Privacy Policy
Effective 10 September 2026. CoCo is operated by Technohive Solutions Inc., Davao City, Philippines.
The short version
CoCo is a wellbeing app your school gives you. What you write in it — your moods, your journal, your messages — is for you and your school's guidance office. It is not sold, and it is not advertising data.
- Your school decides who in the guidance office can see your information. We run the app for them.
- Your teachers and classmates cannot see your entries, moods, or messages.
- Your messages travel encrypted and are stored on our servers. They are not end-to-end encrypted: CoCo can read them, and they are checked for signs of crisis — see section 5.
- You can get a copy of your records, or delete your account, from inside the app.
- The current version of CoCo does not collect your location. Older versions did — see section 2.
1. Who is responsible for your data
Your school is the data controller under the Philippine Data Privacy Act of 2012 (RA 10173). It decides what CoCo is used for and who in its guidance office has access. Each school's Data Protection Officer may set stricter rules than this policy describes.
Technohive Solutions Inc. is the processor. We build and operate the app on the school's instructions. We do not sell personal data, and we do not use it for advertising.
Schools are separated from each other. A counselor at one school cannot see students from another.
2. What we collect, and why
| What | Why we need it |
|---|---|
| Account details Name, email address, date of birth, your school, college, course and year level |
To create your account, connect you to the right school's guidance office, and confirm you meet the minimum age. Date of birth also determines whether guardian consent is required. |
| Guardian details Name and contact, if you are under 18 |
So there is a record that a parent or guardian agreed to your use of the app. We record what you enter; we do not contact them to check it. See section 8. |
| Wellbeing entries Mood and emotion logs, stress check-ins, journal entries |
This is the core of the app: to show you your own patterns over time, and to let your counselor support you. |
| Messages and calls Chat with your counselor, voice and video sessions |
To let you talk to your guidance counselor. Messages travel encrypted and are stored on our servers. Calls are transmitted live and are not recorded by CoCo. |
| AI companion conversations | To answer you, and to notice signs that you may be in crisis. See section 5. |
| Screening and assessment answers | When your counselor asks you to complete a questionnaire, your answers go to them. |
| Consultations Bookings, session records, evaluations you submit |
To schedule sessions with your counselor and let you give feedback on them. |
| Reports you file Category, your description, and a copy of recent messages from the conversation you are reporting |
So your school can act on a concern about a counselor or a conversation. The message copy is included because messages can be deleted, and a report nobody can review is of no use to you. Your report goes to your school's CoCo administrator — the staff account that runs CoCo for your school, which at some schools sits in the registrar's or IT office rather than in guidance. Counselors have no screen that shows reports. At some schools the CoCo administrator is also a guidance counselor, so if your report is about that person they will be able to read it; if that worries you, write to us at support@counselorconnect.app or to your school's Data Protection Officer instead. |
| Technical data Device notification token, app version, crash and error reports, activity timestamps used for streaks |
To deliver notifications, fix crashes, and run features like your activity streak. |
What we do not collect
The current version of CoCo does not collect your location, and no longer asks for location permission. Versions before 2.0.0 recorded your device's location every one to two hours, including while the app was closed — map coordinates accurate to roughly 100 metres, with your city and province. We still hold those records. They are deleted when you delete your account, but they are not yet included in a data copy, so email us at support@counselorconnect.app if you want a copy of them or want them deleted sooner. If you still have an older version installed, please update it.
We do not collect contacts, your photo library, your other apps, or your browsing activity. We do not use advertising identifiers, and there is no advertising in CoCo.
3. Who can see your information
Your school's guidance office
Guidance counselors assigned to you can see your wellbeing entries, your consultations, your assessment results, and your messages with them. This is the purpose of the app.
Your school's CoCo administrator can see accounts for their school, and any report a student files — including the copy of recent messages the app attaches to that report. Apart from that copy, their screens do not show your journal entries, your moods or your counselor conversations. At some schools this account belongs to the registrar or to IT rather than to guidance.
Not your teachers, and not other students
Teachers and classmates have no access to your entries or messages.
Us
Our engineers can access production systems when required to operate or repair the service. Administrative actions taken in the school and system panels are recorded in an audit log.
Anonymity, honestly stated
Your entries are private from other students, but they are not anonymous to your school's guidance office — they are attached to your account, which is how a counselor can reach you when something looks wrong. Please do not assume otherwise.
4. Companies that process data on our behalf
We use these providers to run CoCo. They act on our instructions and may not use your data for their own purposes. Some process data outside the Philippines.
| Provider | What it handles |
|---|---|
| Supabase | Database and sign-in |
| Google Cloud (Cloud Run) | The CoCo server, hosted in the Singapore region |
| Firebase Cloud Messaging | Push notifications |
| LiveKit | Live voice and video sessions |
| OpenAI | The AI companion, and AI-generated summaries for counselors — see section 5 |
We may also disclose information where the law requires it, or where there is a serious and immediate risk to someone's life or safety.
We do not sell your personal information, and we do not share it with third parties for their own marketing or advertising.
5. The AI companion, and crisis detection
When you chat with CoCo's AI companion, your message and the recent messages in that conversation are sent to OpenAI to write a reply, to find relevant help articles, and to check for signs of crisis. To make the reply fit you, CoCo also sends your first name, the mood you picked at the start of the chat, the date and time of any upcoming counseling session together with your counselor's name, and — only after your counselor has reviewed them — the risk level, main themes and suggested focus from your wellbeing check-in or from an AI wellbeing insight about you.
Your counselor chat can also involve OpenAI. If your counselor has set their status to away, busy or offline, or has not set one and it is outside 8am to 5pm Monday to Friday, CoCo's AI may reply in that chat on their behalf. These replies are labelled "CoCo AI" and your counselor can read them. To write one, CoCo sends OpenAI your first name, your new message, up to 20 recent messages from that chat (yours and earlier AI replies, not your counselor's), and the date, time and counselor's name for any upcoming session. Your new message is also checked by OpenAI for signs of crisis. When your counselor is available, messages in that chat are checked for crisis words on our own servers and are not sent to OpenAI.
Neither conversation is end-to-end encrypted: a reply, and a crisis check, both have to be composed from what you wrote.
Conversations with the AI companion are automatically checked for signs of crisis — for example, language suggesting self-harm. If something is detected, a flag is raised for your school's guidance counselors, including the message that triggered it, so a person can follow up. This is deliberate and it is not anonymous. We would rather a counselor reach out unnecessarily than miss a student who needed one.
Your counselor can also ask CoCo for an AI summary of your recent wellbeing. To write it, CoCo sends OpenAI your mood and stress check-ins from the last 30 days, your session bookings and what you wrote about why you wanted help, your feedback on sessions, referrals, your screening scores and severity bands including whether you answered yes to a self-harm question, your activity streaks, the summary of your wellbeing check-in, and your counselor's own notes and their comments on earlier summaries. It does not send your journal. We do not add your name or email address, but anything you typed into those fields is sent as you wrote it.
When you finish the 15-question wellbeing check-in in the CoCo chat, your questions and answers are sent to OpenAI automatically, so it can draft a summary and a risk level (from low to crisis) for your counselor to review.
These are drafts for a professional to interpret, not decisions about you, and no one is diagnosed or disciplined by an automated process.
CoCo is a wellbeing support tool. It is not therapy, not a medical device, and not an emergency service. In an emergency, contact a crisis hotline or your guidance counselor directly.
6. How long we keep things
These are the longest we keep each kind of data. Automatic deletion at these ages is not switched on yet: for now these records are kept until they are removed for another reason. Nothing in CoCo has reached these ages — the oldest records date from January 2026 — and we will switch automatic deletion on before any does. You can delete your account from inside the app at any time, and you or your school's Data Protection Officer can ask us to delete data sooner at support@counselorconnect.app.
| Data | Kept for |
|---|---|
| Feedback, and crash and error reports | 12 months |
| Conversations with the chatbot on our public website (not linked to any account) | 12 months |
| Mood, stress and journal entries | 24 months |
| Administrator audit records about your account | 24 months |
| Counselor messages, assessments, crisis flags, reports you filed | 36 months |
| Session evaluations | 60 months |
| Everything else — consultation bookings and session records, referrals, notifications, call history, goals, streaks, journal voice recordings, and location records from older versions of the app | While your account exists |
We do not currently delete accounts for inactivity. If you stop using CoCo, you can delete your account from Profile, or write to support@counselorconnect.app and we will delete it for you.
7. Your rights
Under RA 10173 you may:
- See and copy your data. The app's Download my data option copies your records to your phone's clipboard as text, which you can paste into a file — paste it somewhere private straight away, because your keyboard app, and on older Android versions any app running on your phone, can read the clipboard. It includes your profile, mood, stress and journal entries, screening answers, sessions, referrals, the messages you sent, consents, feedback, reports, crisis flags and any AI wellbeing summary about you. It does not include your journal voice recordings, the messages your counselor sent you, your goals, streaks and activity, notifications, call history, device and crash records, or location recorded by earlier versions of the app. Email us and we will prepare a complete copy.
- Correct it if something is wrong.
- Delete your account. See the account deletion page for exactly what is removed and what is kept.
- Object, or withdraw consent. Withdrawing consent means you can no longer use CoCo, because there is nothing left to operate the service on.
- Complain — to your school's Data Protection Officer, to us, or to the National Privacy Commission (privacy.gov.ph).
One deliberate limit: the scores and severity bands from screening questionnaires your counselor assigns are not included in your copy. Your own answers are. A severity band is a clinical interpretation read from population-level cut-offs, and receiving one with nobody there to explain it can do real harm.
Some other ratings are included: the risk level CoCo's AI drafted from your wellbeing check-in and from any AI wellbeing insight, any note or rating your counselor added to those, whether a message you sent was flagged as a possible crisis, and whether a session booking was marked urgent. Ask your counselor to go through these with you rather than reading them alone — they can.
8. Students under 18
CoCo is for students aged 13 and older. Accounts cannot be created below that age.
If you are under 18, the app asks you when you register for a parent or guardian's name, email address and relationship to you, and asks you to confirm that they agree to your use of CoCo. We do not contact them to check this. Students who registered before this step was added to the app in July 2026 were never asked for it. Your school decides whether it needs a parent's consent before giving you CoCo, and is responsible for obtaining it.
A parent or guardian may ask to see, correct or delete their child's data through the school's guidance office, which can confirm who they are and pass the request to us, or by writing to us at support@counselorconnect.app. We do not hold records that would let us confirm that relationship ourselves.
9. How your data is protected
- All traffic between the app and our servers is encrypted in transit (HTTPS).
- Database access is restricted by row-level security rules, so one school cannot read another's data.
- Administrative actions are written to an audit log.
No system is perfectly secure. If a breach occurs that puts you at risk, we will notify the affected schools and the National Privacy Commission as RA 10173 requires.
10. Changes to this policy
If we change this policy in a way that materially affects you, we will update the effective date above and notify you in the app. Continuing to use CoCo after that means you accept the updated policy.
11. Contact
Technohive Solutions Inc., Davao City, Philippines — support@counselorconnect.app
For questions about how your own school uses CoCo, your school's guidance office and Data Protection Officer can answer faster than we can.