Your records stay with you
Koza stores care records on your device.
Appgea does not host a baby database.
Koza does not upload care records to Appgea.
There is no Koza account or AI service.
Care logging works without internet.
Koza does not include advertising, analytics tracking or remote crash reporting.
Operating systems and stores have their own privacy practices.
What the app stores
You choose what to record:
- Baby profiles, feeding preferences and optional profile photos.
- Feeding, sleep, diaper, measurement and health records.
- Notes, selected photos and optional caregiver labels.
- Reminder schedules, saved summaries and app settings.
Records include timestamps and locally generated identifiers.
Identifiers connect records and revisions within your saved data.
Caregiver labels show who logged an entry. They do not create accounts.
Optional sex information supports the displayed growth curves.
Device permissions and display
Notifications are optional and support reminders on this device.
Photo and file pickers provide the items you select.
Optional app locking uses your device's authentication controls.
Koza does not receive your biometric templates.
You control permissions through device settings.
Koza asks for the camera only to scan a nearby sync code.
It asks for local network access only when you turn on nearby sync.
Koza does not request location, contacts or microphone access.
Widgets, Live Activities and notifications can show information outside the app.
Turning on the app lock hides those details and ends the Live Activity.
iCloud sync and sharing
iCloud sync is off until you turn it on.
When it is on, records and photos are copied to your own iCloud account.
Apple stores that copy under Apple's terms. Appgea has no access to it.
Record contents use the encrypted fields CloudKit provides.
Photos are stored as regular iCloud files with iCloud's standard protection, not in those encrypted fields.
Apple still handles technical details such as record names and change times.
You can invite another adult, such as your partner, through Apple's sharing screen.
Everyone in the share can see, add, edit and delete all records.
Each person uses their own Apple Account. Koza does not see their contact details.
Apple's sharing screen shows who is invited and who has joined.
You can stop sharing or leave at any time.
Each phone keeps the records it already has.
New records are no longer shared after that.
Turning sync off stops new uploads.
You can choose to keep the iCloud copy or delete it at that moment.
Deleting the iCloud copy also ends sharing. Records stay on your phone.
Signing out of iCloud stops sync. Records stay on your phone.
Nearby sync
Nearby sync is off until you show or scan a pairing code.
It connects your phones directly over the same Wi-Fi, while Koza is open on both.
It uses no server, no relay and no account. Appgea never receives this data.
The pairing code holds a secret key, a display name and your phone's local network address.
Anyone who scans your code can join and see, add, edit and delete all records.
Show it only to people you trust.
Paired phones exchange all baby profiles, records, notes, photos and deletions.
Each connection is encrypted with that key.
Settings, reminders and purchases are not sent.
The display name is your caregiver name, or the phone's name if you did not set one.
While Koza is open, other devices on the same network can see that a paired phone is there.
They see a random device ID, not your records or your name.
If iCloud sync is on, records that arrive over nearby sync go to your own iCloud too.
Stop syncing on this phone forgets the key.
Records already on each phone stay there.
Erasing everything on one phone leaves nearby sync first, so it does not erase the other phone.
Manual backups
You create backups when you choose.
Backup files are encrypted with the password you enter.
Koza does not keep that password or provide password recovery.
Keep the password somewhere you can retrieve it.
You choose the destination through the system file or sharing interface.
A cloud drive remains a cloud destination when you select it.
Its provider's terms apply to that copy.
Koza does not operate that storage or retain a server copy.
Restoring a backup requires the file and its password.
Older unencrypted Koza backups remain unencrypted files.
Protect or remove those older files yourself.
Automatic device backups
On iPhone, Koza data is part of your normal device backups.
That includes iCloud Backup and computer backups, when you use them.
Apple or your computer stores those copies under their own settings.
You can turn off iCloud Backup for Koza in your device settings.
The Android version requests automatic backup exclusions.
Those settings cannot remove copies created by other versions.
Without sync or a backup, Koza cannot recover a lost phone's records.
Exports and sharing
CSV exports, summaries and doctor PDFs can contain readable personal information.
They do not have the password protection of encrypted Koza backups.
You choose whether to export and where to send them.
Other apps and recipients control the copies they receive.
Koza cannot delete a saved export from another app or service.
Sharing a file does not enable continuous synchronization.
Reminders and app settings stay on each phone. iCloud sync does not copy them.
Purchases
Apple App Store or Google Play handles optional purchases.
The store applies its own payment and privacy terms.
Koza reads store ownership information to unlock purchased features.
Koza uses RevenueCat, a purchase service, to check that ownership.
RevenueCat receives your purchase history and a random app user ID made on your phone.
It also receives technical details such as your device type and operating system.
It does not receive your name, your baby's details or your care records.
RevenueCat's privacy policy: https://www.revenuecat.com/privacy
An ownership cache supports offline use.
Koza keeps the date your free trial started in your iCloud Keychain, so a reinstall does not restart it.
When you buy, Koza marks your babies as paid for, so the people you share them with can log too.
Purchase processing does not require your baby's care records.
Editing, retention and erasure
Records remain until you remove them.
Editing creates revisions instead of overwriting earlier entries.
Deleting a single entry hides it using a deletion record.
Full backups and iCloud sync keep revisions and deletion records.
Settings lets you erase one baby or everything on the phone.
Erasure removes the selected records, related reminders and local files.
With iCloud sync on, erasure also removes those records from iCloud.
They are then removed from the phones that share them, when those phones sync.
Erasure does not cancel store purchases or subscriptions.
Erasure cannot remove backups, exports or copies outside this app.
That includes device backups made before the erasure.
Delete those separately in their destination app or storage provider.
An old backup may still contain previously erased records.
Do not restore an old copy you no longer want.
Contacting Appgea
If you email support, we receive what you choose to send.
Your email provider and our email provider handle that correspondence.
Please avoid sending baby records or backup passwords with support requests.
The support link in the app opens a Google Forms page.
It fills in the app name, the phone model, the iOS version and the Koza version.
Google receives what you send in the form, under Google's privacy policy: https://policies.google.com/privacy
Use the app to access, correct, export or erase your records.
Send privacy questions and support correspondence requests to devappgea@gmail.com.
We cannot recover records or passwords that we do not hold.
Legal basis, transfers and your rights
Furkan Kaynar is responsible for the purchase check and for support correspondence.
Appgea never holds your care records, so the app's own controls are how you manage them.
The purchase check is needed to give you what you bought.
Its legal basis is the contract with you (GDPR Article 6(1)(b)).
Support replies rely on our legitimate interest in answering you (GDPR Article 6(1)(f)).
RevenueCat keeps purchase records under its own privacy policy.
Support emails stay in our mailbox until we delete them. You can ask us to delete yours.
RevenueCat is based in the United States.
Its data processing terms use the EU Standard Contractual Clauses for transfers from the EU and UK.
You can ask for access to, correction of, or erasure of the data we hold about you.
You can also ask us to restrict or stop processing, or ask for a portable copy.
Write to devappgea@gmail.com.
You can complain to the Bulgarian Commission for Personal Data Protection (https://www.cpdp.bg) or to the data protection authority where you live.
Intended use
Koza is designed for adult parents and caregivers.
It records information and displays summaries from your entries.
It does not provide diagnoses or treatment advice.
Discuss health decisions with your child's clinician.
Changes
This policy describes the release with optional iCloud sync and nearby sync.
The date changes when the policy changes.
The Turkish version is available alongside this English version.