What we hold about you
The short version: as little as we can arrange, and none of your medical records. That is not a policy we wrote afterwards. It is the reason the software is built the way it is.
This website
- No analytics, tracking pixels or advertising scripts.
- No cookies are set by this site. Your theme preference is kept in your own browser’s local storage and is never sent anywhere.
- The waitlist and clinic forms ask only how to reach you. They are processed by our hosting provider and reach only us. Please don’t put health details in them.
- We use what you send in a form only to reply to you, and we delete it if you ask.
- Our hosting provider records standard web server logs, as every host does.
The apps
The Diabetes App, and the Clinic App when it comes, run on a peer-to-peer network. No cosys.work server holds a readable patient record anywhere in it.
- Records stay on your device
- Readings, photos, notes and trends live in the app on your phone. They are not uploaded to us, because we do not operate a store for them.
- The AI runs locally
- The on-device assistant processes your photos and data on the phone itself. Your questions and readings are not sent to an external service for inference.
- You grant every connection
- Sharing with a family member, or later a clinic, means pairing with a device you have verified and choosing what it sees. Updates travel sealed, directly or through a mailbox that cannot open them. You can end any share, and none is opened without you.
- Clinics hold what you shared with them
- With the Clinic App, now in development, a clinic keeps what you shared under its own obligations, as it would any record about you. Anything stored on a server for it is sealed with the clinic’s key, and we cannot read it. You can ask for it to be erased, and the clinic answers with a receipt.
- Backups go where you put them
- A backup is an encrypted file that only your passphrase opens. You choose where to keep it. There is no default destination belonging to us.
- Usage counts are opt-in
- Sending counts of how the app is used is off unless you turn it on, and you can turn it off again. The counts carry no reading, no note and no name.
If you email us
We keep the message so we can reply and follow up. Please do not send medical records or test results by email. It is not a secure channel, and we do not want a copy. If you want something deleted from our inbox, ask at hello@cosys.work and we will.
This page describes how our software is designed and how we work today, in plain language. It is not a contract, and it does not replace the terms that will ship with the apps themselves. If anything here is unclear or you think it is wrong, write to us.