Privacy Policy

Effective 5 November 2026

This privacy policy applies to the Cosmia app (hereinafter referred to as “Application”) for mobile devices, which was developed by KRISTINA BORTSOVA (hereinafter referred to as “Service Provider”, “we”, “us”) as a Commercial service. This service is provided “AS IS”.

It also covers the website cosmia.site; see This website.

Cosmia is built so that the most personal things you share with it stay with you. Your birth details, your Journal and your choices of the day are stored on your device, not on our servers. This policy explains what the Application handles, where it goes and what you can do about it.

What information do you provide, and where is it stored?

The Application does not require registration and has no user accounts. You may choose to provide:

• Birth details: date of birth, and optionally time and place of birth. They are used to calculate your Sun, Moon and rising signs and to personalise your readings.
• Your Journal and choices of the day: Day Intentions (including your own text), notes, answers to the evening question, Good Things, marked Small Steps and Practices, drawn cards, questions you write for the cards and saved items.
• Notification preferences, such as the time of your morning note.

This information is stored only on your device. Where iCloud sync is available and turned on for your Apple Account, it may also be synced to your private iCloud storage through Apple’s CloudKit so that it is available on your other devices. Text fields and birth details are marked for encryption in iCloud. The Service Provider has no access to your private iCloud data. Apple’s handling of iCloud data is described in the Apple Privacy Policy.

The Application does not ask for your name. Your birth details and Journal are never sent to our analytics, crash reports or logs.

What information leaves your device?

Birth place search

When you search for your place of birth, the text you type (for example, the first letters of a city), your language and a result limit are sent to the Service Provider’s own server at api.cosmia.site to find matching places with their coordinates and time zone. Your date and time of birth are never sent. As with any internet request, the server receives your device’s IP address, which is used only for rate limiting and security. The server does not write the text you type to its logs. The place you pick is then saved on your device, and no further requests are needed.

Place data comes from GeoNames.

Content of the day

The Application downloads the shared content of the day (the Day Theme, card meanings and app settings) from Google Firebase. These requests carry no personal information about you.

Analytics and crash reports

The Application may collect certain information automatically to operate, maintain, secure and improve the Application, including:

• the type of mobile device you use and its operating system version;
• an app instance identifier generated by Firebase (not your Apple advertising identifier);
• your approximate region (country or region level), derived from your IP address;
• information about the way you use the Application, recorded only as the fact of an action, for example that a Life Area was opened, a Small Step was marked or the paywall was shown;
• crash reports and diagnostics: what the Application was doing when it crashed, device state and a crash-reporting installation identifier.

Analytics events never contain your birth details, signs, the text of your Journal, intentions, questions or readings. The Application does not track you across other companies’ apps and websites, does not use the advertising identifier (IDFA) and does not show ads.

Subscriptions and purchases

Purchases are made through Apple’s App Store. The Service Provider never receives your payment card details. To check the status of your subscription, restore purchases and manage the free trial, the Application uses Qonversion, which receives an anonymous user identifier, App Store purchase receipts and transaction history, and basic device information.

AI-powered readings

Some readings may be written with the help of Artificial Intelligence (AI) technologies. AI-powered readings are used only if you agree to them on a separate consent screen; without your consent the Application uses readings from its own library. You can change your choice at any time in Profile.

If you agree, the following is sent to the Service Provider’s own server and from there to a third-party AI service provider in order to write your reading:

• the Life Area you chose;
• identifiers of the day’s sky events (for example, the Moon’s phase and sign);
• for the end-of-cycle recap, a short anonymised summary of your cycle that contains no name, birth details or text of your entries.

Your birth details, Journal and questions are never sent. Requests are authorised with an anonymous identifier issued by Firebase Authentication and Firebase App Check, which lets the server check your subscription and fair-use limits without knowing who you are. The AI service provider processes this information solely to generate the requested reading.

AI-generated readings may not always be accurate or suitable for your situation. Please do not enter sensitive personal information into AI-powered features unless the Application specifically asks for it.

Notifications and widgets

Notifications (the morning theme, the evening question, new and full Moon, the end of your free trial) are scheduled locally on your device. Widgets receive only the shared content of the day and never your personal data.

Support emails

If you write to us, we receive your email address and whatever you include in your message, and use them only to answer you.

Does the Application collect precise location information?

No. The Application does not request access to your device’s location. The only location-related information it handles is the birth place you search for and choose yourself.

Do third parties see and/or have access to information obtained by the Application?

The Service Provider does not sell your personal information and does not share it for cross-context behavioural advertising.

The Application uses the following third-party services, which process information on behalf of the Service Provider and have their own privacy policies:

• Apple (App Store purchases, iCloud sync): Apple Privacy Policy
• Google Firebase (content delivery, Analytics, Crashlytics, Authentication, App Check): Firebase privacy information and Google Privacy Policy
• Qonversion (subscription management): Qonversion Privacy Policy
• AI service provider (AI-powered readings, only with your consent), engaged through the Service Provider’s own server.

Third-party service providers may process information on behalf of the Service Provider for purposes including application functionality, analytics, diagnostics, security, fraud prevention, customer support, AI-powered functionality and improvement of the Application. The Service Provider requires them to maintain appropriate safeguards and to use such information only for the purposes for which it was provided or as otherwise permitted by applicable law.

The Service Provider may also disclose information:

• as required by law, such as to comply with a subpoena or similar legal process;
• when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Some of these providers are located outside your country, including in the United States. Where required, such transfers rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

This website

The website cosmia.site does not use cookies or advertising trackers, and it has no forms or sign-ups. To see which pages are read, it uses Umami, a privacy-friendly analytics tool that the Service Provider runs on its own server at stats.cosmia.site; the data is not shared with third parties. For each page view it records the page address, the referring site, browser, operating system, device type, screen size, language and approximate location (country, region and city) derived from your IP address. It also counts clicks on the App Store button and where on the site the button was. Your IP address itself is not stored, and visitors are counted with an anonymous identifier that changes every day, so visits cannot be linked across days or to you. The statistics are used only in aggregate, to improve the site. Like any website, its server also receives your IP address and basic request details in order to deliver pages and keep the site secure.

Legal bases for processing (EEA and UK)

If you are in the European Economic Area or the United Kingdom, the Service Provider processes your information on the following legal bases:

• performance of a contract: providing the Application, its features and your subscription;
• consent: AI-powered readings and notifications; you can withdraw consent at any time in the Application or in your device settings;
• legitimate interests: analytics, crash reports, security and fraud prevention, to keep the Application working and improve it;
• legal obligation: keeping purchase records where the law requires it.

What is the data retention policy?

• Data on your device and in your iCloud stays there until you delete it in the Application, delete the Application or remove it from iCloud. The Service Provider does not hold a copy.
• Analytics data is kept for no longer than 14 months and may afterwards be stored only in aggregate.
• Crash reports are kept for up to 90 days.
• Subscription records in Qonversion are kept for as long as needed to provide your subscription and to meet accounting and legal obligations.
• Birth place search requests are not stored.
• AI requests are kept only as long as needed to generate the reading and to apply fair-use limits.
• Support emails are kept as long as needed to resolve your request.

Certain information may be retained where necessary to comply with legal obligations, resolve disputes, enforce agreements, prevent fraud or abuse, or maintain security.

How can you manage and delete your information?

• Delete: Profile → Your data → Delete all data removes your Journal, choices, cards, saved items, intentions, birth details and settings from your device. If iCloud sync is on, the deletion is synced to your private iCloud storage.
• AI consent: you can turn AI-powered readings on or off in Profile.
• Notifications: you can turn them off in Profile or in your device settings.
• Uninstall: you can stop all collection of information by the Application by uninstalling it.
• Subscription: a subscription stays with your Apple Account and is managed in your device’s Settings.

Because the Application has no accounts, the Service Provider cannot link analytics or subscription records to your name. If you would like the Service Provider to access, correct or delete information it or its service providers hold about you, contact support@cosmia.site. To help us find your records, we may ask for details such as the Apple order ID from your purchase receipt. We may need to verify your request before processing it and will respond within the time required by applicable law.

Your privacy rights

Depending on where you live, you may have the right to:

• access the personal information held about you and receive a copy of it;
• correct inaccurate information;
• delete your information;
• restrict or object to certain processing, including processing based on legitimate interests;
• data portability;
• withdraw consent at any time, without affecting processing that took place before;
• lodge a complaint with your local data protection authority.

California residents. Under the California Consumer Privacy Act (CCPA), as amended by the CPRA, you have the right to know what personal information is collected, to request its deletion or correction, and not to be discriminated against for exercising these rights. The Service Provider does not sell or share personal information and does not use sensitive personal information for purposes other than providing the Application.

To exercise any of these rights, contact support@cosmia.site.

How does the Application address children’s privacy?

The Application is not directed at children. The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13, or under the minimum age required by the law of your country (for example, 16 in some countries of the European Economic Area).

The Service Provider does not knowingly collect personally identifiable information from children under these ages. If the Service Provider discovers that a child has provided personal information, it will promptly delete it from its systems. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact the Service Provider at support@cosmia.site so that they can take the necessary actions.

How is your information kept secure?

The Service Provider is concerned about safeguarding the confidentiality of your information:

• personal data is stored on your device under iOS data protection and is not kept on the Service Provider’s servers;
• sensitive fields are marked for encryption in iCloud;
• all network requests use encrypted connections (HTTPS);
• access to the Service Provider’s servers is limited to those who need it to operate the Application.

Please be aware that, although we endeavour to provide reasonable security for the information we process, no security system can prevent all potential security breaches. Keeping your device secure, for example with a passcode, also protects your data in the Application.

How will you be informed of changes to this Privacy Policy?

This Privacy Policy may be updated from time to time. The Service Provider will notify you of any changes by posting the new Privacy Policy on this page and updating the effective date. If the changes are significant, for example a new kind of data leaving your device, the Service Provider will also let you know in the Application and will ask for your consent where the law requires it. You are advised to consult this Privacy Policy regularly for any changes.

How do you give your consent?

By using the Application, you agree to the processing of your information as set forth in this Privacy Policy. Where applicable law requires consent before collecting or processing personal information, as with AI-powered readings and notifications, the Application asks for it separately. You can withdraw consent where permitted by applicable law in the Application, in your device settings or by contacting the Service Provider at support@cosmia.site.

How can you contact us?

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at support@cosmia.site.

Service Provider: KRISTINA BORTSOVA

Email: support@cosmia.site