclaimer

Cope is a self-help and self-reflection tool. It is not a medical device, not a substitute for therapy, and does not provide diagnosis or treatment. The journals and articles in the app are educational, not clinical.

11. Changes to this policy

We will update this policy when we add new features that change what data we handle. When we make material changes, we will notify you in the app and update the "Last updated" date at the top.

We will never reduce your privacy retroactively without your explicit consent.

12. Contact

For any privacy question, request, or complaint:

copemoodtracker@gmail.com

We try to respond within 48 hours and always within 30 days. If your question is urgent and you're in crisis, please use the resources in Section 10 — Cope's support inbox is not staffed 24/7.

— end —