Privacy Policy

Who we are

Coglix Labs Inc. ("we", "us") makes Bonet, a home practice app for movement, speaking and brain games. This policy explains what personal data the app and this website collect and how we use it. Contact: privacy@coglixlabs.com.

Bonet is a practice tool, not a medical device, and does not diagnose or treat any condition. Ask your therapist or doctor before starting.

What we collect in the app

• Account: email address, display name and sign-in details (handled by our sign-in service, Supabase Auth).
• Practice results: which exercise or game, date and time, duration, reps, scores, range-of-motion estimates, tracking quality, speaking prompts, the text the app recognised from your speech, and scores.
• Settings and progress: preferences, goals, streaks, plans you save, language and difficulty.
• Your needs profile: the answers you give when you set up the app, such as an age band (you can choose not to say), which side is weaker, your goals and focus areas, how many minutes a day you want to practise, how you move, and when a reminder suits you. It is saved with your account so your plan follows you to other devices.
• Speaking measures: for each speaking try, the speaking rate, the length of pauses and how many words were recognised. The audio itself is not stored.
• Per-item practice results: for each speaking or brain-game item, which item it was, whether it was right, how many tries it took and how much help you used, so the app can choose what to repeat.
• League nickname and points, only if you join the weekly league: a nickname (made for you or one you choose) and your weekly points. Other players in your league can see them. Nothing else about your practice is shown to them. To keep leagues lively, some players are computer players. You can leave the league at any time, which deletes your nickname and league results.
• Your choice of outfit for Bonet (a reward for streaks), saved with your settings.
• Apple purchase identifiers, if you subscribe in the iPhone or iPad app: Apple's transaction identifier, product, status, trial, renewal and end dates, and an identifier that links the purchase to your account. We do not receive your Apple ID, card or payment details.
• Subscription status. Web payments are handled by Stripe and purchases in the iPhone and iPad app by Apple. We do not receive or store your card number.
• On your device: in the iPhone and iPad app your sign-in session is kept in the iOS Keychain. If you finish a session without a connection, the result waits in a queue on your device (for up to 30 days) and is uploaded when you are back online.

What we do not collect

• Camera video. It is processed on your device and never uploaded or recorded.
• Microphone audio. We do not save it. See "Speech" below for where it may be processed.
• The app does not include third-party advertising or analytics.

Speech

On the iOS app, speech recognition uses Apple speech recognition. It runs on your device where the device supports the language; otherwise Apple may process the audio under its own privacy terms. On the web, English can be recognised on your device. Cantonese audio may be sent through our server to Google Cloud Speech-to-Text to be turned into text. Your browser may also offer its own speech recognition, which sends audio to the browser maker. We do not keep the audio.

How we use it

• To run the app: show your history and progress, plan your practice, and produce the practice report you can print or share.
• To manage your account and subscription.
• To keep the service secure and fix problems.

We do not sell your personal data.

Where it is stored and how it is protected

Account and practice data is stored in a cloud database run by Supabase. It is encrypted in transit (TLS) and encrypted at rest by the provider. Row-level security rules mean each account can only read and change its own data. We do not use end-to-end encryption, so we and our hosting provider are technically able to access stored data. We hold no security or privacy certification.

Who else receives data

• Supabase: database and sign-in hosting.
• Stripe: subscription payments on the web.
• Apple: App Store purchases and subscriptions in the iPhone and iPad app, and speech recognition in the app (see Speech).
• Google Cloud Speech-to-Text: Cantonese speech recognition on the web only.
• Apple: speech recognition in the iOS app where your device cannot do it on its own, and App Store services.
• A therapist, family member or anyone else only if you choose to give them a report you printed or shared.

This website

The marketing website uses Google Analytics (with IP anonymisation switched on, and no session recording) to understand how the site is used. It is loaded from Google and sets cookies on your browser. The demo request form sends the name, email, organisation and message you type to our form provider (Web3Forms) so that we can reply. The app itself does not use these tools.

Keeping and deleting your data

We keep your data while your account is open. You can delete your account in Settings in the app. This erases your account and all your practice history, scores, saved plans and settings, and cancels any web (Stripe) subscription. It does not cancel an App Store subscription: cancel that yourself in Settings > your name (Apple ID) > Subscriptions on your iPhone or iPad. It cannot be undone. Payment records held by Stripe or Apple follow their retention rules.

Your rights

You can ask us for a copy of your personal data, ask us to correct it, or ask us to delete it. Email privacy@coglixlabs.com. We aim to handle personal data in line with the privacy laws that apply to us, including Hong Kong's Personal Data (Privacy) Ordinance. This policy is not a certification of compliance with any law or standard.

Children

Bonet is not designed for children under 13 and we do not knowingly collect their personal data.

Changes

If we change this policy we will update the date above. If a change is significant we will tell you in the app.