Privacy Policy

COHY TRAVEL SOLUTION PRIVATE LIMITED  •  CIN: U79110GJ2026PTC175111

1. Introduction

At COHY TRAVEL SOLUTION PRIVATE LIMITED (the "Company," "we," "our," or "us"), we are committed to protecting your personal information and being transparent about how we handle it. This Privacy Policy outlines our practices regarding the collection, use, processing, storage, and disclosure of your data when you engage with our website, mobile applications, and various service offerings (collectively, the "Platform"). Our Platform serves as a comprehensive travel hub, providing both traditional travel booking services—including flights, hotels, and holiday packages—and a unique, exclusive social networking feature known as the "Travel Community," designed to help you discover and connect with like-minded travel companions. By accessing or using any part of our Platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

1.1 Information We Collect and Why

To provide you with a seamless travel and social experience, we collect information that helps us personalize your journey. This includes:

• Personal Identifiers: Your name, email address, contact number, and government-issued identification required for travel bookings.
• Travel Preferences: Your frequent flyer details, dietary requirements, and past booking history to tailor future recommendations.
• Community Profile Data: In our Travel Community, we may collect your interests, travel style, and bio to help you find the most compatible companions.
• Technical Data: We automatically log IP addresses, browser types, and device information to maintain the security and performance of our Platform.

1.2 How Your Data is Shared and Stored

We do not sell your personal data to third parties. However, to fulfill our services, we must share relevant information with service providers such as airlines, hotels, and payment processors. Within the Travel Community, certain profile elements will be visible to other registered members to facilitate networking, though you retain control over your privacy settings. We employ industry-standard encryption and security protocols to store your data, ensuring it remains protected from unauthorized access or accidental loss.

1.3 Your Rights and Choices

We believe you should stay in control of your digital footprint. You have the right to access, correct, or delete your personal information at any time through your account settings. If you wish to opt out of marketing communications or restrict how your data is used within our social networking features, you can adjust your preferences or contact our support team directly. We periodically update this policy to reflect changes in legal requirements or our service offerings, and we encourage you to review it regularly to stay informed about how we are safeguarding your travel experiences.

2. Information We Collect

To provide a seamless travel booking experience and a vibrant social community, we collect several categories of information. This data is used to verify your identity, process transactions, and personalize your interactions on the Platform.

2.1 Personal Information

We collect data that identifies you as an individual. This is primarily used for account creation, communication, and legal compliance.

• Identity Data: Full name, date of birth, and gender.
• Contact Details: Email address and phone number.
• Verification Data: Government-issued ID details (required for specific bookings or account verification).
• Financial Data: Billing addresses and payment details (processed via secure, encrypted gateways).

2.2 Travel Information

To facilitate your trips and provide relevant recommendations, we process data related to your journey:

• Documentation: Passport details and visa-related information (where required for international travel).
• Travel History: Records of past bookings, itineraries, and service preferences.
• Preferences: Specific requirements such as seat selection, meal preferences, or accessibility needs.

2.3 Community Profile Information

The Travel Community is a social feature. While some information is required, much of what you share is voluntary to help you connect with others:

• Public Profile: Profile photo, bio/description, and travel interests.
• Geographic Data: Your current city or country.
• Social Preferences: Your preferred travel style (e.g., solo, luxury, backpacking).

2.4 Usage Data & Technical Information

We automatically collect information about how you interact with our Platform to improve performance and security:

• Device Metadata: IP address, device type, operating system, and browser version.
• Activity Logs: Pages visited, time spent on specific sections, and navigation patterns.
• Referral Data: The website or source that directed you to our Platform.

2.5 Cookies & Tracking Technologies

We utilize cookies, web beacons, and similar tracking technologies to enhance your user experience. These tools allow us to:

• Remember Your Preferences: Keep you logged in and save your language or currency settings.
• Analytics: Understand how our Platform is performing and identify areas for improvement.
• Security: Detect and prevent fraudulent activity.

3. How We Use Your Information

We process your data based on several legal and operational grounds, primarily to fulfill our contract with you, comply with legal obligations, and pursue our legitimate interest in providing a world-class travel and social experience.

3.1 Service Delivery and Management

The primary reason we collect your data is to act as your travel facilitator. This includes:

• Booking Fulfilment: Processing reservations for flights, hotels, and tours, and sharing necessary details with third-party vendors.
• Account Authentication: Managing your registration, enabling secure logins, and verifying your identity to prevent unauthorized access.
• Transaction Processing: Securely handling payments, generating invoices, and managing refunds or cancellations.

3.2 Social Connectivity (Travel Community)

Our Platform is unique in its social focus. We use your community profile data to:

• Facilitate Matchmaking: Suggesting potential travel companions based on shared interests, destinations, and travel styles.
• Communication Tools: Enabling in-app messaging and interaction features so you can coordinate plans with other users.
• Trust and Safety: Using profile verification to foster a secure environment for solo travelers and community members.

3.3 Personalization and User Experience

We want your experience to be intuitive. We use your data to:

• Tailored Recommendations: Suggesting destinations or travel packages based on your past booking history and "liked" interests.
• Localized Content: Displaying currency, time zones, and regional travel advisories relevant to your location.
• Interface Optimization: Analyzing usage patterns to simplify our booking flow and improve the overall UI/UX.

3.4 Communication and Marketing

We keep you informed through various channels:

• Transactional Alerts: Sending booking confirmations, flight status updates, and itinerary changes via email, SMS, or push notifications.
• Promotional Offers: Sending newsletters about exclusive deals, seasonal discounts, and new features (you may opt out of these at any time).
• Support Services: Responding to your inquiries, troubleshooting technical issues, and collecting feedback through surveys.

3.5 Security, Legal, and Compliance

To protect our users and our business, we use information to:

• Fraud Prevention: Monitoring transactions and login patterns to detect and block fraudulent activity or identity theft.
• Safety Monitoring: Reviewing community content to ensure compliance with our Terms of Service and to prevent harassment or misuse of the social feature.
• Regulatory Compliance: Meeting tax, accounting, and legal obligations, such as maintaining records required by aviation or local tourism authorities.
• Dispute Resolution: Using stored records to resolve any conflicts regarding bookings, payments, or user interactions.

3.6 Data Aggregation (Non-Identifiable)

We may anonymize and aggregate user data to produce industry insights, trend reports, and internal business analytics. This data does not identify you personally and is used to help us understand broader travel market shifts.

4. Travel Community & User Interaction Disclaimer

The Travel Community feature is designed to foster connections and shared experiences. However, the nature of social networking involves inherent risks. By opting into and using these features, you acknowledge and agree to the following terms and safety guidelines.

4.1 Assumption of Risk

While our Platform provides the tools to facilitate connections, any interaction, communication, or subsequent travel arrangement made between users is strictly at your own risk. The Company provides the medium for discovery but does not oversee the private interactions or physical meetings of its members.

4.2 Limitation of Liability and User Conduct

• No Background Verification: Unless explicitly stated via a specific "Verified" badge or service, the Company does not conduct criminal background checks, identity verification, or vetting of users. A user profile does not constitute an endorsement by the Company.
• Responsibility for Actions: The Company is not responsible for the behavior, safety, or conduct of any user, whether online or offline. This includes, but is not limited to, the accuracy of profile information, the quality of travel companionship, or any disputes arising from shared travel costs.
• Independent Verification: Users are solely responsible for performing their own due diligence. You are encouraged to verify the identity and credibility of any potential travel companion through video calls, social media cross-references, or meeting in public places before committing to shared travel.

4.3 Community Safety Guidelines

To ensure a secure environment, we strongly recommend the following precautions:

• Keep Communications on the Platform: Use our internal messaging system for as long as possible before sharing personal contact details like your phone number or home address.
• Share Your Plans: Always inform a trusted friend or family member of your travel itinerary and the identity of the person you are meeting.
• Public Meetings: For first-time meetings, always choose a high-traffic, public location during daylight hours.
• Trust Your Instincts: If a user makes you feel uncomfortable or pressures you for financial assistance/personal information, cease communication immediately and report the profile to our moderation team.

4.4 Reporting and Moderation

We reserve the right, but are not obligated, to monitor content shared within the Travel Community. We may remove content or suspend accounts that violate our Community Standards. If you encounter any suspicious or inappropriate behavior, please use the "Report User" feature or contact our support team immediately.

4.5

The Company acts solely as a service provider and is not a party to any agreements made between users. Your safety is our priority, but ultimately, it remains your personal responsibility.

5. Sharing of Information

We do not sell your personal data to third parties. We only share your information with the following categories of recipients to ensure seamless service delivery and legal compliance:

5.1 Service Providers & Partners

To facilitate your travel arrangements and maintain our platform, we share data with:

• Travel Vendors: Airlines, hotels, car rental agencies, and tour operators necessary to fulfill your bookings.
• Financial Processors: Secure payment gateways to handle transactions and fraud prevention.
• Technical Infrastructure: IT hosting, cloud storage, and analytics providers that help us optimize our services.

5.2 Legal & Regulatory Compliance

We may disclose your information to government authorities, courts, or law enforcement if we believe such action is necessary to:

• Comply with a legal obligation or valid legal process (e.g., a subpoena).
• Protect and defend the rights or property of the company.
• Ensure the personal safety of our users or the public.

5.3 Business Transitions

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of the business assets. We will notify you via email or a prominent notice on our website of any change in ownership.

5.4 International Data Transfers

Since travel is global, your information may be processed in countries outside of your residence. We ensure that all international transfers comply with applicable data protection laws and maintain a high level of security regardless of where your data is processed.

6. Data Storage and Security

We prioritize the integrity and confidentiality of your personal information. Our security framework is designed based on industry standards to protect against unauthorized access, disclosure, or loss.

6.1 Technical Safeguards

• Encryption Standards: All sensitive data is encrypted at rest using AES-256 and in transit via Transport Layer Security (TLS) protocols. This ensures that even in the event of interception, your data remains unreadable.
• Hardened Infrastructure: We utilize secure, distributed cloud servers with enterprise-grade firewalls and continuous monitoring to detect and neutralize potential threats in real-time.
• Anonymization: Whenever possible, we use data masking and pseudonymization techniques to minimize the risk associated with storing personally identifiable information (PII).

6.2 Administrative & Physical Controls

• Principle of Least Privilege (PoLP): Internal access to your data is strictly limited to authorized personnel who require it to perform their specific job functions. Access is governed by multi-factor authentication (MFA) and audited regularly.
• Vendor Risk Management: We conduct rigorous security assessments of all third-party service providers to ensure they maintain security standards equivalent to our own.

6.3 Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes outlined in this policy, or to comply with legal, tax, and accounting requirements. Once data is no longer required, it is securely deleted or overwritten.

6.4 Security Disclaimer

While we employ rigorous security protocols, it is important to note that no method of transmission over the internet or electronic storage is 100% secure. We strive to use commercially acceptable means to protect your information but cannot guarantee its absolute security. In the event of a confirmed data breach, we will notify affected individuals and regulatory bodies in accordance with applicable law.

7. User Responsibility & Conduct

The security of your information is a shared responsibility. By using our platform, you acknowledge and agree to adhere to the following obligations to maintain the integrity of our community:

7.1 Safeguarding Credentials

• Account Integrity: You are responsible for maintaining the confidentiality of your login credentials (username and password). We recommend the use of complex passwords and Multi-Factor Authentication (MFA) where available.
• Unauthorized Access: You agree to notify us immediately at [email protected] if you suspect your account has been compromised or if there is any unauthorized use of your credentials.

7.2 Prohibited Disclosure of Sensitive Data

• Public Forums: You agree not to post, share, or broadcast sensitive personal information—including financial details, government IDs, or private contact information—within public or communal areas of the platform.
• Self-Protection: Information shared in public reviews or community threads is at your own risk; we cannot guarantee the privacy of data you choose to make public.

7.3 Platform Integrity & Acceptable Use

• No Malicious Activity: You shall not attempt to circumvent platform security, introduce viruses/malware, or engage in "scraping" or automated data collection without explicit authorization.
• Prohibited Misuse: The platform must not be used for fraudulent bookings, identity theft, or any activity that violates local or international laws.

7.4 Respect for Third-Party Privacy

• Peer Privacy: You must respect the privacy of other users, service providers, and staff. This includes a strict prohibition on the unauthorized collection, storage, or "doxxing" of other individuals' personal data discovered through the platform.
• Content Ownership: Any content uploaded by you (reviews, photos, etc.) must not infringe upon the privacy or intellectual property rights of any third party.

8. Data Retention & Archival Policy

We adhere to the principle of data minimization. Your personal information is retained only for the duration necessary to fulfill the purposes for which it was collected, or to comply with statutory, legal, and contractual requirements.

8.1 Retention Criteria

The specific period for which we retain your data is determined by the following criteria:

• Operational Necessity: We maintain active account data for as long as you possess an open account or as long as it is required to provide you with the requested services (e.g., active travel itineraries).
• Contractual Obligations: Certain data must be retained to fulfill our agreements with travel vendors, airlines, and insurance providers.
• Financial & Tax Compliance: In accordance with fiscal regulations, we retain transactional records (including payment history and billing details) for a period of up to 7 years to satisfy audit and tax reporting mandates.

8.2 Legal and Dispute Resolution

Notwithstanding the above, we may retain specific categories of information for longer periods if reasonably necessary:

• Litigation Hold: If there is a pending legal action or a foreseeable threat of litigation, data relevant to the matter will be preserved until the legal process is fully resolved.
• Regulatory Inquiry: To respond to valid requests from law enforcement or government regulatory bodies.
• Fraud Prevention: Minimal data may be retained in a "blacklisted" format to prevent recurring fraudulent activity or platform abuse.

8.3 De-identification and Secure Disposal

Once the retention period expires, we execute one of the following protocols:

• Permanent Deletion: Data is securely erased from our active databases and backup systems using industry-standard wiping methods.
• Anonymization: Data is stripped of all personally identifiable markers (PII) such that it can no longer be linked to an individual. This anonymized, aggregated data may be retained indefinitely for statistical analysis and service optimization.

9. Your Data Privacy Rights

Depending on your jurisdiction, you may hold specific statutory rights regarding the personal information we maintain. We are committed to facilitating these rights through a transparent and streamlined process.

9.1 Core Data Rights

• Right of Access & Portability: You have the right to request a copy of the personal data we hold about you. Where technically feasible, we will provide this data in a structured, commonly used, and machine-readable format (e.g., CSV or JSON).
• Right to Rectification: If you discover that any information we hold is inaccurate, incomplete, or outdated, you have the right to request an immediate update to ensure data integrity.
• Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your personal data. Please note that this right is subject to our Data Retention Policy (Section 8); we may be legally required to retain certain transactional or tax-related data despite a deletion request.
• Right to Restrict or Object to Processing: You may object to the processing of your data for direct marketing purposes or request that we limit how we use your data while a rectification request is pending.
• Right to Withdraw Consent: Where our processing is based on your explicit consent (e.g., marketing subscriptions), you may withdraw that consent at any time. This will not affect the lawfulness of processing performed prior to the withdrawal.

9.2 Exercising Your Rights

To exercise any of the rights mentioned above, please follow these procedures:

• Verification Process: To protect your privacy and security, we are required to verify your identity before fulfilling a request. We may ask for specific account details or a government-issued ID to ensure you are the authorized data subject.
• Response Timeline: We aim to respond to all legitimate requests within thirty (30) days. If the request is particularly complex or voluminous, we may extend this period by an additional sixty (60) days, notifying you of the delay and the reason.
• No Fee: Generally, there is no fee to access your data. However, we reserve the right to charge a reasonable administrative fee for requests that are manifestly unfounded, repetitive, or excessive.

9.3 Non-Discrimination Guarantee

We will not discriminate against you for exercising your privacy rights. This means we will not deny you services, provide a different level of quality, or charge different prices because you have chosen to exercise your rights to data privacy.

10. Anti-Harassment & Conduct Policy

We are committed to providing an environment free from discrimination, hostility, and harassment. We maintain a zero-tolerance policy regarding any behavior that demeans, threatens, or intimidates individuals based on their race, gender, religion, sexual orientation, disability, or any other protected characteristic.

10.1 Types of Harassment Defined

Harassment can take many forms. To ensure clarity, we categorize prohibited behaviors as follows:

• Verbal Harassment: This includes, but is not limited to, the use of slurs, derogatory comments, epithets, or "jokes" that target a specific group. It also encompasses persistent unwanted communication or the use of aggressive/insulting language in reviews or support chats.
• Sexual Harassment: Any unwelcome sexual advances, requests for sexual favors, or other verbal or physical conduct of a sexual nature. This includes "quid pro quo" (offering benefits for favors) and the creation of a "hostile environment" through sexually suggestive comments or imagery.
• Cyber-Harassment (Digital Harassment): The use of our platform to stalk, bully, or intimidate others. This includes doxxing (publishing private information), "flaming" (purposefully inciting conflict), or using automated tools to spam or harass a user or service provider.
• Psychological Harassment: Repeated and persistent behavior that is intended to isolate, marginalize, or belittle an individual. This includes gaslighting, spreading malicious rumors, or exclusionary tactics that interfere with a user's ability to use the platform.
• Discriminatory Harassment: Conduct directed at an individual because of their membership in a protected class. This includes offensive gestures, displays of hate symbols, or biased treatment in service delivery (e.g., a host refusing a guest based on race).

10.2 Reporting Procedures

If you believe you have been subjected to harassment or have witnessed it on our platform, we encourage you to take the following steps:

• Immediate Action: If you are in physical danger, contact local law enforcement immediately.
• Internal Reporting: File a formal report via our Safety Center or email [email protected]. Please include screenshots, timestamps, and the identities of the individuals involved.
• Confidentiality: All reports will be handled with the highest degree of confidentiality possible, disclosing information only to those necessary to conduct a thorough investigation.

10.3 Investigation and Enforcement

Upon receiving a report, we will initiate a formal review. Based on the findings, we reserve the right to take the following actions:

• Warning: A formal notice for minor or first-time infractions.
• Content Removal: Deletion of any harassing reviews, comments, or media.
• Account Suspension/Termination: Temporary or permanent ban from the platform without a refund for active services.
• Legal Referral: Reporting illegal conduct to the appropriate authorities and cooperating fully with their investigations.

10.4 Non-Retaliation Clause

We strictly prohibit retaliation against any individual who reports harassment in good faith or participates in an investigation. Any attempt to penalize a whistleblower will be treated as a severe violation of this policy and may result in immediate account termination.

11. Children's Privacy & Protection

Our platform is designed for a general audience and is strictly not intended for use by individuals under the age of 18 (or the age of majority in your jurisdiction). We recognize the importance of protecting the privacy of children in the digital environment.

11.1 Age Restriction & Verification

• Prohibited Use: We do not knowingly solicit or collect personal information from children. If you are under the age of 18, you are not authorized to create an account, make bookings, or provide any personal data to the platform.
• Parental Responsibility: We rely on parents and guardians to monitor their children's internet usage. If we discover that a minor has bypassed our restrictions and provided us with personal information, we will take immediate steps to terminate the account and purge the data.

11.2 Protocols for Data Erasure

In the event that we become aware that we have inadvertently collected "Personal Information" (as defined by the Children's Online Privacy Protection Act or equivalent local laws) from a minor without verifiable parental consent:

• We will immediately restrict access to that information.
• We will initiate a secure deletion process from our active servers and backup systems.
• We will cancel any pending transactions associated with that account.

11.3 Reporting a Minor's Account

If you are a parent or legal guardian and believe that your child has provided us with personal information without your consent, please contact our Data Privacy Team immediately at [email protected].

Note: Please include the child's username or the email address used to register, so we can identify and remove the information promptly.

12. Third-Party Links & External Services

Our platform may contain links to external websites, plug-ins, or applications that are not owned or controlled by us. These links are provided for your convenience and as a part of our integrated travel services.

12.1 Independent Privacy Practices

• Third-Party Autonomy: Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not exercise control over these external sites and are not responsible for their individual privacy statements, terms of use, or data handling practices.
• No Endorsement: The inclusion of a link does not imply an endorsement by us of the third-party site's security protocols or the content therein.

12.2 User Due Diligence

• Social Plug-ins: Our platform may include social media features (e.g., the Facebook "Like" button) or widgets. These features are hosted by a third party and governed by the privacy policy of the company providing them. Your interactions with these features are at your own discretion.

12.3 Limitation of Liability

• External Harm: To the maximum extent permitted by law, we shall not be held liable for any damages or losses—real or perceived—caused by the use of third-party content, advertisements, or services accessed through links on our platform.

13. International Users

For international users, please be advised that by accessing or utilizing our Platform from jurisdictions outside of India, your personal information will be transferred to, stored, and processed within our centralized servers and data centers located in India. You acknowledge that the data protection and privacy laws in India may differ from those in your home country and may not offer an identical level of protection as mandated by the GDPR (European Union), UK GDPR, or other regional frameworks; however, we implement robust cross-border transfer mechanisms—including Standard Contractual Clauses (SCCs) and advanced encryption—to ensure your data is handled with a high degree of security and in strict accordance with this Privacy Policy. By continuing to use our services, you provide your explicit and informed consent to this international transfer and to the processing of your data in a jurisdiction that may be subject to different legal and regulatory oversight.

14. Updates to This Privacy Policy

We reserve the right to modify or replace this Privacy Policy at our sole discretion to reflect changes in our services, technological advancements, or evolving legal requirements.

• Material Updates: For significant changes that materially affect your rights or the way we handle your personal data, we will provide a prominent notice on our platform homepage or send a direct notification to the email address associated with your account prior to the change becoming effective.
• Minor Amendments: Routine updates or clarifications that do not significantly alter our data practices will be reflected by updating the "Last Updated" date at the top of this policy.
• Acceptance of Terms: Your continued use of the platform after the effective date of any modifications constitutes your formal acknowledgement and binding acceptance of the revised Privacy Policy. If you do not agree with the updated terms, your sole remedy is to discontinue use of the platform and, where applicable, request the deletion of your account. We encourage you to review this page periodically to stay informed about how we are protecting your information.

15. Special Community Safety & Limitation of Liability

This section governs your participation in user-generated groups, meetups, and community interactions. By opting into these features, you acknowledge that you are interacting with independent third parties, not agents or employees of the Company.

15.1 Intermediary Status & No Supervision

• Role of the Platform: The Company acts strictly as a passive intermediary providing a digital venue for users to connect. We do not curate, organize, manage, or supervise user-created travel groups, itineraries, or offline meetups.
• No Background Checks: While we may employ certain verification tools, the Company does not conduct criminal background checks or verify the character, history, or health status of its users. You are solely responsible for exercising caution and performing your own due diligence before meeting or traveling with others.

15.2 Comprehensive Waiver of Liability

To the maximum extent permitted by applicable law, the Company (including its officers, directors, and employees) shall not be held liable for any direct, indirect, incidental, or consequential damages arising from community interactions, including but not limited to:

• Physical Harm: Personal injury, medical emergencies, or death occurring during user-organized trips.
• Financial Loss: Fraud, theft, misrepresentation of services, or loss/damage of personal property.
• Behavioral Misconduct: Harassment, stalking, emotional distress, or any form of criminal activity perpetrated by one user against another.

15.3 Dispute Resolution Between Users

Any disputes, disagreements, or legal claims arising from a community interaction are strictly and exclusively between the users involved. The Company is under no obligation to mediate, intervene, or provide compensation for such disputes. We will, however, comply with valid legal requests for information from law enforcement agencies as outlined in Section 5.2.

15.4 Assumption of Risk & Indemnification

• Voluntary Participation: You acknowledge that traveling with strangers involves inherent risks. Your participation in any community-led activity is entirely at your own risk.
• Indemnity: You agree to indemnify and hold the Company harmless from any claims, losses, or legal fees resulting from your own misconduct or your breach of the User Responsibilities (Section 7) during a community interaction.

17. In-App Purchases & Subscription Data

COHY offers optional paid memberships. This section explains what data is involved when you buy one.

17.1 We do not collect your payment card details

All payments are processed by the payment provider for your platform — Apple for purchases made through the App Store on iPhone or iPad, and our payment gateway for purchases made on Android or on our website. Card numbers, UPI IDs, net-banking credentials and similar payment credentials are entered directly with that provider and are never received or stored by COHY.

17.2 What we receive for App Store purchases

When you purchase or renew a membership through the Apple App Store, our servers receive and store a purchase record from Apple containing:

• the product identifier of the plan you purchased;
• Apple's transaction identifier and original transaction identifier;
• the purchase date, expiry date and renewal status;
• the price and currency reported by Apple; and
• whether the purchase was made in Apple's production or sandbox (test) environment.

This record does not identify you to us by name, card or Apple ID. We use it only to activate and maintain your membership, to prevent the same subscription from being linked to multiple COHY accounts, and to keep your payment history accurate inside the app.

17.3 Renewal and cancellation notifications

Apple sends automated server notifications to COHY when a subscription renews, fails to renew, is cancelled, refunded, or expires, so that your membership status inside the app stays correct. We act on these notifications automatically.

17.4 Apple's own processing

Apple's handling of your purchase, your Apple ID and your payment method is governed by Apple's own privacy policy, available at apple.com/legal/privacy. COHY has no access to, and no control over, that data.

17.5 Retention

Subscription and payment records are retained for as long as your account is active and thereafter for the period required by applicable tax, accounting and statutory record-keeping laws, as described in Clause 8 (Data Retention & Archival Policy).

17.6 Managing your subscription

You can view, manage or cancel an App Store subscription at any time in Settings → Apple ID → Subscriptions on your device. Cancellation is handled by Apple; COHY cannot cancel or refund an App Store subscription on your behalf. See Clause 20 of our Terms & Conditions for the full subscription terms.

Contact Information