Is Devin safe with your data?
Devin
Cognition AI
Good disclosure · high confidence
Devin earns a B (61/100) because it discloses most of its data practices.
#47
of 211 apps ranked
61
score · Coding avg 46
+15
vs category average
Devin discloses a genuine Zero Data Retention definition and a paid-tier training opt-out, but the default posture trains on Customer Data, the privacy rights are all framed as discretionary, and breach notice is reserved rather than promised.
What Devin's privacy policy and terms of service say about your data
Training opt-out is paywalled
Cognition may use Customer Data for model training by default; the Opt-Out is available only "If you subscribe to a paid Service Tier", and no named mechanism (settings toggle, form, or email) is given for exercising it.
Zero Data Retention is conditional, not default
ZDR is concretely defined as data "not saved to disk" and "deleted upon generation of the relevant Output", but it only switches on after a paid-tier Opt-Out and is carved out for abuse classifiers, AUP review, and legal process.
Rights are discretionary
Every access, deletion, portability, and correction right is prefaced with "You may have the right", and the policy states that where a right is not required by law "we have absolute discretion in providing these rights".
Breach notice is reserved, not committed
Cognition "retains the right to provide notice of security breaches as necessary" and pushes the notification duty onto the customer, with no timeframe and no named security controls beyond "commercially reasonable".
What the policy is silent or vague on
- Not stated: breach notification
- Only partial: keeping user inputs out of model training
- Only partial: a way to opt out of training
- Only partial: your ownership of generated outputs
Devin privacy rating
Details
- Category
- Coding
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-03-09
- Region scored
- Global / US-default
- Last assessed
- 2026-08-13
Documents examined
Other coding apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.