Coco Privacy Policy

1. Information We Collect

Coco collects account information such as your name and email address when you create an account or use the app. It also collects child information, including your child's name and birth date, but only from a parent or guardian, and only to calculate age for activity matching. The app collects location information, including ZIP code and, if you allow it, precise or approximate device location, to estimate distance and drive time to activities. It also collects activity preference information, such as filters, interests, available time, and favorites. Coco collects usage data for basic analytics to help fix bugs and improve the experience. It also collects limited device information, such as device type and operating system, so the app can work and stay secure. The policy says it does not knowingly collect information directly from children, and your child's name is not shown to other users. Location access is optional, can be changed in device settings, and the app can still be used without it by entering a ZIP code manually.

2. How We Use Your Information

We use the information above to:

• Generate personalized, ranked activity recommendations
• Show you relevant local activities, events, and destinations
• Save your preferences and favorites across sessions
• Estimate distance and travel time to recommended activities
• Improve app performance, fix issues, and understand feature usage
• Send you important account or product updates (not marketing spam)
• If you join our waitlist prior to launch, we use your email to send occasional updates about Coco's launch. You may unsubscribe at any time.

Disclosure of Personal Data to Third Parties. We share the following categories of personal data with third parties: account information, child information, location data, and usage data. These categories of personal data are shared with the following categories of third parties:

• (i) cloud service providers and data processors for storage and app functionality;
• (ii) analytics providers to improve our services; and
• (iii) service providers supporting our internal operations as defined by COPPA (for example, personalizing recommendations within the app, maintaining your account, and analytics used solely to improve Coco -- not for contacting you or any third party for their own purposes).

Personal information is not sold to third parties. It is also not shared with third parties for their own marketing purposes. In addition, a child's name and birth date are not used for advertising or profiling.

3. Where Your Information Is Stored

Your account, child, and preference information is stored securely using our backend data infrastructure and is not stored only on your device. These providers act as data processors on our behalf and are contractually restricted from using your information for their own purposes.

We maintain reasonable administrative, technical, and physical safeguards designed to protect your information. If we experience a security breach involving your personal information, we will notify affected users and any applicable regulators as required by law.

4. Information We Do Not Share

• We do not sell your personal information to third parties.
• We do not use your child's name or birth date for advertising or profiling purposes.
• We do not share your personal information with third parties for their own marketing purposes.
• We do not display your child's name to any other user of the app.

5. Location Data

Location access is optional and used solely to estimate distance and drive time to recommended activities. You can enable or disable location access at any time in your device's Settings. If you decline location access, you can still use Coco by entering your ZIP code manually.

6. Children's Privacy

Coco is designed for use by parents and caregivers, not by children directly. We collect personal information about children (such as name and birth date) provided by parents to tailor activity recommendations. Before collecting, using, or disclosing a child's personal information, we obtain verifiable parental consent using a method recognized under COPPA, such as a confirmed opt-in email combined with an additional verification step. We do not disclose this information to third parties except for service providers supporting our internal operations. Parents have the right to review, delete, or refuse further collection or use of their child's personal information at any time. Parents also have the right to consent to our collection and use of their child's personal information without consenting to the disclosure of that information to third parties. To exercise these rights, please contact us using the information provided in Section 9. We maintain reasonable procedures to protect the confidentiality and security of this information.

If we learn that a child has created an account or submitted personal information directly without a parent's involvement, we will take steps to delete that information. Parents may contact us at any time (see Section 9) to review, correct, or delete their child's information.

7. Data Retention

We keep account and child information while the account remains active. We may also retain it for as long as needed to provide the service. If an account is deleted, personal information including your account information (name, email, ZIP code), your child's profile information (name and birth date), and your saved preferences and favorites is deleted within 45 days. Some information may be kept longer when required for legal or security reasons.

If you submit an explicit request that we delete your personal information, we will honor that request within 45 days, as required by applicable state privacy laws (such as Virginia's Consumer Data Protection Act and California's CCPA/CPRA). In cases where additional time is reasonably necessary to verify or complete the request, we may extend this by up to an additional 45 days, and will notify you if we do so.

7a. Cookies & Website Analytics

https://mycocoapp.com/ website is hosted on Lovable, which automatically collects aggregate visitor analytics - such as page views, visit duration, device type, and general location based on browser time zone. This data is anonymous and is not used to build individual visitor profiles.

When you join the waitlist, your email address is stored securely in our database and used only to notify you about Coco's launch and share relevant updates. We do not sell your information, and it is not used for advertising.

You can control cookies through your browser settings. Because Lovable's analytics are aggregate and anonymous, no additional cookie consent action is required to use this feature.

8. Your Choices and Rights

Under the Virginia Consumer Data Protection Act (VCDPA), Virginia residents have the following rights regarding their personal data: (1) to confirm whether or not we are processing your personal data and to access such personal data; (2) to correct inaccuracies in your personal data; (3) to delete personal data provided by or obtained about you; (4) to obtain a copy of your personal data in a portable and readily usable format; and (5) to opt-out of the processing of personal data for purposes of targeted advertising, the sale of personal data (including geolocation data), or profiling in furtherance of decisions that produce legal or similarly significant effects.

You can:

• Update or correct your account and child information at any time within the app
• Disable location access through your device settings
• Delete your account, which removes your saved preferences and favorites
• Request a copy of the information we hold about you, or request deletion, by contacting us (Section 9). If we decline to take action regarding your request, you may appeal our decision within a reasonable period of time by contacting us at Info@mycocoapp.com. Within 60 days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, you may contact the Virginia Attorney General to submit a complaint.

8a. California Residents' Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you the right to know what personal information we collect, use, and disclose about you; to request deletion and correction of your personal information; to obtain a portable copy of your personal information; to opt out of the "sale" or "sharing" of your personal information (as those terms are broadly defined under California law); and to be free from unlawful discrimination for exercising these rights. We do not sell your personal information for money. To the extent any of our analytics or advertising integrations could be considered a "share" under California law, you may opt out by contacting us at the information in Section 9. You may also designate an authorized agent to submit requests on your behalf.

9. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Info@mycocoapp.com

10. Changes to This Policy

We may update this Privacy Policy as Coco evolves. We will update the "Last updated" date above and, for material changes, notify you within the app.