Privacy Notice

• CosmiQ uses AI for tarot, astrology, dream interpretation, reflective conversation, and related content. Prompts and relevant context are sent to AI and infrastructure providers to generate responses.
• CosmiQ does not predict or verify future events. Responses can be inaccurate and are for entertainment, education, reflection, and creative exploration—not professional or emergency advice.
• Memory is on by default for regular chats. It can be turned off and learned memory can be deleted in Settings. CosmiQ is designed not to save restricted learned-memory claims involving medical information, crisis or self-harm, legal matters, sexuality, trauma, abuse, or unnecessarily private third-party details.
• Temporary Chat is not added to normal history or learned memory, but is still temporarily processed to provide the response.
• We do not sell or rent personal information and do not use chat content for third-party targeted advertising.
• First-touch source/campaign storage and full Google Ads conversion measurement remain off unless you choose “Accept.” Limited cookieless measurement signals may be sent with storage denied, as described below.

Account and authentication. Supabase authentication ID, email, name, optional profile-image URL, authentication provider, verification and sign-in metadata, and session cookies. Supabase Auth handles passwords and social authentication; CosmiQ application tables do not store plaintext passwords.

Profile and astrology information. Birth date, birth time and accuracy, birthplace, current residence, astrology-system preference, language, communication preferences, optional personal context, and calculated chart and timing data. Relationship features may include another person’s name and birth details; only provide these with authority and any required permission.

Birth time, birthplace, current residence, and a relationship person’s name receive additional application-level encryption before database storage. Birth dates and calculated chart data are protected by provider security and encryption at rest but are not separately field-encrypted by the application.

Chats, readings, and uploads. Questions, messages, AI responses, selected cards, modes, titles, branches, summaries, timestamps, generation state and errors, reading metadata, feedback, uploaded images and file metadata, and generated spoken audio and its technical metadata.

Billing and transactions. Plan and subscription status, billing period, currency, purchases, credit balances, refunds and disputes, and Stripe, Apple, or RevenueCat identifiers. Payment providers process payment credentials; CosmiQ does not receive or store your full card number.

Technical, security, and usage data. IP addresses or keyed/hashed IP-derived values, request and error logs, rate-limit and fraud signals, device/platform and user-agent information, push endpoints and delivery state, performance measurements, feature/model usage, token counts, retry/error data, and estimated AI cost. Browser storage can contain preferences, drafts, pending profile or question entries, chat-list snapshots, notification state, and measurement choice.

Sharing, feedback, and support. Share-link token, expiry and anonymous choice; ratings and comments; support messages and attachments. Authorized administrators may review related content when reasonably needed for support, safety, abuse, billing, or feedback investigation.

Learned Memory. Memory is on by default for regular chats. When it is on, CosmiQ may derive and store ordinary durable facts, preferences, people, relationships, life events, themes and source excerpts; automatic profile summaries; embeddings; and records used to retrieve, correct, and remove learned information.

Turning Memory off stops learned-memory retrieval and future updates but does not erase existing learned memory. “Clear learned memory” deletes the learned profile, structured facts and evidence, embeddings, episodic memory, memory-operation records, pending work, reading-memory records, and saved memory prompt-replay snapshots. Saved chats remain unless deleted separately. Deleting a chat also removes memory derived from it.

Temporary Chat. Temporary Chat does not use saved learned memory, enter normal chat history, or add to learned memory. CosmiQ temporarily creates generation records and sends the prompt and required context to generation and job providers. Application records are deleted after you leave or switch modes. If cleanup cannot run, abandoned records are eligible for deletion after 24 hours, subject to processing delays, provider retention, and legal or security requirements.

We use information to:

• create, authenticate, secure, and support accounts;
• generate and deliver requested readings, images, charts, search context, and audio;
• save history and provide user-controlled personalization and Memory;
• deliver notifications you enable;
• administer plans, subscriptions, credits, payments, cancellations, refunds, and disputes;
• prevent abuse, enforce limits, debug failures, maintain security, and protect users;
• measure performance and, with your choice where required, first-touch acquisition (such as campaign/source and Google Ads click identifiers) and ad conversions;
• respond to support, privacy, and legal requests; and
• comply with law, accounting obligations, and legal claims.

For people in the EEA or UK, the legal basis depends on the activity: contract performance for requested service delivery; legitimate interests for proportionate security, fraud prevention, debugging, and improvement; consent for optional measurement and notifications where required; and legal obligation or legal claims for required records. You can withdraw consent and object to legitimate-interest processing, subject to applicable law.

CosmiQ does not make decisions that produce legal or similarly significant effects about you. AI responses and safety routing provide content and service controls, not employment, credit, insurance, health, legal, or other eligibility decisions.

Depending on the feature, prompts, conversation excerpts, preferences, ordinary learned memory, astrology context, images, or reading text may be sent to Z.AI and Google Gemini APIs. A question may trigger Brave Search for current public information. Location text may be sent to Google Maps or OpenStreetMap/Nominatim for geocoding and time-zone calculation.

Provider processing and retention can vary by product, plan, location, and account configuration. Do not submit information you do not want processed to answer your request. We do not promise that a provider never retains data or uses it for service improvement unless that protection is verified for our current account and contract.

We disclose information as reasonably needed to the following categories and providers:

• Supabase — authentication, United States-hosted database, and object storage;
• Z.AI — text generation, planning, image understanding, and memory-related processing;
• Google Gemini Developer API — image understanding, embeddings, text-to-speech, and selected AI tasks;
• Inngest — generation events and durable background jobs;
• Brave Search, Google Maps, and OpenStreetMap/Nominatim — search, place, and time-zone context;
• Stripe — web payments, subscriptions, refunds, and disputes;
• Apple and RevenueCat — App Store purchases and entitlement synchronization;
• Vercel — hosting, application logs, and performance measurement;
• Upstash Redis — rate limiting and short-lived operational state;
• Google Ads — consent-aware web conversion measurement;
• Google and Apple — optional identity sign-in; and
• browser and operating-system push services — notifications you enable.

We may also disclose information to advisers, authorities, or transaction counterparties when reasonably necessary for law, fraud or security investigation, rights and safety, a corporate transaction, or legal claims. We do not sell or rent personal information.

CosmiQ operates from Canada and uses providers in other countries. Supabase application data is currently hosted in the United States. Providers and subprocessors may process information in Canada, the United States, Europe, mainland China, and other locations, where it can be subject to local law and lawful government access.

Where applicable law requires it, we use an appropriate transfer mechanism and assess privacy and security factors before a transfer. Contact us for information about relevant safeguards. This describes our obligation; it is not a statement that every current provider arrangement is approved for every jurisdiction.

Authentication cookies and local storage are necessary to keep you signed in, preserve requested local state, and provide the Service. Vercel processes request and performance data needed to host and monitor the Service.

On the web, CosmiQ loads the Google Ads tag in Advanced Consent Mode with advertising storage, ad-user-data use, ad personalization, and analytics storage denied by default. Before you choose Accept, or after you choose Reject, Google may receive limited cookieless consent and measurement signals, such as consent state, timestamp, browser or user-agent information, referrer, and coarse information about whether a page included ad-click data. Advertising cookies are not read or written in that state, Ads click identifiers are redacted, and ad-personalization signals remain disabled. When accepted, CosmiQ also saves the first campaign/source, landing path, referring site, and any Google Ads click identifier so signups and product outcomes can be measured by acquisition source. Rejecting optional cookies does not prevent use of CosmiQ. Clearing browser storage can reset your saved choice.

We keep information only as long as reasonably necessary for the stated purpose and then delete or de-identify it, subject to backups, legal obligations, and documented legal holds.

• Account, profile, saved chats, and linked images: while the account or item remains, then through the deletion process.
• Learned memory: until you delete it, delete its source chat, or permanently delete the account. Turning Memory off retains it inactive.
• Temporary Chat: deleted from normal CosmiQ records after the session; abandoned sessions are eligible for deletion after 24 hours. Processor logs or events may last longer.
• Pending unlinked images: eligible for deletion after one hour.
• Generated reading audio: 30 days, or sooner if the source is deleted.
• Short-lived Redis state: generally about 90 seconds for presence and 24 hours for job state.
• Deletion audit: generally 540 days. It may contain a former internal user ID, deletion and service dates, provider/subscription identifiers and status, policy versions and acceptance timestamps, and aggregate service counts. It excludes email, chat text, readings, learned memory, astrology data, images, and audio.
• Transaction, accounting, tax, fraud, refund, dispute, and legal-claim records: for the period reasonably required by law and the relevant claim or limitation period.
• Provider logs, events, backups, and support email: under applicable provider configuration, contracts, security needs, and law.

You can delete chats and learned memory separately. An account-deletion request immediately deactivates the account and attempts to cancel web subscription renewal. App Store subscriptions must be cancelled through Apple.

You may choose immediate permanent deletion or a 30-day recovery period. Signing in during recovery restores the account but does not restart cancelled billing. At permanent deletion, account content is removed while limited audit and transaction/security/legal records may remain as described above. Retained records are not used for readings or personalization.

Deletion from active systems may not immediately erase protected disaster-recovery backups or independent provider records. Those are overwritten or deleted under the applicable lifecycle unless law requires longer retention. See the account-deletion instructions.

Depending on where you live, you may request access, a copy or portability, correction, deletion, restriction, objection, withdrawal of consent, and information about processing or recipients. You may complain to a regulator and may have a right to appeal a refused request. We will not discriminate against you for exercising a privacy right.

Use in-product controls or email cosmiqapp@gmail.com with “Privacy” in the subject. We may verify identity and authority and will respond within the legally required period, subject to lawful exceptions. An authorized agent may act where local law permits.

Canadian users may complain to the Office of the Privacy Commissioner of Canada and an applicable provincial regulator. EEA users may complain to their local data-protection authority; UK users may complain to the Information Commissioner’s Office. United States residents may make applicable state-law requests through the same contact route. Washington and Nevada residents should also read our Consumer Health Data Privacy Notice.

We use safeguards designed for the sensitivity of the information, including TLS in transit, provider encryption at rest, additional application encryption for selected astrology fields, authentication, authorization, rate limits, restricted administrative access, and deletion controls. No Internet service is completely secure, and we cannot guarantee absolute security.

We maintain incident procedures and, where required, record, report, and notify affected people and privacy regulators about qualifying privacy or security breaches.

CosmiQ is only for people who are at least 18 and have reached the age of majority where they live. We do not knowingly offer the Service to children. Contact us if you believe a child has provided personal information.

We will post a revised notice and effective date when this Notice changes. We will provide prominent notice for material changes and seek fresh consent before a new consent-based use where required. Acknowledging this Notice is not consent to optional processing.

Privacy Lead, Cosmiqapp
Ontario, Canada
cosmiqapp@gmail.com