Privacy Policy

Last updated: 27 July 2026

Cobija is a mobile app that helps an older adult manage medications, health readings, and daily care, and lets family members they invite help from a distance. This policy explains exactly what the app stores, who it is shared with, and how to delete it.

We have written this in plain language rather than legal boilerplate. Where something is a limitation or an exception, we say so directly.

Who we are

[LEGAL ENTITY NAME], [ADDRESS], operates Cobija. For any question about this policy or your information, contact privacy@cobija.app.

What we store

Cobija stores only what you or your care circle enter, plus what is needed to run the app. We do not buy data about you and we do not track you across other apps or websites.

Category	What it includes
Profile	Name, age, health conditions, allergies, emergency contacts, profile photo, and your device's time zone.
Medications	Medication names, dosages, schedules, optional photos of the medication, and whether each dose was taken or missed.
Health readings	Vitals you record, such as blood pressure, blood sugar, weight, or temperature.
Journal	Notes, reported symptoms, mood check-ins, and photos you post to the shared journal.
Care circle	Which caregivers are linked to which senior, shared to-dos and appointments, and messages sent in the circle chat.
Sofía conversations	The messages you exchange with Sofía, the in-app assistant, and daily counts of how often AI features were used.
Voice recordings	Reminder messages a family member records in their own voice.
Account & device	Your email address, sign-in records, and a push-notification token for each device so reminders can reach you.
Subscription	Whether a caregiver has a paid plan and its status. Card details are handled by the app store and never reach us.
Security log	A record of sensitive actions, such as viewing another person's health data or deleting an account.

Location

Cobija requests your location only at the moment you trigger an SOS, so it can be included in the alert sent to your emergency contacts. It is not collected in the background and the app does not track your movements.

How we use it

To show your medication schedule and send reminders at the right local time.
To let the caregivers you have invited see how you are doing.
To let Sofía answer questions about your own records — your medications, your readings, your recent journal entries.
To check for possible interactions between the medications you have entered.
To send an SOS alert, with your location, to the contacts you chose.
To keep the service secure and to investigate misuse.

We do not use your health information for advertising, and we do not sell it.

Who can see your information

Your care circle

Caregivers you invite can see your medications, reminders, health readings, shared journal entries, and calendar. A caregiver can mark a journal note as private, in which case it is visible to other caregivers but not to the senior. You can remove a caregiver's access at any time.

Companies that process data for us

Cobija runs on services that store or process information on our behalf. They act on our instructions and may not use your information for their own purposes.

Service	What it handles
Supabase	The database and file storage holding your records, photos, and voice recordings.
Clerk	Sign-in and account identity, including your email address.
Vercel	Hosting for the app's server.
Expo	Delivery of push notifications to your device.
AI provider	Sofía's replies, the daily summary, and pill identification. Depending on configuration this is DeepSeek, Google (Gemini), or Anthropic.
openFDA	Public drug-label data used for interaction checks. We send medication names only — never anything that identifies you.

About the AI features. When you talk to Sofía, ask her to identify a pill, or receive a nightly summary, the relevant part of your record — such as your medication list, recent readings, and recent journal entries — is sent to the AI provider to generate a reply. Do not enter anything you would not want processed by that provider. You can simply not use the AI features; the rest of the app works without them.

Otherwise

We share information outside the above only when the law requires it, or to protect someone's safety.

How long we keep it

Your information stays in Cobija until you delete it or delete your account. Deleting your account removes it as described below.

Deleting your account

You can delete your account and its data from inside the app at any time. Full instructions are on the delete-account page.

Deleting removes your profile, medications, reminders, health readings, journal entries and their photos, circle messages, to-dos, calendar, your conversations with Sofía, voice recordings, push tokens, caregiver links, and your sign-in identity.

What is kept. Three things survive deletion, on purpose. Our security log retains a record that an account existed and what sensitive actions were taken, including the deletion itself — this is how we can show that a deletion was requested and honoured, and how we investigate misuse. Basic subscription and AI-usage records are kept for billing and abuse-prevention. Your consent records — what you agreed to, when, and in which language — are kept as proof that we had your permission to hold your information in the first place. These records are not used to rebuild your health information, which is gone.

Information a caregiver saved into someone else's circle stays with that circle if it belongs to them — for example, a senior's own journal does not lose entries because a caregiver closed their account. Entries that caregiver wrote are removed.

Your choices

See your information. Everything Cobija holds about you is visible in the app.
Correct it. Profile, medications, readings, and journal entries can be edited or removed individually.
Delete it. See deleting your account.
Turn off notifications. In your device settings, at any time.
Remove a caregiver. In the app, which immediately ends their access.

To ask a question or make a request in writing, email privacy@cobija.app.

How we protect it

Traffic between the app and our servers is encrypted.
The database enforces per-row access rules, so one person's records cannot be read by another account even if the app asked for them.
Photos and voice recordings are kept in private storage and reached only through short-lived signed links.
Sensitive actions, such as a caregiver viewing a senior's health data, are logged.

No service can promise perfect security, and we do not claim to.

Children

Cobija is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, email us and we will delete it.

Not a medical service

Cobija helps you keep track of care. It does not provide medical advice, and Sofía is an AI assistant, not a clinician. Always talk to a doctor or pharmacist about your treatment.

Where your information is stored

Cobija's servers and database are located in the United States. If you use the app from elsewhere, your information is transferred to and stored in the United States.

Changes to this policy

If we change this policy we will update the date at the top, and for significant changes we will tell you in the app.

Contact

privacy@cobija.app