Privacy Policy
Last updated: 2026-10-22
Draft pending legal review.
1. Who we are
Cosmical (“we”, “us”) provides a gamified spiritual-learning app with an AI guide, the Acharya. Privacy questions: privacy@cosmicalapp.com.
2. Data we collect
Account data via Google Sign-In (name, email, Google user ID); optional birth details you choose to enter (birth date, birth time, birth place), used only to give the Acharya personal context for its guidance — the birth place you type is sent to OpenStreetMap’s Nominatim geocoding service to resolve it to coordinates, with no other data about you; progress and content (chapters completed, Vidya/Karma, your questions and the Acharya’s replies); technical data (IP address, device and browser, essential session cookies); and subscription/payment status via our payment processor. You may use Cosmical without entering birth details.
3. How we use it
To provide and personalize the service and the Acharya’s guidance, track your progress, process subscriptions, maintain security and prevent abuse, comply with law, and improve the product.
4. Legal bases (EEA/UK GDPR)
Performance of our contract with you; your consent (e.g., optional birth data and features); our legitimate interests (security and improvement); and legal obligations.
5. Sharing & processors
We share data with providers who process it on our behalf: Google Firebase (authentication and database), Google Cloud Vertex AI (powers the Acharya), OpenStreetMap’s Nominatim (resolves the birth place you enter to coordinates), and our payment processor(s) (Apple In-App Purchase and/or Stripe). We do not sell your personal data or share it for cross-context behavioral advertising.
6. International transfers
Your data may be processed in the United States and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
7. Retention
We retain your data while your account is active and as needed for the purposes above or to meet legal obligations, then delete or anonymize it.
8. Your rights
EEA/UK (GDPR): access, rectification, erasure, restriction, portability, objection, withdraw consent, and complain to a supervisory authority. US/California (CCPA/CPRA): know, delete, correct, and opt out of sale/sharing (we do not sell or share); no discrimination for exercising rights. India (DPDP Act 2023): access, correction, erasure, grievance redressal, nomination, and consent withdrawal. UAE (PDPL): access, correction, deletion, restriction, portability, and objection. To exercise any right, email privacy@cosmicalapp.com.
9. Account deletion
To delete your account and associated data, email privacy@cosmicalapp.com from the Google account email you sign in with. We complete deletion within thirty days of a verified request and confirm by email.
10. Children
Cosmical is not directed to children under 18 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.
11. Security
We use industry-standard safeguards, though no method of storage or transmission is fully secure.
12. Changes
We will post updates on this page with a revised “last updated” date.
13. Contact
privacy@cosmicalapp.com.