Codaptable privacy policy

Effective October 16th 2026

This policy covers the Codaptable app at app.codaptable.com and in the app stores, and this website at codaptable.com. "Codaptable", "we" and "us" mean the provider of the service. If you have a question, write to support@codaptable.com.

Your chats are kept for 3 days

We save each chat for 3 days from when it starts, so you can come back to it, then it's deleted automatically. You can delete a chat sooner from the list of recent chats, or all of them at once. Saved chats are encrypted before they're stored, and no browser, including yours, reads them from our database directly: the app asks our server, which checks it's you. A chat past its 3 days can't be opened even if its deletion hasn't finished yet, and deletion normally finishes within a day after that.

To get each reply, your message passes through our server to Anthropic's Claude API, which generates the response. Our servers don't log message content.

Anthropic processes those messages to produce replies under its commercial terms for API customers.

What we collect, and why

Your account

Email address. Sign-up starts with it: Firebase Authentication, a Google service, emails you a one-time sign-in link to confirm it. We also use it to send you a sign-in link if you forget your password, and to link your account to purchases, for subscription receipts and restoring a purchase. We never use it for marketing.
Username. You sign in with it, together with your password.
Password. Our server stores it only as a one-way hash, so after sign-up nobody at Codaptable can see or recover the password itself.
Date of birth. Used to confirm you're 18 or older, and stored with your account.
The network you signed up from. To stop accounts being created in bulk, we limit how many new accounts one internet address or network can create in a day. We don't store the address itself, only a scrambled code made from it with a secret key, which isn't linked to your account and is deleted automatically after 24 hours.

What we store about your practice

These are kept in Cloud Firestore, a Google database service:

Your setup answers. The bubbles you chose about yourself, who you want to practice with and how they act. For the safety question, we store only the fact that the safety route was used, never which answers you picked.
Your practice profile. What the Mediator has noticed over time, such as patterns, parts and beliefs, your goals and the challenge level that suits you. You can view, edit and delete it in the app.
Usage counts for your plan. How many chat sessions you've used, and a running total of what your AI usage has cost us, so we can apply plan limits.
Subscription status, as reported by RevenueCat.
Your chats, encrypted, for 3 days from when each one started (see above).

Memories, if you turn them on

Memory is off unless you turn it on. When it's on, the Mediator keeps short notes between chats, such as what you practiced, what helped, or how you like to work. Memories are separate from your chats and outlast them, so they're kept short: never the chat itself, never quotes, never crisis details, diagnoses, or identifying facts about other people. You can read every note, edit or delete any of them, switch memory off, or forget everything, in the app under Your profile. Notes are encrypted with a key made just for you, protected by Google Cloud Key Management Service, and stored where no browser can read them. Forgetting everything or deleting your account destroys that key, so the notes can't be recovered. Notes are included in your data download.

The person you practice with

The profile of the person you practice with (the name you chose for them, the behaviors you picked, and your notes about how they talk or what matters to them) is stored with your account, in your words. Please describe behavior rather than identifying details. You can edit or clear it any time, and it's deleted with your account.

Subscriptions and payments

You can subscribe through the Apple App Store, Google Play, or on the web. Web subscriptions are billed by Stripe through RevenueCat, and Stripe sends the receipts and renewal emails. We never see your full card number. Subscriptions are managed through RevenueCat, which keeps your subscription status and purchase records linked to your account's internal ID. At checkout, the email on your account is passed along so your receipt and purchase match your account. Purchases made in an app store are handled by Apple or Google under their own terms and privacy policies.

When you contact support

If you use the support form or email us, we receive your email address, your name if you give it, the topic and your message. We use them only to reply and to help with your request. The support form runs on Cloudflare, and messages reach our inbox through Cloudflare Email Routing. The form uses Cloudflare Turnstile to check that a person, not a bot, is sending it.

This website

codaptable.com is hosted on Cloudflare. It doesn't use advertising or analytics cookies. Like most web services, our providers may process technical information such as IP addresses to deliver pages and protect against abuse.

Who helps us run Codaptable

Google (Firebase Authentication, Cloud Firestore, Cloud Functions, Firebase Hosting): Confirming your email and sending sign-in links, storing your account and practice data, running our server code, and hosting the web app.
Anthropic (Claude API): Generating the Mediator's and the Coperson's replies from the messages you send.
RevenueCat: Managing subscriptions: subscription status and purchase records, linked to your account's internal ID and the email used at checkout.
Stripe: Processing web payments.
Apple and Google: Processing purchases made through their app stores.
Cloudflare: Hosting this website, running the support form, checking it with Turnstile, and delivering support email.

Firebase states that its services encrypt data in transit using HTTPS, and that Cloud Firestore and Firebase Authentication also encrypt data at rest.

What we don't do

We don't show ads.
We don't sell your information or share it for advertising.
We don't use your email for marketing.
We don't save your chats.

Your choices

Your profile. View, edit or delete your practice profile in the app at any time.
Your account. Delete it from inside the app. See Deleting your account below.
Support messages. Ask us at support@codaptable.com to delete your support emails.
Questions about your data. Write to us and choose "Privacy or data request" on the support form. Depending on where you live, you may have further rights over your information, and we'll help you use them.

Deleting your account

You delete your account from inside the app, in the chat: choose Delete account in the sidebar, or ask the Mediator.

Download first if you like. You can download a copy of your data before you delete.
Confirm it's you. You confirm with your username and password.
What we delete. Your sign-in, email address, username, password hash, date of birth, practice profile, setup answers, saved chats, usage totals and subscription status. We also ask RevenueCat to delete your customer record. If RevenueCat can't be reached at that moment, we keep only your account's internal ID until that deletion goes through.
What we can't delete. Messages Anthropic already processed to write replies, which are handled under Anthropic's commercial terms, and purchase records that Apple, Google or Stripe keep as the law requires.
Subscriptions. If you subscribed on the web, deleting your account also stops your subscription from renewing: our server turns off renewal in Stripe before anything is deleted. Your access isn't extended and nothing is refunded. If you subscribed through the App Store or Google Play, cancel it in the store first, because we can't cancel store subscriptions for you.
Can't sign in? Ask for a sign-in link by email, then delete from the app. Support can't delete accounts on request, because we can't verify who's asking.

How long we keep things

Chats are deleted automatically 3 days after they start. Your account and practice data are kept until you delete them or delete your account. Support emails are kept for as long as we need them to help you, unless you ask us to delete them sooner.

Age

Codaptable is for adults 18 and over. We ask for your date of birth at sign-up, and people under 18 can't create an account. If we learn that someone under 18 has an account, we'll delete it.

Not for emergencies

Codaptable isn't a crisis service and can't send help. If you're in danger, call 911. To talk with someone now, call or text 988 (US), or see Resources.

Every message you write is checked automatically for signs of a crisis, such as thoughts of suicide or self-harm, wanting to hurt someone, or being hurt or threatened. The check is done by software and by Claude, not by a person. If it finds one, the chat ends right away and the app shows crisis lines you can call or text. Nobody is notified and nothing is sent to anyone. We don't keep the result of the check; the chat is only marked as ended, and it's deleted on the same 3-day schedule as any other chat.

Changes to this policy

If we change this policy, we'll update this page and the effective date above. If a change matters to how your information is used, we'll tell you in the app before it takes effect.

Contact

Email support@codaptable.com, or use the support form.