Privacy Policy

We collect only what's necessary to deliver the Couraiexperience:

• Account data: Email address, display name
• Waitlist data: Email address provided during pre-launch registration
• Usage data: Task completions, feeling scores (1–5), streak data, current level and day
• Reflection text: Journal entries you write after completing tasks — entirely optional and private to you
• Device info: iOS version, device model (used only for crash reporting)
• Purchase data: Subscription status managed via RevenueCat. We never see or store your card details.
• Analytics events: Aggregated, non-identifying telemetry (page views and feature usage) safely collected natively and via Vercel Analytics (100% cookie-less, no PII tracked)

• Deliver personalized daily tasks based on your selected level
• Track your progress, streak, and history
• Process subscriptions and verify premium access via RevenueCat
• Send optional push notifications (only with your explicit permission)
• Improve the app via aggregated, anonymized analytics
• Send relevant updates and priority access invitations regarding the Waitlist
• Respond to support and privacy requests

• All data is stored on Supabase, hosted on EU-region servers
• All data is encrypted in transit using TLS
• Row-level security is enforced — you can only ever access your own data
• Analytics are processed by PostHog EU instance (GDPR compliant)
• Payment processing is handled by RevenueCat —Courai never stores payment card info

We use the following third-party services to operate Courai:

• Supabase — Database and authentication (EU servers)
• RevenueCat — Subscription management
• PostHog & Vercel Analytics — Anonymized product analytics and Edge traffic metrics (GDPR compliant, cookie-less architecture)
• Apple Push Notification Service (APNS) — Push notifications only

Each of these providers has their own privacy policy and data processing agreements with us.

• Active accounts: data retained while account exists
• Reflection text: permanently deleted upon account deletion
• Analytics events: 12-month rolling retention window
• You may request deletion at any time: couraiapp@gmail.com

As a user in the European Economic Area or elsewhere, you have the following rights regarding your personal data:

• Right to access — Request a copy of your data
• Right to rectification — Correct inaccurate data
• Right to erasure — Request permanent deletion ("right to be forgotten")
• Right to data portability — Receive your data in a machine-readable format
• Right to object — Object to certain types of processing

To exercise any of these rights, contact us at: couraiapp@gmail.com

Courai is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child under 13 has provided us with personal information, please contact us immediately at couraiapp@gmail.com and we will delete that information promptly.

You can delete your account directly in the app at any time:

Account deletion permanently removes all your data — tasks, reflections, streak history, and account credentials — within 30 days. This action cannot be undone.

Push notifications are entirely opt-in. Courai will ask for your permission before sending any notifications. You can withdraw permission at any time via:

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of the app after any changes constitutes your acceptance of the new policy.

If you have any questions about this Privacy Policy or how we handle your data:

• Privacy inquiries: couraiapp@gmail.com
• General support: couraiapp@gmail.com
• Address: Amsterdam, Netherlands