← Back to Cosmicore

Privacy Policy

Cosmicore is operated by an individual developer, not a registered company. This policy explains clearly what data we collect, why, and what we do with it.

1. What We Collect

Things you give us directly:

• Your name and email address when you create an account
• Your avatar choice and display name
• Everything you write — tasks, notes, calendar events, focus session details
• Payment details when subscribing to Pro (handled entirely by Stripe — we never see or store your card number)

Things collected automatically:

• Your focus session durations, objects forged, streaks, XP, and achievements
• How you signed in (email/password or Google)
• Basic device info (browser type, screen size) so the app works properly

From Google (only if you connect it):

• Your Google Calendar events, shown inside Cosmicore
• We do not access your Gmail, Google Drive, or anything else

2. Why We Use It

• Run the app and keep your data synced across devices
• Process your Pro subscription through Stripe
• Send emails you triggered — collaboration invites and reminders you set yourself
• Sync with Google Calendar if you've connected it
• Keep your streak, XP, and galaxy intact between sessions
• Respond if you contact us for support

We do not use your data for advertising. We do not sell it to anyone. Full stop.

3. Who Sees Your Data

Service	Purpose
Supabase	Stores all app data securely
Stripe	Handles payment processing
Google	OAuth sign-in and Calendar sync
Resend	Sends transactional emails (invites, reminders)

Nobody else.

4. Your Rights

No matter where you live, you can request access to, correction of, or deletion of your data. If you are in the European Union, you have additional rights under GDPR including the right to complain to your local data protection authority. Email us at hellocosmicore@gmail.com to exercise any right.

5. Data Deletion

If you delete your account, we remove your data within 30 days. Stripe may retain payment records longer as required by financial regulations.

6. Cookies and Storage

We use browser local storage (not advertising cookies) to keep you logged in and remember your preferences. We do not use advertising pixels or third-party analytics. If you use Google sign-in, Google's own cookie policy applies during that step.

7. Children

Cosmicore is for users aged 13 and over. Users under 18 may not purchase a Pro subscription.

8. Security

Your data lives on Supabase with row-level security — each user can only see their own data. All connections are HTTPS-encrypted. Payments go directly through Stripe and never pass through our servers.

9. Changes

If we update this policy, we'll change the date at the top. Significant changes will be notified in-app.