Privacy

Last updated 19 September 2026. Applies to Coathook version 1.0. Coathook is made by Gitglue Ltd.

The short version

Coathook is a shared memory for one household of up to five people. Everything you put in it is shared with the rest of your house, because that is what the app is for. It goes to one database that we run, and nowhere else. There are no adverts, no analytics and no other company's code inside the app. Nobody signs in, so we hold no account, no password, no email address and no phone number.

Who holds what

Your house's things live in one database that we run. Nobody else has access to it, and it is not shared with, sold to or read by any other company.

What the app holds about you

Your house holds:

• You — the name you typed, whether you are a grown-up or a child, the colour your cards wear, and a picture if you chose one. You can pick that picture from your own contact card; the app takes the picture only, never a name, a number or an address.
• Your jobs — what they are called, any notes, who they belong to, who made them, any date and whether it matters, whether they are done, and who nudged them.
• Your shopping — what is on the list, how much, which shop, who wants it and who bought it.
• Your kitchen — what is in the freezer, the fridge and the cupboard, how much, when it arrived and when to use it by.
• Your places — the name, the map pin and the ring you chose for a place such as home or a supermarket, and whether it nudges you as you arrive or as you leave.
• What you told the house — the sentence you spoke or typed, when, and what it made. Keeping your own words is what lets the app show you what you said and fix it if it got it wrong.
• Your phone's way in — an anonymous session with no name attached to it, so the house knows which member this phone is.
• The six letters somebody used to let you in, which last an hour and work once.

When a child in the house is given a phone, the house also holds the record that a grown-up in the house said yes: who said it, when, and which version of the notice they read.

Where you are

The app never reads your location. When you save a place, your phone is asked to watch for that ring and to wake the app when you cross it. The app is told "you have arrived", nothing more. Your position is never collected, never stored and never sent anywhere.

The pin you dropped on a place is a different thing, and the app does hold it: it is a map coordinate you chose, usually your home or a shop, and it is shared with your house so their nudges work too.

Your camera, your voice, your pictures

• A photograph of a cupboard, or a screenshot of a shop order, is read on your phone. Only the words that come out of it become items. The picture is never uploaded and is deleted once it has been read.
• Dictation runs on your phone. No sound is sent anywhere and no recording is kept.
• The sentence you say is turned into items on your phone.

What we do not do

• No adverts, and no advertising identifier.
• No analytics, no crash reporting, no measurement of how you use the app.
• No tracking of you across other companies' apps or websites, at all.
• No selling, sharing or renting of anything to anybody.
• No accounts, no passwords, no email addresses, no phone numbers.

Children in a house

A house can include children, and they are full members: they own jobs, they earn, and they appear everywhere everyone else does.

A child cannot be given a phone in the house unless a grown-up who is already in the house says yes on their own phone first. Before they say yes, they are shown exactly what the house will hold about that child, including the plain statement that where the child is never leaves the child's phone.

A grown-up can, at any time and from inside the app:

• read the whole of what the house holds about a child, line by line;
• take the yes back, which signs that child's phone out of the house straight away;
• remove the child from the house entirely.

How long things are kept

• Your house lasts until whoever started it ends it. Ending it removes everything the house holds, on every phone in it. There is no undoing that.
• A sentence you told the house lives as long as the things it made. Once every item it created has gone and the sentence itself is more than 90 days old, the sentence is emptied: the words are removed and a marker is left in their place. Ninety days after that, the marker goes too. So a sentence with nothing left of it is out of the database about 180 days after you said it, and the 90 days are counted from when you said it, not from when the last item went.
• Everything else lasts until somebody in the house removes it, or the house ends.

What you can ask for

All of it is in the app, and none of it needs an email to us:

• See it. Settings, then the people in your house, then "What we hold" beside a name. It is the whole of it, line by line: their name and picture, the jobs they own, what they have earned, what they want from the shops and what they have bought, what they put in the kitchen, every sentence they told the house, the places the house knows, every phone they have had in the house, and any yes a grown-up gave for them. "Send it" hands all of that over as a file with their name on it, through the share sheet.
• Remove a person. A grown-up can erase somebody. Their name, picture, colour, phones and sentences go. A job they owned passes to whoever started the house, so the house's own record survives without them in it.
• End the house. Settings → End this house. Everything goes, for everybody.

Erasing a person does not empty the house of every trace of them, and it is worth being exact about what is left:

• Their row in the house stays, emptied. The name becomes "Someone", the picture and the colour go, and the row is marked as having left. What the row keeps is the internal identifier the house's other rows point at, which house it belongs to, and whether they were a grown-up or a child.
• If a grown-up had said yes for them, that whole record stays, marked as taken back and when. It still holds which grown-up said yes, when they said it, and which version of the notice they read. A record that only said a yes had been withdrawn would not show what was withdrawn.
• The house's running totals stay, because they are counts and not a person.

Ending the house removes all of it, including everything in this list.

If you would rather ask us than tap it yourself, write to support@coathook.app and we will do it.

Changes to this policy

When this changes, the date at the top changes with it, and the copy at https://coathook.app/privacy is the current one. When what the house holds about a child changes, the notice a grown-up reads changes too, and any yes given against the old notice stops counting until a grown-up reads the new one.

Who to write to

Coathook is made by Gitglue Ltd, and Gitglue Ltd runs the one database your house's things live in. Write to support@coathook.app with anything about this policy or about what the house holds.

Who is the data controller for a house's things, in the legal sense of that term, is still being settled with advice, and this policy does not answer it. The address above is where to write either way. When it is settled, this section will say so and the date at the top will change.

If you are in the UK, you can also complain to the Information Commissioner's Office.