Privacy Policy
This Privacy Policy describes how we handle information when you use the COSMOS Connect iOS app and the related online service (collectively, the Service). By using the Service you agree to the practices described here.
1. Information you provide
When you activate your account in the app, you provide:
- Email address — for account recovery and important security notices.
- Display name — used to personalise the in-app experience and any support correspondence.
- Activation code — the 12-character code that identifies your account. The code itself is your account identifier.
We do not ask for, and do not collect, any other personal information from you directly.
2. Content delivered through your personal URL
Each account is assigned a personal sharing URL that you may share at your discretion. Anyone who visits that URL can submit a short text note or an image; the most recent submission is delivered to your account.
- We do not request or collect identifying information from visitors who submit content through your URL.
- Submitted content is associated with your account so it can be delivered to you. It is not shared with any third party other than the infrastructure providers listed in section 5.
- Each new submission replaces the previous one. Submitted images are automatically deleted no later than 24 hours after upload.
3. Push notification token
If you grant the iOS notification permission, we receive an Apple Push Notification service (APNs) device token. We use the token only to deliver notifications relating to content received through your personal URL. We do not share the token with any party other than Apple.
4. Bluetooth
The app uses Bluetooth Low Energy to communicate with the COSMOS Remote hardware accessory that you own. Bluetooth communication takes place entirely between your iPhone and the accessory; no data collected over Bluetooth is transmitted to us or to any third party.
5. Third-party service providers
We use the following providers to operate the Service:
- Cloudflare, Inc. — application hosting and storage of account data, submitted content, and session tokens (Workers, KV, R2, Durable Objects).
- Apple Push Notification service — delivery of push notifications to your device.
These providers process data on our behalf under their respective security and privacy commitments. We do not sell, rent, or transfer your information to advertising networks, data brokers, or analytics services.
6. What we do not do
- We do not include third-party advertising SDKs.
- We do not run analytics on your in-app behaviour.
- We do not track you across other apps or websites.
- We do not build a profile of you for advertising, marketing, or scoring purposes.
- We do not use your information to train machine-learning models.
7. Data retention
| Data | Retention |
|---|---|
| Email, display name, activation code | Until you delete your account. |
| Most recent submission (per account) | Replaced on next submission; images deleted no later than 24 h after upload. |
| APNs device token | Until you sign out, revoke notifications, or delete the app. |
| Session token | Until you sign out or it expires. |
8. Security
We use TLS for data in transit and rely on the encryption-at-rest provided by our infrastructure providers. The session token is stored in the iOS Keychain on your device. No system is perfectly secure; we cannot guarantee absolute security but we take commercially reasonable measures to protect your data.
9. Your rights
- Access or correct your data — contact us at the address below.
- Delete your account — contact us; we will erase your record from our systems within 30 days.
- Revoke notifications — disable notifications in iOS Settings → COSMOS Connect.
- Sign out — invalidates your current session token immediately.
If you are located in the European Economic Area, the United Kingdom, California, or another jurisdiction with similar laws, you may have additional rights under applicable data-protection law, including the right to object to or restrict processing and the right to lodge a complaint with your local supervisory authority.
10. Children
The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect information from children. If you believe a child has provided us information, please contact us so we can delete it.
11. International transfers
Our infrastructure providers operate globally; your information may be processed in countries other than the one in which you reside. We rely on the safeguards our providers maintain for international transfers.
12. Changes to this Policy
We may update this Policy from time to time. Material changes will be reflected in the "Effective" date above and, where appropriate, communicated to you within the app.
13. Contact
Questions, requests, or complaints: ukashyup@gmail.com.