Your data, your rules.
This policy is the same for the website and the mobile app. Here is what happens to your data, and who handles it.
What we collect
Account details from sign-in: email, name and profile picture (managed by Clerk). Billing details for paid plans are handled by Razorpay; we store your plan, renewal date and usage totals. Usage counts such as tokens and request totals, which power your usage screen and limits. Your chats, documents and files are stored on your device when you use on-device chat. When you use Cobentt Cloud, your messages are sent to the AI model provider to produce an answer (see below).
Cobentt Cloud (the default)
New accounts start on Cobentt Cloud. Your message and the context needed to answer it are sent through our gateway to OpenRouter, which routes it to the model that answers. We record the model used and the token counts for billing; we do not keep the text of your chats on our servers. You can switch to on-device chat in Settings, and then your messages stay on your phone.
On-device chat (optional)
On-device models run entirely on your phone. Your prompts and answers do not leave the device. Model files are downloaded from Hugging Face when you choose to download one. Downloaded files stay on the device until you delete them.
Your own API key
If you add your own OpenRouter key or a custom endpoint, requests go directly from your device to that provider under its terms. We do not see those messages. Keys are stored on your device in secure storage and are not sent to our servers.
Who processes your data
Clerk: sign-in and account identity. Razorpay: payments for paid plans. OpenRouter: AI model routing for Cobentt Cloud. Vercel: website analytics on this site. Inngest: background jobs that run AI workflows on the website. Hugging Face: serves on-device model files. We do not sell your personal information.
Analytics
This website uses Vercel Analytics to count page views. It does not set tracking cookies. You can opt out in Settings → Privacy; the opt-out takes effect the next time you load the site. The mobile app does not send analytics events.
Security and backups
Connections to Cobentt use HTTPS. Database backups are encrypted with AES-256 and kept for 14 days, after which they are deleted.
Your choices
On the website you can export your data from Settings → Privacy → Export. In the mobile app you can delete all local data from Settings, and delete your account from Account → Delete Account. You can disable cookies in your browser, but sign-in needs its session cookie. For anything else, email support@cogerphere.com.
Cookies
We use only the cookies sign-in needs, plus a single preference that stores your analytics opt-out. We do not use advertising cookies.
Changes to this policy
If we make a material change to this policy, we will show it on this page and tell signed-in users in the app before it takes effect.
Last updated: October 2026. If you have questions, email support@cogerphere.com