Privacy Policy

CoCap is operated by Kapil Bansal (sole proprietor, GSTIN 23GALPB3479M1ZB), 140, Nihalpur Mundi, Indore, Madhya Pradesh 453331 — the data fiduciary responsible for your personal data under India's Digital Personal Data Protection Act, 2023.

For any question, request or complaint about your data, write to our grievance contact at hello@cocap.in. We respond within 30 days.

Account: your phone number (used for OTP login), your email address (verified at signup, used for your progress report and to get you back in if you lose your number), and the profile you choose to share — name, photo, city, self-rated English level, learning goal.

Practice data: your conversations with Kaira, your lesson and drill results, fluency and clarity scores, the evidence behind your CEFR level, CapCoins and streak activity, and the words you save to your vocabulary deck.

Your speech, in three different ways. They are worth telling apart:

• 🗣️When your device can transcribe by itself — mostly on a computer — your words are turned into text by the speech recogniser built into your browser (on Android, Google's). That happens on your device and under your device settings; the audio does not reach CoCap. We receive the text.
• ☁️When it cannot — which is most phones — your phone records a short audio clip and sends it to CoCap, and we pass it to a speech-to-text provider (OpenAI, in the United States) which returns the words. We do this because most phone browsers, including the one inside this app, have no speech recogniser at all — without it the app simply could not hear you. The clip is used for that transcription and is not kept unless it is a Speak-for-a-Minute recording you chose to save.
• 🎙️Speak for a Minute recordings — here we do keep the audio, because the whole point is replaying your own progress (“then vs now”). Clips are stored privately in India, are only ever reachable through a short-lived link signed for you, are never shared or sold, and you can delete any of them, any time.

App & device: basic, privacy-friendly usage and crash diagnostics that help us keep CoCap working — which screens are used, and the technical details of an error when one happens. We do not collect your contacts, your location beyond the city you type in yourself, your device advertising ID, or anything from other apps.

A notification token, in the Android app. If you allow notifications, Android gives the app an anonymous device token through Google's Firebase Cloud Messaging, and we store it so we can send you a reminder. It identifies the app on your phone, not you: it carries no name, number or address, it is reset if you reinstall CoCap, and refusing the permission — or switching notifications off in your phone's settings — stops it being created at all. It is deleted with your account.

How you found us. When you first arrive we note the website that sent you (for example, that you came from a Google search), any campaign tag in the link you clicked, and which CoCap page you landed on. It is stored once, with your account, so we can tell which of our free lessons actually help people find us. It is not a profile of you, it is not shared, it does not follow you to other websites, and it is deleted with your account.

What we do not collect: CoCap is free — there is no payment, no card, no UPI and no billing data anywhere in the app, and the Android app has no in-app purchases at all.

To run CoCap: coach you, work out and evidence your English level, show your progress, run streaks and rewards, send the reminders you asked for, answer your support messages, and keep CoCap safe and working.

We do not sell your personal data. Ever.

We do not use your conversations to train anyone's AI models, and we do not permit our AI providers to do so either.

We rely on a small set of trusted, industry-standard service providers, each bound by contract and confidentiality and given only the data it needs to do its job:

• ☁️Cloud database & file storage — your account, your practice history and your voice clips are hosted in India (Mumbai region), behind row-level security.
• 🤖An AI language-model provider — powers Kaira. The text of your practice conversation is sent to be coached on and scored, along with your first name so she can greet you by it. Your phone number and email are never sent, and anything that looks like a contact detail, an ID or a code is automatically kept out of what Kaira remembers about you.
• 🗣️Your device's own speech recogniser — where your browser has one, it turns your speech into text before it reaches us. On Android that is Google's speech service, governed by your device settings and Google's privacy policy.
• ☁️A speech-to-text provider — where your browser has no recogniser of its own, which is most phones, a short audio clip of what you said is sent to be turned into words and returned to us. It is used for that and not kept by us afterwards, unless it is a recording you chose to save.
• 🛠️An error-monitoring service — receives the technical detail of a crash so we can fix it.
• ✉️Email and SMS delivery services — send your login codes, reminders and progress reports.
• 🔔Google Firebase Cloud Messaging — in the Android app only, delivers a notification to your phone. It receives the anonymous device token described above and the text of the notification itself, never your practice content.

Advertising and measurement. CoCap ships no advertising SDK and shows no ads. On our website we may run standard, consent-gated measurement tools (such as Google Analytics or a Meta pixel) — nothing loads unless you agree to it, and you can decline. We never send your practice content, your recordings or your conversations to any such tool.

A current list of our processors is available on request at hello@cocap.in.

Your account, your practice history and your voice recordings are stored in India.

Three things necessarily travel outside India: the text of your conversation with Kaira (with your first name, so she can greet you); a short audio clip of what you said, when your phone cannot turn it into words by itself; and crash diagnostics. All are processed by providers in the United States, transferred under contractual safeguards, limited to what the task needs, and not used for advertising or model training.

If you use the Android app and allow notifications, the anonymous device token and the text of a notification also pass through Google's messaging service in order to reach your phone.

You can view and edit your profile anytime. Two of your rights are self-serve, right inside the app:

• ⬇️Export — download everything we store about you as JSON, from Settings.
• 🗑️Delete — request deletion from Settings, or see our account deletion page for step-by-step instructions. You get a 30-day grace period to change your mind.

You can also delete parts of your data without closing your account — your voice clips and your saved words are each individually deletable inside the app.

You may also ask us to correct your data, to tell you what we hold, or to nominate someone to exercise these rights on your behalf. Prefer to write to us? Email hello@cocap.in — we'll act within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Data is stored with row-level security and accessed only through our servers, over encrypted connections. Voice clips sit in a private bucket that is never publicly readable — a recording is only ever reachable through a short-lived link signed for you. Login codes expire in 5 minutes and are stored hashed.

We keep your practice history for as long as your account is active, because that is what your progress chart and your level are built from.

When you ask us to delete your account, it is deactivated immediately and permanently erased after 30 days — including your recordings and every file you uploaded. We keep only the minimal records the law requires us to keep.

CoCap is intended for users 13 and older, and is not directed at younger children.

Under India's DPDP Act, anyone under 18 is treated as a child. If you are under 18, please use CoCap with a parent or guardian's knowledge and consent. We do not show advertising to anyone, we do not track anyone across other apps or websites, and we do not use anyone's conversations for AI model training.

If you believe a child under 13 is using CoCap, or you are a parent who wants an account removed, contact us and we'll delete it.

If we change how we handle your data, we will update this page and change the date at the top. For a change that materially affects you, we will also tell you in the app or by email before it takes effect.