Coi Privacy Policy

We collect the data needed to operate Coi, process your purchases, generate your content, and improve the app. The table below lists each category of data we collect, why we collect it, who it may be shared with, and how long it is kept.

Coi does not collect your precise location or your contacts, and it does not access your photo library beyond the images you explicitly choose to upload. Payment card details are processed entirely by Apple and never reach FGY.

Coi assigns your device a persistent identifier. To keep your credits and generation history stable, this identifier is stored in the iCloud Keychain, in your iCloud storage, and on your device. Because of this design, the identifier can persist even if you delete and reinstall the app — it is restored through iCloud.

Deleting your account removes your server-side data (see Section VII), but the device identifier may remain on your device and in your iCloud account. If you use Coi again on the same device afterwards, you will be treated as a new user.

We share limited data with third-party service providers who process it on our behalf to run Coi. We do not sell your personal data.

• Amplitude — product analytics.
• Google Firebase — analytics and crash diagnostics.
• Adjust — install and advertising campaign attribution.
• RevenueCat — purchase and subscription management (RevenueCat never sees your card details).
• Apple (App Store / StoreKit) — payment processing for subscriptions and credit purchases.
• Meta and TikTok Business — advertising attribution and optimization, where enabled.
• AppStack — install and purchase attribution, where enabled.
• Clerk — account authentication, where account sign-in is offered.
• Third-party AI model providers — process your prompts and reference images to generate your content (see Section IV).

These providers may only process your data to deliver services to us and are subject to contractual confidentiality and data-protection obligations. We may also disclose personal data where required by law, legal process, or a lawful request of a competent authority; to protect our rights, users, or the public; or, with notice to you, as part of a merger, acquisition, or transfer of our business.

When you create with Coi, your prompts and any reference images you upload are sent to third-party AI model providers who process them to generate your content.

Prompts, uploaded images, and generated content are subject to automated safety and content moderation. Requests that violate our rules may be rejected. For details on what is and is not allowed, see the Coi Content Policy.

Ownership and licensing of the content you create with Coi are governed by the Coi Terms of Service.

Coi may ask for your permission to track you across apps and websites through Apple's App Tracking Transparency (ATT) framework. If — and only if — you grant this permission, we collect your device's advertising identifier (IDFA) and share it with our attribution partners (Adjust, and — where enabled — Meta, TikTok, and AppStack) to measure the effectiveness of our advertising.

Granting this permission is entirely optional and does not affect the app's functionality. You can withdraw your consent at any time in iOS Settings under Privacy & Security → Tracking. We do not sell your personal data.

Server-side data linked to your account — prompts, uploaded images, generated content, credit balance, and generation history — is kept until you delete your account. Purchase records are retained by Apple and RevenueCat under their own policies and as required for accounting and legal obligations. Data held by analytics and attribution providers is retained according to each provider's retention policy. The retention column in Section I applies to each data category.

You can permanently delete your account and its server-side data (generation history and credits) at any time in the app via Settings → Delete Account. As explained in Section II, the persistent device identifier may remain on your device and in your iCloud account after deletion.

Subscriptions are managed and cancelled through your Apple App Store account settings, not within Coi. Refunds are handled by Apple under Apple's policies; FGY cannot process refunds directly.

If you are in the European Economic Area or the United Kingdom, you have the right under the GDPR to access, rectify, erase, and port your personal data, to object to or restrict its processing, and to withdraw any consent you have given at any time. You also have the right to lodge a complaint with your local supervisory authority.

If you are in Türkiye, you have the rights set out in Article 11 of the Personal Data Protection Law No. 6698 (KVKK), including the right to learn whether your personal data is processed, to request information about that processing, to request correction or deletion, to object to results produced by automated analysis, and to claim compensation for unlawful processing.

To exercise any of these rights, or to make any data request, contact us at hasan@fgysoftware.com. We may need to verify your identity before acting on a request.

The service providers listed in this Policy — including our analytics, attribution, purchase, authentication, and AI model providers — are based in the United States or other countries outside your own. Your personal data may therefore be transferred to, and stored in, countries whose data-protection laws differ from those of your country.

Where such transfers occur, we take steps to ensure appropriate safeguards are in place, in accordance with Articles 44 et seq. of the GDPR (such as adequacy decisions or standard contractual clauses) and Article 9 of the Turkish KVKK.

We use industry-standard measures to protect your personal data, including encrypted transmission (HTTPS/TLS), access controls limiting who can reach personal data, and careful selection of service providers bound by data-protection obligations. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a personal data breach occurs that affects you, we will notify you and the competent authorities as required by applicable law, including details of the incident, its likely impact, and the measures taken.

Coi is not intended for anyone under the age of 17, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at hasan@fgysoftware.com and we will delete it.

Coi may contain links to third-party websites or services (for example, the App Store pages of our providers). These third parties operate independently of us and are not governed by this Policy. We recommend reviewing their privacy policies before providing them with personal data.

We may update this Policy from time to time. The “Last updated” date at the top of this page shows when it was last revised. If we make material changes, we will notify you through the app or by other reasonable means before the changes take effect.

If you have questions, comments, or requests regarding this Policy or your personal data, contact us at:

• Email: hasan@fgysoftware.com
• Postal address: FGY Limited Şirketi, Söğütözü Mah. Söğütözü Cad. No: 2C/17 Çankaya/Ankara, Türkiye