Privacy

Who is responsible

CoShake is a project run by Akmal Gooman.

Riyadh, Saudi Arabia.

For any question about your data: hello@coshake.app.

What CoShake collects

If you create an account: your email address, the dates of your sign-ins.

If you sign in with Google: your email, your name and your profile photo as Google passes them on. Nothing else.

If you answer for someone: your answers to the questionnaire, the words you write, the time spent per question, a technical fingerprint of your browser, your IP address, your country.

You have no account. Your name is never asked.

If you choose to: your age bracket and your field, to place you among others. It is optional, you can erase it.

If you tap “Unlock”: we record the tap. No payment is taken without an explicit payment step.

Why

Running the service: your account, your link, your results.

Protecting anonymity: detecting double answers and abuse through the fingerprint and the IP address.

Writing to you: sign-in and service emails only. No newsletter without your consent.

Understanding usage: aggregated statistics, never individual ones.

On what basis

Your account: performing the service you asked for.

Fraud protection: our legitimate interest in keeping results reliable and anonymous.

Google, age and field: your consent. You can withdraw it.

Anonymity, concretely

The person who receives the answers never sees who answered.

They see nothing until 5 people have answered.

Then they see averages, never a single answer.

The words you write are shown to them as they are. Do not sign, do not describe yourself.

We never match an answer with an account.

For how long

Your account and your results: as long as your account exists, then 30 days.

Respondents’ IP address and fingerprint: 90 days, then deleted.

Answers and words: as long as the person’s account exists, with no link to you.

Where and with whom

Database: Supabase, Paris (European Union).

Application hosting: Vercel.

Abuse protection: Upstash, Ireland (European Union).

Emails: Resend.

Google sign-in: Google, if you choose it.

Vercel, Resend and Google may process data outside the European Union, under standard contractual clauses.

We sell no data. No advertising cookies.

Your rights

Access your data, correct it, erase it, receive it, object to a processing.

Write to hello@coshake.app. An answer within 30 days.

You can delete your account yourself from CoShake.

You can also lodge a complaint with your data protection authority (in France: CNIL, cnil.fr).

Age

CoShake is for people aged 16 and over.

Changes

If this page changes, the date at the top changes.

If the change matters, we will write to you.