Cocoon
Privacy Policy
Last updated: 6 July 2026
The short version: Cocoon is local-first. Everything you write, collect, and grow lives on your phone, not on our servers. There is no account and no sign-in. We don't track you, we don't run ads, and we never sell your data. The only time anything leaves your device is for a few clearly optional features you choose to turn on, and even then it goes to the service you asked for, not to us.
This policy explains what Cocoon (the app) does and doesn't do with your information. It's written to be read, not to hide behind. If anything here is unclear, please reach out (contact is at the bottom).
What stays on your device
Your journal entries, tasks and habits, focus sessions, keepsakes, mood boards, doodles, book and film and music notes, your meadow and butterflies, photos you add, and your settings are all stored only on your phone. On Android this data is kept in an encrypted database, with the key held in your device's secure keystore.
We (the maker of Cocoon) cannot see any of it. It is never uploaded to a Cocoon server, because Cocoon has no such server for your content. If you uninstall the app, that data is removed from your device.
What we never collect
- No account. You don't create a login, so we hold no name, email, or password for using the app.
- No advertising and no ad tracking. Cocoon shows no ads and contains no advertising or tracking SDKs.
- No selling or sharing for marketing. Your content is never sold, rented, or shared with data brokers. Full stop.
- No hidden analytics on your content. Cocoon does not read, scan, or transmit your journal or other entries.
The few times Cocoon uses the internet
Cocoon works fully offline. A small number of features are optional and only reach the network when you use them. Here is every one of them, and what is shared:
Backups you make yourself
Cocoon can export your data to a backup file. If you choose to save that backup to Google Drive, it goes to your Drive account under your control, not to us. You can also keep the backup file entirely on your device or your own storage. We don't receive a copy.
Calendar mirroring (optional)
If you turn it on, Cocoon can mirror your tasks and events to your device's own calendar so reminders show up alongside your other appointments. This stays on your device and uses the calendar you already have; nothing is sent to us.
Soundscapes (optional)
The focus soundscapes stream audio from Cocoon's content server (cocoon-app.space). Like any web request, our hosting provider may log standard technical information such as your IP address and the file requested, to deliver the audio and keep the service running. This is not linked to you or to anything in your journal.
Book, film, and music look-ups (optional)
When you search for a book, film, show, or song to add to a nook, Cocoon queries public catalog services (for example Open Library, TVmaze, OMDb, and the iTunes Search API) to fetch titles, covers, and details. Only the search text you type is sent, to fetch the result. Your library and notes stay on your device.
Purchases: Cocoon Plus (optional)
If you subscribe to Cocoon Plus or buy a lifetime plan, the payment itself is handled by Google Play. To manage your subscription status across reinstalls and devices, Cocoon uses RevenueCat as its purchase-management provider. RevenueCat receives your purchase and receipt information and a random, app-generated identifier so it can tell us whether Plus is active. It does not receive your journal or any content you create. See RevenueCat's privacy policy and Google's privacy policy for how each handles payment data.
Permissions Cocoon may ask for
Cocoon only requests a permission at the moment a feature needs it, and the feature explains why. These may include your camera and photos (to add pictures to entries and keepsakes), notifications (for the gentle reminders you set), calendar (for the optional mirror above), and health/activity data (only if you opt a habit into it). You can decline any of these and still use the rest of the app; the data those features touch stays on your device.
The waitlist on our website
If you join the waitlist on this website, we store only the email address you submit, so we can tell you when Cocoon launches. It is not used for anything else and is not shared. This is separate from the app.
Children
Cocoon is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect personal information from them. Because Cocoon keeps your content on your own device and has no account system, it collects no personal profile in the first place.
Security
On Android, your Cocoon data is stored in an encrypted database whose key lives in the device keystore. As with any software, no method of storage is perfectly secure, but keeping your data on your device, and off any server of ours, removes whole categories of risk. Protecting your phone with a screen lock (and Cocoon's optional in-app lock) is the best safeguard.
Your control
- Export: you can back up all your data to a file at any time from within the app.
- Delete: you can delete individual items in the app, and uninstalling Cocoon removes its data from your device.
- Purchases: you manage or cancel a subscription anytime in Google Play.
Changes to this policy
If this policy changes, we'll update the date at the top and post the new version here. Meaningful changes will be noted in the app or on this site.
Contact
Questions about privacy, or a request about your data? Email hello@cocoon-app.space and we'll get back to you.
Cocoon is made by an independent developer. 🦋