Privacy Policy

Introduction

This Privacy Policy explains how CoHabby LLC collects, uses, shares, retains, and protects personal information across our mobile application, website, marketplace, Ask CoHabby intelligence, Live with CoHabby voice experience, and external AI connections. CoHabby LLC is the service operator and data controller where applicable.

1. Information you provide

We collect account and profile details, photos, age and identity-related account information, housing goals, location and logistics preferences, lifestyle and quiz answers, listings, saved items, messages, reports, feedback, and other information you choose to submit. Exact address, photos, and payment steps use secure native fields rather than model-visible chat when available.

2. Information collected during use

We process app and device data needed for authentication, App Check, security, fraud prevention, notifications, reliability, rate limits, and requested features. If you enable optional analytics or diagnostics, we may also collect bounded usage, performance, and crash data.

3. Ask CoHabby and OpenAI processing

After you approve Ask CoHabby, we send the text you submit and the minimum relevant CoHabby context and tool results to OpenAI so it can generate a response or spoken interaction. We do not send payment credentials, hidden moderation evidence, raw database paths, or private third-party records.

OpenAI states that API content is not used to train its models by default unless the customer opts in. Under default API controls, prompts, responses, and Realtime content may appear in abuse-monitoring logs for up to 30 days. Eligible projects may receive stricter retention controls. CoHabby will describe the settings actually enabled for our production project and will not claim zero retention unless it is verified.

4. Conversation, voice, and memory

CoHabby does not retain raw audio or general conversation transcripts by default. We may process them transiently to deliver the current response and enforce safety, budget, and reliability controls. Provider retention is separate and is described above.

CoHabby memory contains only short structured insights you approve. You can inspect, edit, or forget each insight. Active insights are periodically reconfirmed and are treated as untrusted member data, not instructions. Protected traits, exact addresses, private third-party facts, moderation evidence, and identity artifacts are prohibited from approved memory.

5. Feedback and early-access measurement

If you send feedback, we store the rating and the bounded summary you approve, plus a safe feature context and whether you allow follow-up. We do not store the raw feedback audio or raw transcript. Approved feedback is retained for up to 180 days, then deleted unless a shorter period applies or law requires retention.

We use privacy-safe aggregate measures to understand access, connection success, voice minutes and cost, text usage, tool completion, feedback categories, and listing-funnel progress. Founder and operational views exclude raw prompts, audio, addresses, payment data, protected traits, private identifiers, and moderation evidence.

6. Listings and payments

Listing drafts may include price, dates, lease term, amenities, household details, photos, and exact location. Sensitive listing fields are stored through controlled native flows and are disclosed only as needed to publish and operate the marketplace. Payments are processed by Apple, Google, RevenueCat, or Stripe as applicable. CoHabby receives purchase and entitlement records but not full payment-card credentials.

7. How we use information

Depending on the feature and applicable law, we process information to perform our contract with you, with your consent, for legitimate interests such as security and service reliability, and to meet legal obligations. You may withdraw consent for optional processing without affecting earlier lawful processing.

• Provide accounts, profiles, search, messaging, introductions, listings, payments, Ask CoHabby, Live, and approved memory.
• Apply live eligibility, visibility, moderation, fair-housing, safety, confirmation, rate-limit, and budget controls.
• Secure, troubleshoot, and improve the service using the least data reasonably needed.
• Send service and proactive notifications when enabled, and respond to support, privacy, or legal requests.
• Comply with law, enforce our Terms, and prevent fraud, abuse, or harm.

8. When information is shared

We do not sell personal information. We share information with other members according to your profile, listing, and visibility settings; with service providers that host, process, secure, support, analyze, or take payment for the service; when you direct a connection to an external AI platform; and when law or protection of rights requires it. Providers must be bound to appropriate data-use, confidentiality, security, and deletion terms.

Current provider categories include Google and Firebase for hosting, authentication, storage, messaging, and diagnostics; OpenAI for approved intelligence requests; Algolia for search; Apple, Google Play, RevenueCat, and Stripe for purchases and seller plans; WorkOS for external account authorization; and other bounded support or notification providers disclosed in our subprocessor inventory.

9. External AI visibility

Making a profile or listing discoverable through external AI platforms is a separate opt-in from using Ask CoHabby. External hosts receive only approved public projections and short-lived capabilities, subject to live visibility, moderation, ownership, block, and deletion checks. You can turn this visibility off.

10. Your choices and rights

• Use Not now and keep using the existing CoHabby app without Ask CoHabby.
• Revoke Ask CoHabby approval in Settings, which stops new third-party AI calls.
• Approve, edit, or forget each remembered insight.
• Control external AI visibility, microphone access, proactive notifications, and optional analytics separately.
• Access, correct, export, or delete eligible account data and delete your account.
• Exercise any additional rights provided by applicable privacy law.

11. Automated decisions

CoHabby does not use Ask CoHabby, Synergy, or another automated system to make a solely automated decision that produces a legal or similarly significant housing effect. Members and listing owners make their own decisions. CoHabby may use automated checks for security, moderation, eligibility, and service integrity, with review or appeal paths where required by law.

12. Retention and deletion

We keep information only as long as needed for the feature, security, dispute, payment, legal, or audit purpose described here. Feature-specific records use bounded expiration where practical. Account deletion removes or de-identifies eligible data, including intelligence approval, memory, feedback, voice-session control records, and listing-agent drafts, subject to legal retention and transaction requirements.

13. Security and international processing

We use access controls, encrypted transport, server-side authorization, least-data projections, and other technical and organizational safeguards. No method is perfectly secure. CoHabby and its providers may process information in the United States and other countries. Where required, we use an approved transfer mechanism and additional safeguards.

14. Adults only, changes, and contact

CoHabby is for adults age 18 and older. We do not knowingly collect information from children. We may update this policy and will provide notice appropriate to the change; a new affirmative approval will be requested when required. Questions or privacy requests can be sent to contact@cohabby.com.