Cotiva / Your experience, explained

Privacy Policy

Your information deserves a clear explanation of what is collected, why it is used and what stays on your device.

How AI replies work

Your messages, relevant conversation context and images you choose to send are processed online through OpenRouter and its model providers to generate replies.

01. Scope and age requirement

This policy explains how Cotiva for Android handles information when you use its features. Cotiva is intended for adults aged 18 and older and is not directed to anyone under 18. If you believe information from a person under 18 has been provided to us, please contact us so we can investigate and take appropriate action.

02. User ID, coins and subscriptions

Cotiva handles your app user ID, coin information and subscription information to identify your app record, maintain your coin balance and provide purchased benefits. Coin information includes credits, purchases and spending. Subscription information includes the selected plan, purchase verification information, subscription status and entitlement dates.

For purchases made through Google Play, Google handles the payment process under its own privacy practices. Cotiva does not receive your full payment card number or other full payment credentials.

03. Online AI conversations

When you send a chat message, Cotiva transmits the message and relevant recent conversation context to OpenRouter over an encrypted HTTPS connection to generate a reply. If you choose to send an image in a conversation, that image is also transmitted for AI processing. Information you include in messages or images may therefore be processed outside your phone.

OpenRouter routes requests to the model provider serving the request. These services may also receive technical connection information, such as your IP address and request metadata, as needed to receive, secure and process requests. Retention and any use of content for model improvement depend on the applicable provider policies and service configuration; Cotiva does not promise that all providers offer zero retention or exclude all model training.

Read the OpenRouter Privacy Policy and provider data practices for further information. Do not include sensitive personal information or another person’s private information without permission. You can avoid this transmission by not sending messages or images, but online AI replies require this processing.

04. Information stored on your phone

Your chosen display name, favorites, character preferences, chat backgrounds, local settings, saved conversations and selected chat images are stored on your phone for use in the app. Local storage of conversations and images does not mean they remain exclusively on the device: content used for an AI request is transmitted as described above.

Cotiva does not automatically upload your entire photo library or collect your contacts or precise location. Images are sent for AI processing when you choose to include them in a conversation.

05. How information is used and shared

We use the information described in this policy to provide the features you request, generate AI responses, maintain coin and subscription benefits, address purchase or technical issues, prevent misuse and comply with applicable legal obligations. Where a legal basis is required, processing may be necessary to provide the service you request, comply with a legal obligation or, where required, rely on your consent.

Information is disclosed to the services needed for the relevant feature, including OpenRouter and its model providers for AI requests and Google Play for purchases. We do not sell your personal information or use your conversations for targeted advertising. We may also disclose information when legally required or necessary to protect legal rights, subject to applicable law.

Service providers may process information in countries other than your own. Applicable data protection requirements govern these transfers, and providers’ published policies describe their processing practices.

06. Storage, retention and deletion

User ID, coin and subscription records are retained as necessary to provide the related benefits, address disputes and meet applicable recordkeeping obligations. When those purposes no longer require the records, they are deleted or de-identified, subject to legal retention requirements.

Local information remains in app storage until you remove it or the operating system removes it. You can use available app data controls or Android storage settings to remove local data. Uninstalling, clearing data or losing your device may cause local information to be lost. Device backup services you enable are governed by their own settings and privacy terms.

Deleting a conversation from your phone does not automatically delete information already processed by an external AI provider. Provider retention periods vary. Contact us for assistance with a request concerning data submitted through Cotiva.

07. Your choices and rights

You can choose whether to send messages and images, remove locally stored information and manage subscriptions through Google Play. Clearing app data or making a privacy request does not cancel a subscription.

Depending on applicable law, you may request access, correction, deletion, portability or restriction of your information, object to processing, withdraw consent where processing relies on consent, or complain to a data protection authority. Withdrawal does not affect earlier lawful processing. Contact appnovadigitalservices@gmail.com to make a request. We may ask for your user ID and relevant purchase details to verify it. Some records may need to be retained by law.

08. Support, security and this website

If you contact us voluntarily, we and your chosen communication provider process your contact details and message to respond. Please avoid sending private conversations, personal photos or payment card details in support requests.

No method of storage or transmission is completely secure. These website pages contain no analytics scripts, advertising trackers, forms or browser-storage features. The hosting provider may process ordinary network request information. Links to Google Play, OpenRouter or a contact service lead to services with their own privacy practices.

09. Changes and contact

We will update the effective date when this policy changes and provide additional notice of material changes where required. For privacy questions or requests, contact the Cotiva team at appnovadigitalservices@gmail.com.