Privacy Policy

Last updated: 13 May 2026 Applies to: Cogworks for iOS (the “App”)

This is a plain-language summary first, then the longer text. Both are the same policy — the summary just gets you the gist in 30 seconds.

In short

Your bike data stays on your device. Bike names, photos, mileage, components, services, costs, ride notes, and inventory parts are stored locally and synced through your own iCloud account. We never see them.
No account is required. There is no Cogworks login, no email signup, no profile on a server.
One thing leaves your device, only if you allow it: anonymous product-usage events (e.g. “log_ride”, “component_added”). These go to PostHog (EU servers) and carry no personally identifying information. You can switch this off any time in Settings → Privacy → “Share usage analytics”.
Purchases go through Apple. Apple handles billing for the Premium subscription. We only see whether your subscription is active, not who you are or how you paid.
Deleting the App, deleting everything. Removing Cogworks from your device removes all local data. You can also delete your synced data via iCloud Settings on your device.

1. Who we are

Cogworks is built by an independent developer:

Name: Erenay Tozun
Country: The Netherlands
Contact: etmc026@gmail.com

For privacy questions, write to the email above. We act as the “data controller” for the limited analytics described below.

2. What data the App handles

2.1 Data that stays on your device (and your iCloud)

The App stores the following on your iPhone/iPad and syncs it through your private iCloud database (Apple’s CloudKit private database):

Vehicle records (bike name, brand, model, year, mileage, photos, subtype)
Components (name, category, install date, service intervals, accumulated wear, inventory state)
Service logs (date, type, mileage, cost, notes, photos)
Rides (date, distance, duration, notes)
App settings (notification time, analytics preference)

This data is end-to-end private between your devices and Apple. Cogworks cannot read, retrieve, or export it. If you do not enable iCloud, the data stays only on the device where you entered it.

2.2 Data sent off your device

If — and only if — “Share usage analytics” is enabled in Settings, the App sends anonymous product-interaction events to PostHog, our analytics provider. These events contain:

Event name (e.g. vehicle_added, ride_logged, component_added)
Bucketed numeric values (e.g. distance bucketed into ranges like 0–10, 10–50 km — never the exact value)
Booleans (e.g. “did this event include a cost: true/false” — never the actual cost)
A random anonymous identifier generated locally by PostHog’s SDK

We do not send: your name, email, vehicle names, photos, costs, locations, ride notes, GPS data, Apple ID, device serial number, or anything else that identifies you or your bikes.

You can disable analytics at any time. The toggle is in Settings → Privacy. When disabled, the SDK is told to stop tracking; no further events are sent.

2.3 Purchases and subscriptions

When you buy a Cogworks Premium subscription, the transaction is handled entirely by Apple’s App Store. Apple sends us a signed receipt indicating whether you have an active subscription. We do not receive your name, payment details, billing address, or Apple ID.

3. Where data lives

Data	Where it lives	Who can access
Bike, component, ride, service data	Your device + your iCloud private database	Only you (via your Apple ID)
Analytics events (if enabled)	PostHog EU servers (Frankfurt, Germany)	Cogworks developer + PostHog (as data processor)
Subscription status	Apple’s StoreKit	Apple + the App on your device

For users in the EU/EEA/UK:

On-device and iCloud data: processed under contract (Art. 6(1)(b) GDPR) — necessary to provide the service you signed up for. We don’t act as a controller for this data; you do.
Anonymous analytics: legitimate interests (Art. 6(1)(f) GDPR) — to understand product usage and improve features. Because the data is anonymous and not linked to you, the privacy impact is minimal. You can object via the in-app toggle.
Subscription handling: contract (Art. 6(1)(b)) for the purchase you made.

We do not rely on consent prompts because no personal data is collected without your prior action (you choose to add data; the analytics toggle defaults to on but is one tap away).

5. Your rights

You can:

Access and review your data — it’s all in the App on your device.
Delete your data — uninstall the App, or delete individual records inside it. To clear iCloud copies, go to iOS Settings → [your name] → iCloud → Manage Storage → Cogworks → Delete Data.
Opt out of analytics — Settings → Privacy → toggle off “Share usage analytics”.
Object, restrict, or request portability under GDPR — email us at the address above. Note that for data we don’t actually hold (your bike data), there’s nothing for us to deliver; we can only confirm that we don’t have it.
Lodge a complaint with your national data protection authority. In the Netherlands, that’s the Autoriteit Persoonsgegevens.

6. Children

Cogworks is not directed at children under 13 (or under 16 in EU countries where that’s the threshold). We do not knowingly collect any data — anonymous or otherwise — from children.

7. Third parties

Apple — provides iCloud sync, App Store purchases, and push notification infrastructure. Apple’s own privacy policy applies: https://www.apple.com/legal/privacy/.
PostHog — anonymous product analytics. EU instance, GDPR-compliant. Privacy policy: https://posthog.com/privacy.

We do not share data with advertising networks, data brokers, or any other third parties.

8. Data retention

On-device data lives until you delete it.
iCloud-synced data lives until you delete it (via the App or iOS Settings).
Analytics events are retained by PostHog for 12 months and then deleted.
Subscription receipts are retained by Apple per their own policy.

9. Security

Local data is protected by iOS’s built-in file encryption.
iCloud data is encrypted in transit and at rest by Apple.
Analytics events are sent over HTTPS to PostHog’s EU servers.
We don’t run servers that store your bike data, so there’s no Cogworks-side database to breach.

10. International transfers

Analytics data stays in the EU (PostHog’s Frankfurt instance). Apple’s iCloud may transfer data internationally per Apple’s own data transfer mechanisms.

11. Changes to this policy

If we make material changes, the App will surface them at next launch and the “Last updated” date above will change. Continued use of the App after a material change means you accept the new policy.

12. Contact

Questions, requests, or concerns: etmc026@gmail.com.

This policy is written in plain English. If anything is unclear, please email and we’ll explain.