Privacy policy
Last updated: October 11, 2026
coscientist at coscientist.app is a note app. This page states what the service collects, why, where it is stored, and who can read it.
What the service collects
- Email address: the address you sign in with.
- Sign-in codes: each code is stored hashed and expires after 5 minutes.
- Passkeys: if you add a passkey, its public key and technical identifiers such as the credential ID, device type, backup status, and transports. The private key stays on your device.
- Sessions: for each browser you sign in with, a session token, the creation and expiry times, your IP address, and your browser's user agent. A session lasts 7 days and renews when you use the app.
- Notes: the title and content of each note, the links between notes, and every saved revision of each note.
- Abuse limits: request counters for the sign-in endpoints, keyed by your IP address.
Why the service collects it
The service uses this data to create and secure your account, send your sign-in codes, store and show your notes, and limit abuse. It does not sell data and does not show advertising.
Cookies
Cookies keep you signed in and complete passkey sign-in. The service sets no advertising or analytics cookies.
Providers that handle your data
- Vercel hosts the application and handles each request to it, including your IP address.
- PlanetScale hosts the database that holds your account and notes.
- Resend delivers email. It receives your email address and the sign-in code in each message.
Where your data is stored
Your account and notes are stored in a PlanetScale Postgres database in AWS us-east-1 (N. Virginia, United States).
Who can read your notes
Your notes are private to your account. The database enforces this for every account, and no feature shares or publishes a note. The operator of the service has access to the database for operation and security.
Model training
Your notes are not used to train models.
Deleting your account
Email the contact address from the email address of your account and ask for deletion. Deletion removes your account, its sessions and passkeys, and all of its notes and their revisions. The account has no self-service deletion yet.
Contact
coscientist operates the service. Send privacy requests, including requests for access, correction, and deletion, to the address below.
privacy@coscientist.appChanges
This page changes when the service changes what it collects or how it handles it. The date at the top shows the last change.