Legal
Last updated July 29, 2026
This policy explains what data Cogtraining collects across our website and mobile apps, how we use it, and the choices you have. Plain language, no surprises.
Cognitive Care Alliance (“Cogtraining”, “we”, “us”) operates the Cogtraining.org website and the Cogtraining mobile apps, and is the controller responsible for your personal data. Our registered postal address is 2093 Philadelphia Pike #1176, Claymont, DE 19703. You can reach us about privacy at privacy@cogtraining.org.
When you create an account we collect your name and email address. If you sign in with Apple or Google, we receive the basic profile information you authorize (name and email); if you use Sign in with Apple’s private relay, we receive only a relay email address. We use passwordless magic links and passwords for sign-in; we store passwords only as salted hashes.
Your course enrollments, lesson progress, quiz and exam attempts, scores, and the credentials you earn. This is what makes your competence verifiable.
Web purchases are processed by Stripe. Mobile purchases are processed by Apple’s App Store or Google Play and entitlement status is brokered by RevenueCat. We receive the transaction and entitlement facts needed to unlock access and handle refunds. We never receive or store your payment card details.
When you use the apps we automatically receive your IP address and device information (device model, operating system, app version). We use Sentry to capture crash and error reports, which may include this device information and app state at the time of an error. With your optional analytics consent, we record allowlisted product events in our internal ledger and may send the same minimized events to PostHog on web or Firebase Analytics on mobile. We may aggregate this data to spot trends. We do not sell it.
Cogtraining trains caregivers. We do not ask learners to create profiles, diagnoses, or medical histories for people receiving care. Private support and safety forms instruct you to provide only what is necessary. If you nevertheless submit sensitive information, it is isolated from education, employer, and sponsor reporting and handled under restricted support or clinical-safety access. The app does not provide medical advice or diagnosis.
A core purpose of Cogtraining is to make your competence verifiable. When you earn a credential, you receive a verification link and badge that show the achievement and current credential status. Your name is hidden by default. You may explicitly choose a public display name for each credential, and you can hide it again at any time from your dashboard or wallet. Anyone with the link can check the non-private credential facts.
Where the GDPR or similar laws apply, we rely on the legal basis noted for each purpose:
We and our service providers may process and store your personal data in the United States, the European Economic Area, and other countries whose laws may differ from yours.
For restricted transfers from the EEA or UK, our provider agreements use the applicable European Commission Standard Contractual Clauses, the UK International Data Transfer Addendum, or another legally recognized mechanism such as an active EU–US Data Privacy Framework certification. We review the mechanism and provider subprocessor list before enabling a service for covered data.
We keep personal data only as long as we need it:
You can delete your account — and the personal data associated with it — directly from the app (Account → Delete account) or by contacting us. You can also request a copy of your data, ask us to correct it, or object to or restrict certain processing.
Deleting your account does not cancel any active subscription — subscriptions are billed by Apple or Google and must be cancelled in your App Store or Google Play account settings.
Depending on where you live, you may have additional rights under laws such as the GDPR, UK GDPR, or CCPA/CPRA, including the rights to access, correct, delete, or port your data and to object to certain processing. To exercise any of these, email us at the address below. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data-protection supervisory authority.
If you are a California resident, the CCPA/CPRA gives you the rights to know, access, correct, and delete your personal information, and to opt out of its “sale” or “sharing.”
In the past 12 months we have collected the following categories of personal information: identifiers (name, email, IP address, account IDs), commercial information (subscription and purchase records), internet/network activity (usage and diagnostics), and coarse location inferred from IP. We collect it from you and from your device, and share it with the service providers listed above to run the service.
We do not sell your personal information for money. Some analytics activity may be treated as “sharing” under California law; where required, we honor opt-out preference signals and your cookie choices. We do not discriminate against you for exercising your rights. To make a request, email us at the address below.
All traffic between the apps and our servers is encrypted in transit over TLS. We authorize every request at the data layer, keep an append-only audit of credential and payment actions, and follow the principle of least privilege for internal access. No system is perfectly secure, but we work to protect your data and to disclose incidents responsibly.
Cogtraining is intended for adults (professional and family caregivers). It is not directed to children under 13 (or under the applicable age of digital consent, which is up to 16 in parts of the EEA), and we do not knowingly collect their personal data.
We may update this policy as the product evolves. When we make material changes we will update the date at the top of this page and, where appropriate, notify you in the app.
Questions about this policy or your data? Email privacy@cogtraining.org.