Cookie Policy

2. CoSign is a Mobile App

CoSign is primarily delivered as a mobile application (React Native). Traditional browser cookies are not used in the mobile app. Instead, we use equivalent mobile storage technologies to provide the same functionality.

3. Technologies We Use

CoSign uses the following storage technologies to operate the platform:

3.1 Authentication Tokens

Purpose: To keep you securely logged in between sessions.
What we store: An encrypted JWT (JSON Web Token) access token and refresh token.
Storage: Stored securely in the device's secure storage (React Native Keychain / AsyncStorage).
Duration: Refresh tokens expire after 7 days of inactivity.
Can you disable? No — these are strictly necessary for authentication. Disabling them would log you out permanently.

3.2 User Preferences

Purpose: To remember your app settings such as dark/light mode theme.
What we store: Theme preference, notification settings, and language preference.
Storage: Device local storage (AsyncStorage).
Duration: Persists until you clear app data or uninstall.
Can you disable? Not individually — clearing app data will reset these preferences.

3.3 Cart & Session Data

Purpose: To persist your shopping cart between app sessions.
What we store: Cart contents (product IDs, quantities, seller IDs).
Storage: Server-side (linked to your account) and local cache.
Duration: Guest carts expire after 7 days. Authenticated carts persist until checkout or manual clearance.
Can you disable? No — this is necessary for shopping functionality.

3.4 WebView Sessions

Purpose: To maintain sessions when you use the in-app browser for payment (Paystack checkout), the Help Centre, or legal pages.
What we store: Standard session cookies from the third-party web page loaded in the WebView.
Duration: Session-only — cleared when the WebView is closed.
Can you disable? Not without disabling in-app payment functionality.

4. Essential Functionality

All technologies described above are strictly necessary for CoSign to function. Without them, core features such as login, checkout, and cart management would not work. These cannot be opted out of without ceasing to use the app.

5. Analytics

CoSign uses its own internal analytics system to understand how the platform is used — for example, which products are viewed most often, conversion rates, and feature usage. This data is:

• Processed on CoSign's own servers
• Not shared with third-party analytics providers
• Used only to improve CoSign's features and performance
• Associated with your account for the purpose of personalised recommendations (if you have opted in to personalised recommendations in Privacy Settings)

You can opt out of personalised recommendations at any time from Settings → Privacy → Personalised Recommendations.

6. Third-Party Technologies

The following third-party services used by CoSign may also store data on your device:

• Paystack — When the Paystack WebView loads during checkout, Paystack may store cookies on your device subject to their own cookie policy. These are used for fraud prevention and payment session management.
• Firebase Cloud Messaging (FCM) — Used to deliver push notifications. FCM stores a device registration token on your device which we use to route notifications to you. This is essential for push notifications to work.
• Cloudinary — Product and profile images are served from Cloudinary's CDN. Cloudinary may set performance-related cookies when images are loaded in the web-based help centre.
• Sentry — Used for crash and error reporting. Sentry may collect device and technical data when the app crashes or encounters an error, to help us diagnose the issue.

7. Your Choices

You can manage storage and cookie preferences in the following ways:

• Clear app data — On Android, go to Settings → Apps → CoSign → Clear Data. This will log you out and reset all local preferences.
• Opt out of personalised recommendations — Settings → Privacy → Personalised Recommendations
• Opt out of marketing emails — Settings → Data & Privacy → Data Consent
• Uninstall the app — Uninstalling CoSign removes all locally stored data.

Please note that opting out of essential storage technologies is not possible without ceasing to use the app, as they are required for core functionality.

8. Contact

For questions about this Cookie Policy:

CoSign Support
Email: joincosign@gmail.com