Privacy and safety

Bonet by Coglix Labs Inc. · Last updated: November 2026

Not a medical device

Bonet is a practice tool, not a medical device, and does not diagnose or treat any condition. Ask your therapist or doctor before starting.

  • It gives practice guidance and a record of what you did. Camera and microphone measurements are estimates for practice, not medical measurements.
  • It has not been tested in a clinical trial and has not been reviewed or cleared by any medical regulator.
  • Stop if you feel pain, dizziness or unwell. Practise in a clear space, seated if you are unsteady, and with someone nearby if you need support.

What stays on your device

  • Camera video. It is processed on your device to find body and hand positions. It is not recorded and not uploaded.
  • Microphone audio. We do not save it. See the speech note below for where it may be processed.

What we store

When you create an account, we store your email address and display name. When you practise, we store the results: which exercise, when, how long, reps, scores, range-of-motion estimates, speaking prompts with the text the app recognised and its scores, and brain-game results. We also store your settings, goals and subscription status.

This data is kept in a cloud database (Supabase). It is encrypted in transit (TLS) and encrypted at rest by the database provider. Row-level security rules mean each account can only read and change its own rows.

We do not use end-to-end encryption. This means we, and our hosting provider, are technically able to access stored data.

Speech practice

  • iOS app: speech is recognised with Apple speech recognition, on your device where your device supports the language. Otherwise Apple may process the audio under its own privacy terms.
  • Web: English can be recognised on your device. Cantonese audio may be sent through our server to a cloud speech service (Google Cloud Speech-to-Text) to be turned into text.
  • We do not keep the audio. We keep the recognised text and the score.

What we do not have

We hold no security or privacy certification, and we have not been audited against HIPAA, ISO 27001, SOC 2 or any similar standard. We do not sign Business Associate Agreements. Bonet is not meant to be used by healthcare organisations to hold patient records.

Your choices

  • Delete your account and all your practice history yourself in Settings in the app.
  • For access to, or correction of, your data, email privacy@coglixlabs.com.

Read the full Privacy Policy and Terms.