Privacy Policy
Last updated: [SET AT LAUNCH]
Draft pending legal review.
1. Who we are
Cosmical (“we”, “us”) provides a gamified spiritual-learning app with an AI guide, the Acharya. Privacy questions: [privacy contact to be set at launch].
2. Data we collect
Account data via Google Sign-In (name, email, Google user ID); optional spiritual-personalization details you choose to enter (birth date, birth time, birth place), used only to compute Panchang/nakshatra context for personalized guidance; progress and content (chapters completed, Vidya/Karma, your questions and the Acharya’s replies); technical data (IP address, device and browser, essential session cookies); and subscription/payment status via our payment processor. You may use Cosmical without entering birth details.
3. How we use it
To provide and personalize the service and the Acharya’s guidance, track your progress, process subscriptions, maintain security and prevent abuse, comply with law, and improve the product.
4. Legal bases (EEA/UK GDPR)
Performance of our contract with you; your consent (e.g., optional birth data and features); our legitimate interests (security and improvement); and legal obligations.
5. Sharing & processors
We share data with providers who process it on our behalf: Google Firebase (authentication and database), Google Cloud Vertex AI (powers the Acharya), and our payment processor(s) (Apple In-App Purchase and/or Stripe). We do not sell your personal data or share it for cross-context behavioral advertising.
6. International transfers
Your data may be processed in the United States and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
7. Retention
We retain your data while your account is active and as needed for the purposes above or to meet legal obligations, then delete or anonymize it.
8. Your rights
EEA/UK (GDPR): access, rectification, erasure, restriction, portability, objection, withdraw consent, and complain to a supervisory authority. US/California (CCPA/CPRA): know, delete, correct, and opt out of sale/sharing (we do not sell or share); no discrimination for exercising rights. India (DPDP Act 2023): access, correction, erasure, grievance redressal, nomination, and consent withdrawal. UAE (PDPL): access, correction, deletion, restriction, portability, and objection. To exercise any right, email [privacy contact to be set at launch].
9. Account deletion
You can request deletion of your account and associated data at any time from Settings or by emailing [privacy contact to be set at launch].
10. Children
Cosmical is not directed to children under 16 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.
11. Security
We use industry-standard safeguards, though no method of storage or transmission is fully secure.
12. Changes
We will post updates on this page with a revised “last updated” date.
13. Contact
[privacy contact to be set at launch].