4. DATA SHARING AND DISCLOSURE

4.1 Third-Party Service Providers

We may share your personal information with third-party service providers that help us deliver our Services:

• Supabase: For database storage, user authentication, and edge functions
• Google Places API: For location search during birth location input
• Twilio: For SMS authentication
• Firebase: For push notifications and app messaging (not for analytics)
• Mixpanel: For analytics and user behavior tracking
• AI Services (Google Gemini, Anthropic, OpenAI): For AI chat functionality, generating quiz questions, content generation, conversation processing, and personalized results

These service providers are contractually required to use your information solely to provide services to us and in accordance with our instructions and this Privacy Policy.

4.2 Friend Data Sharing

When you include friends in quizzes:

• We use both your and your friend's birth details to calculate compatibility metrics
• Friend data is only used for the specific purposes disclosed in this policy
• Friend information is not shared with other users or third parties except as necessary to provide the Services

4.3 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect our rights, resolve disputes, enforce our agreements, or protect the safety of our users.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, user information may be transferred as part of the transaction. We will notify you via email and/or a prominent notice on our Services of any change in ownership or uses of your personal information.

4.5 With Your Consent

We may share your information in other circumstances with your explicit consent.

5. DATA STORAGE AND SECURITY

5.1 Data Storage

Your information is stored on secure servers provided by Supabase with additional security controls implemented. We also use Firebase only for notification data storage and delivery. We utilize a multi-layered caching system:

• Memory Cache (LRU): For frequently accessed data with limited size (50MB max)
• Local Cache (SharedPreferences): For user-specific data persistent across app sessions
• Remote Cache (Supabase): For shared data across user devices
• Firebase Cloud Messaging: For storing notification preferences and delivery status (not for analytics)

5.2 Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. Specifically:

• User profiles and birth details: Until account deletion
• Quiz history for free users: 3 days
• Quiz history for premium users: Indefinitely until account deletion
• Chat messages and conversation history: 30 days for free users, indefinitely for premium users
• Friend data: Until removed by the user or account deletion
• Technical logs and analytics: Up to 90 days

5.3 Security Measures

We implement reasonable administrative, technical, and physical measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• End-to-end encryption for personal data
• Secure storage of birth information and chat messages
• Encrypted API communications with AI service providers
• Secure token management
• Secure transmission of astrological context data for chat processing

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. YOUR RIGHTS AND CHOICES

6.1 Account Information

You can review and update your account information at any time through the Settings section of the App.

6.2 Friend Management

You can add, edit, or remove friend information through the Friends section of the App. When you remove a friend, their information is deleted from our systems.

6.3 Communication Preferences

You can opt out of promotional communications by adjusting your notification settings in the App or following the unsubscribe instructions in our emails.

6.4 Data Access and Portability

You have the right to request a copy of the personal information we hold about you. You can request this through the Settings section of the App or by contacting us at info@cosmixastrology.com.

6.5 Data Deletion

You can request the deletion of your account and personal information in the following ways:

• Through the "Delete Account" option in the Settings section of the App
• By visiting our account deletion web page at: https://www.cosmixastrology.com/account-deletion
• By contacting us at info@cosmixastrology.com with your phone number and full name

Upon your request, we will permanently delete your account and associated personal information from our active systems within 30 days. Some information may remain in our backup systems for a limited time, and we may retain certain information if required by law or for legitimate business purposes, such as:

• Information needed for security investigations or fraud prevention
• Information required to comply with legal obligations
• Anonymous, aggregated data that does not identify you

We will clearly inform you about any retained data when you make a deletion request.

6.6 Limitation of Processing

In certain circumstances, you may have the right to restrict or object to our processing of your personal information.

7. CHILDREN'S PRIVACY

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete such information as quickly as possible. If you believe we might have any information from or about a child under 13, please contact us at info@cosmixastrology.com.

8. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country.

By using our Services, you consent to the transfer of your information to countries outside your country of residence, including the United States, where our servers and those of our third-party providers (including Supabase, Firebase, and Mixpanel) are located.

9. CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect about you
• The right to know whether your personal information is sold or disclosed and to whom
• The right to request deletion of your personal information
• The right to access your personal information
• The right to opt-out of the sale of your personal information
• The right to non-discrimination for exercising your CCPA rights

To exercise these rights, please contact us at info@cosmixastrology.com.

10. EUROPEAN PRIVACY RIGHTS

If you are a resident of the European Economic Area (EEA), United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR):

• Right to access your personal information
• Right to rectification of inaccurate personal information
• Right to erasure of your personal information
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

To exercise these rights, please contact us at info@cosmixastrology.com.

11. DATA SAFETY AND APP PERMISSIONS

Our app requires certain permissions to function properly. Here's what each permission is used for:

• Storage: To save visualization cards and quiz results locally on your device
• Phone: To verify your identity during account creation and recovery
• Notifications: To send you daily horoscopes, quiz reminders, and friend activity updates through Firebase

We value transparency about data collection and use. All data collection happens only after appropriate consent is provided, and you can revoke permissions at any time through your device settings.

12. THIRD-PARTY ANALYTICS AND TRACKING

We use Mixpanel as our analytics platform to help us understand how users interact with our Services. Mixpanel may collect information sent by your device including:

• User interactions with app features
• Session duration and frequency
• Navigation patterns within the app
• Device events and crash data
• Feature usage statistics

We do not use Firebase Analytics. Firebase is used solely for push notifications and messaging.

We do not use cookies to track you across different websites or apps. Our analytics are used solely for improving our Services and user experience, and data collected through these platforms is handled according to their respective privacy policies and our agreements with them.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we will provide additional notice, such as an in-app notification or email.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our Services after the posting of changes constitutes your acceptance of such changes.

14. CONTACT US

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: info@cosmixastrology.com

Postal Address:
Cosmix Astrology
348 4th Avenue Ste 1031
Brooklyn, NY 11215
United States