Legal
Last updated July 7, 2026
This policy explains what data Cogtraining collects across our website and mobile apps, how we use it, and the choices you have. Plain language, no surprises.
Cognitive Care Alliance (“Cogtraining”, “we”, “us”) operates the Cogtraining.org website and the Cogtraining mobile apps, and is the controller responsible for your personal data. You can reach us about privacy at privacy@cogtraining.org.
When you create an account we collect your name and email address. If you sign in with Apple or Google, we receive the basic profile information you authorize (name and email); if you use Sign in with Apple’s private relay, we receive only a relay email address. We use passwordless magic links and passwords for sign-in; we store passwords only as salted hashes.
Your course enrollments, lesson progress, quiz and exam attempts, scores, and the credentials you earn. This is what makes your competence verifiable.
Subscriptions and purchases are processed by Apple’s App Store or Google Play and brokered by RevenueCat. We receive a purchase receipt and entitlement status so we can unlock your course. We never receive or store your payment card details.
When you use the apps we automatically receive your IP address and device information (device model, operating system, app version). We use Sentry to capture crash and error reports, which may include this device information and app state at the time of an error. We use PostHog to understand product usage (which screens are used, feature adoption); PostHog is tied to your account and may derive an approximate, city-level location from your IP address. We may aggregate this data to spot trends, but we do not use it for advertising and we do not sell it.
Cogtraining trains caregivers. The person receiving care is never a user of the app and is never a record in our systems. We do not ask for, store, or process any diagnosis, medical history, or other protected health information about them. The app does not provide medical advice or diagnosis.
A core purpose of Cogtraining is to make your competence verifiable. When you earn a credential, you receive a verification link and badge that display your name and credential status to anyone you share them with. Sharing that link publishes those details publicly; only share it with people you want to be able to confirm your credential. Deleting your account removes your ability to issue new verification links.
Where the GDPR or similar laws apply, we rely on the legal basis noted for each purpose:
We and our service providers may process and store your personal data in the United States and other countries whose data-protection laws may differ from yours. Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards — such as the European Commission’s Standard Contractual Clauses and, where applicable, our providers’ EU–US Data Privacy Framework certifications.
We keep personal data only as long as we need it:
You can delete your account — and the personal data associated with it — directly from the app (Account → Delete account) or by contacting us. You can also request a copy of your data, ask us to correct it, or object to or restrict certain processing.
Deleting your account does not cancel any active subscription — subscriptions are billed by Apple or Google and must be cancelled in your App Store or Google Play account settings.
Depending on where you live, you may have additional rights under laws such as the GDPR, UK GDPR, or CCPA/CPRA, including the rights to access, correct, delete, or port your data and to object to certain processing. To exercise any of these, email us at the address below. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data-protection supervisory authority.
If you are a California resident, the CCPA/CPRA gives you the rights to know, access, correct, and delete your personal information, and to opt out of its “sale” or “sharing.”
In the past 12 months we have collected the following categories of personal information: identifiers (name, email, IP address, account IDs), commercial information (subscription and purchase records), internet/network activity (usage and diagnostics), and coarse location inferred from IP. We collect it from you and from your device, and share it with the service providers listed above to run the service.
We do not sell your personal information for money. Some analytics activity may be treated as “sharing” under California law; where required, we honor opt-out preference signals and your cookie choices. We do not discriminate against you for exercising your rights. To make a request, email us at the address below.
All traffic between the apps and our servers is encrypted in transit over TLS. We authorize every request at the data layer, keep an append-only audit of credential and payment actions, and follow the principle of least privilege for internal access. No system is perfectly secure, but we work to protect your data and to disclose incidents responsibly.
Cogtraining is intended for adults (professional and family caregivers). It is not directed to children under 13 (or under the applicable age of digital consent, which is up to 16 in parts of the EEA), and we do not knowingly collect their personal data.
We may update this policy as the product evolves. When we make material changes we will update the date at the top of this page and, where appropriate, notify you in the app.
Questions about this policy or your data? Email privacy@cogtraining.org.