Privacy Policy

THE COOL COMPANY, TOO · Effective February 25, 2026

This privacy policy applies to the THE COOL COMPANY, TOO app (hereby referred to as “Application”) for mobile devices that was created by THE COOL COMPANY, TOO (hereby referred to as “Service Provider”) as a Free service. This service is intended for use “AS IS”.

Information Collection and Use

The Application collects information when you download and use it. This information may include:

• Your device’s Internet Protocol address (e.g. IP address)
• The pages of the Application that you visit, the time and date of your visit, and the time spent on those pages
• The time spent using the Application
• The operating system used on your mobile device
• Device model and screen size
• Application version and build number
• Approximate geographic location derived from your IP address (country and city level only)

The Application does not collect precise GPS location data from your mobile device.

The Service Provider may use the information you provided to contact you from time to time to provide important information, required notices, and service-related communications.

For a better experience while using the Application, the Service Provider may require you to provide certain non-personally identifiable information, including but not limited to:

• An anonymous user identifier (UUID)
• Subscription status and subscription type
• Subscription expiration date
• Credit balance and usage statistics
• Authentication session tokens
• Transaction data processed through RevenueCat and the Apple App Store

The Application does not collect names, email addresses, phone numbers, physical addresses, payment card information, device contacts, or precise location data.

All collected information is used solely to provide and improve the Application’s functionality as described in this privacy policy.

Analytics and Event Tracking

The Application uses analytics to understand how users interact with the Application and to improve the user experience. The following types of user interactions are tracked:

• Application opens and session activity
• Onboarding flow progress (steps started, completed, or skipped)
• Paywall views and purchase events
• Feature usage, such as image selection, prank generation, and sharing
• Generation errors and performance metrics (e.g. processing duration)
• Settings interactions (e.g. notification preferences)

All analytics events are associated with an anonymous user identifier and do not contain personally identifiable information such as names, email addresses, or photos. Analytics data is used solely to monitor Application performance, identify issues, and improve the user experience.

User-Uploaded Images and Face Data

The Application allows users to upload photos for the purpose of generating prank images.

User-uploaded photos may contain faces. However:

• The Application does not perform facial recognition
• The Application does not perform biometric identification
• The Application does not perform face profiling
• The Application does not analyze faces to identify individuals

User-uploaded images are used solely to provide the image generation features explicitly requested by the user.

All uploaded images are processed temporarily and are automatically deleted immediately after the requested processing is completed. The Service Provider does not store user-uploaded images permanently.

The Application does not share user-uploaded images or face data with third parties for advertising, analytics, tracking, or marketing purposes.

Third Party Access

The Application uses the following third-party services to provide its functionality. Each service has its own Privacy Policy regarding data handling:

• RevenueCat — Used to manage in-app subscriptions and purchases. RevenueCat receives transaction data, subscription status, and an anonymous user identifier.
• PostHog — Used for product analytics. PostHog receives anonymized usage events (such as feature usage and performance metrics), device information (operating system, device model, app version), IP address, and an anonymous user identifier. PostHog may derive approximate geographic location from IP addresses.
• OneSignal — Used to deliver push notifications. OneSignal receives a device push token, an anonymous user identifier, and data about notification interactions.
• Supabase — Used as a backend service for user authentication, credit management, and data storage. Supabase stores anonymous user identifiers, authentication session tokens, subscription data, credit balances, and generation history.

The Service Provider does not sell user data to third parties. Data shared with third-party services is limited to what is necessary for the Application to function and is subject to the respective privacy policies of those services.

The Service Provider may disclose User Provided and Automatically Collected Information:

• As required by law, such as to comply with a subpoena or similar legal process
• When disclosure is necessary to protect rights, user safety, or investigate fraud
• To trusted service providers who work on behalf of the Service Provider and have agreed to adhere to this privacy policy

Opt-Out Rights

You can stop all collection of information by the Application easily by uninstalling it. You may use the standard uninstall processes available through your mobile device or the application marketplace.

Data Retention Policy

User-uploaded images are processed temporarily and are deleted immediately after image generation is completed.

Other non-personally identifiable user data (such as anonymous identifiers, subscription status, usage statistics, and analytics events) is retained only for as long as necessary to provide the Application’s functionality and to comply with legal obligations.

If you would like the Service Provider to delete any retained user data, please contact ahcmit@gmail.com, and the request will be handled within a reasonable time.

Children

The Application does not knowingly collect personally identifiable information from children under the age of 13.

The Application does not address anyone under the age of 13. If the Service Provider becomes aware that a child under 13 has provided personal information, such information will be immediately deleted.

If you are a parent or guardian and believe that your child has provided personal information, please contact ahcmit@gmail.com so appropriate action can be taken.

Security

The Service Provider is committed to safeguarding the confidentiality of user information and implements reasonable physical, electronic, and procedural safeguards to protect information processed and maintained.

Changes

This Privacy Policy may be updated from time to time. Any changes will be reflected on this page. Continued use of the Application after changes are posted constitutes acceptance of the updated policy.

Effective Date: February 25, 2026

By using the Application, you consent to the processing of your information as described in this Privacy Policy.