Privacy Policy

Last updated: 31 July 2026

KOKO is private by design. There’s no account, no tracking, and no database holding your journal. This policy explains exactly what the app touches — including the one thing that does leave your device.

The short version

• No account, ever. KOKO doesn’t ask for a login, email, name, or phone number to work.
• We don’t collect your data. We operate no analytics servers and receive nothing about how you use the app.
• No tracking or ads. There are no advertising or analytics SDKs, and we don’t use the Advertising Identifier (IDFA) or track you across apps or websites.
• Your writing stays yours. It lives on your device and, if you use iCloud, in your own private iCloud, never with us.
• One exception, stated plainly. If you turn on reading of your entries, that text is sent to our server to be analysed and is not stored. Details below.

What the app stores

Your content — your daily entries, your goals, which goals you ticked on which day, and your streak — is created and stored on your device using your operating system’s on-device storage. This is what powers your streak, your goal progress and your history. It is not transmitted to us for storage.

iCloud backup & sync

If you are signed into iCloud on your device, your journal syncs through your own personal iCloud account using Apple’s key-value store. This means:

• The data is stored in your personal iCloud account, on Apple’s infrastructure, not on any server we control.
• It is protected by your Apple ID and Apple’s encryption. We cannot see it.
• It restores if you reinstall the app on a device signed into the same account, and keeps your iPhone and iPad in step.
• If you’re not signed into iCloud, the app simply keeps everything on-device, and nothing is uploaded.

Reading your entries

KOKO can read what you write to work out which of your goals an entry mentions, and to write a summary of your month or year. This is the one feature that sends text off your device, so here is exactly what happens:

• The text of the entry you are writing — and, for a summary, the entries in that period — is sent to our server.
• The server passes it to a language model, returns the answer to your app, and keeps no copy. There is no database, no log of your entries, and nothing tied to you, because there is no account to tie it to.
• The model provider processes the text solely to produce that response.
• If you would rather nothing left your device at all, use KOKO offline or without the reading feature. It works fully as a manual journal where you tick goals yourself — no writing is lost and no feature of the journal itself is withheld.

Subscriptions & purchases

KOKO Journal Pro subscriptions and purchases are processed by the Apple App Store (or Google Play) under its own privacy policy. We never see or store your payment details, and we operate no server that receives purchase information. We only receive an anonymous signal from the store about whether a subscription is active, in order to unlock Pro features.

How your data is used

On-device data is used solely to power the app’s features — show your streak, track your goals, and display your history. Because it never leaves your device for storage, we cannot access it.

Your control & deletion

Because your journal lives on your own device and iCloud, you stay in control:

• Export everything you have written at any time from You → Export a backup. This is free and is not a paid feature.
• Erase everything in the app at any time from You → Erase everything.
• Delete the app to remove everything stored on that device.
• To remove any iCloud copy, delete the app’s data for your Apple ID in iOS Settings → [your name] → iCloud → Manage Account Storage, or sign out of iCloud.

Because we do not collect or hold your personal data, most data-subject requests (access, deletion, portability under GDPR/CCPA) are satisfied directly on your device.

Children

KOKO is intended for adults keeping a personal journal and is not directed to children under 13. Since the app collects no personal data, none is gathered from anyone.

Changes

We may update this policy as the app evolves. Material changes will appear here with a new “last updated” date.