← Back to Cosmly[ Legal ]

Cosmly — Privacy Policy

Effective DateApril 17, 2026
Last UpdatedMay 18, 2026
CompanyAISH AI PTY LTD

1. Introduction

AISH AI PTY LTD (“we”, “us”, “our”) operates the Cosmly mobile application (“the App”). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the App.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, name (optional), authentication method.
  • Birth Data: Date of birth, time of birth, birth location — for natal chart calculation.
  • Chat Data: Questions via “Ask the Void” and AI responses.
  • Mood Logs: Mood selections, energy levels, optional notes.
  • Profile Data: Saved profiles of others including their birth data.

2.2 Collected Automatically

  • Device Information: Device type, OS, app version.
  • Usage Data: Features accessed, session duration, preferences.
  • Push Tokens: For scheduled horoscope alerts.

2.3 We Do NOT Collect

  • Your real name unless voluntarily provided.
  • Contacts, photos, microphone, or camera without permission.
  • Location data beyond birth location for charts.
  • We do not sell your personal data to third parties.

3. How We Use Your Information

  • Calculate natal charts, daily vibes, transits, compatibility.
  • Power AI insights (Ask the Void, Health Alignment, Cosmic Calendar).
  • Maintain subscription status and purchase history.
  • Send push notifications if enabled.
  • Improve performance through anonymised analytics.

4. How your data is stored

Where: All personal data is stored in encrypted PostgreSQL databases hosted by Supabase (AWS ap-south-1, Mumbai, India). Backups are encrypted at rest and retained for 30 days.

In transit: All requests between the Cosmly app and our servers are encrypted with TLS 1.3.

On your device: Authentication tokens, your consent preferences, and a cache of your most-recent profile are stored locally in encrypted device storage (iOS Keychain / Android Keystore). You can clear this any time by signing out or deleting the app.

5. Third-party services we use

We use a small number of vetted third-party providers. We share with them only the minimum data required to deliver the feature you requested.

ProviderPurposeData shared
Emergent LLM Gateway(currently routes to Google Gemini via Google's Vertex AI)Generate AI insights for “Ask the Void”, daily-vibe summaries, and personalised coaching advice.The text of the question you type, your active profile's birth date / time / place, and a short numeric summary of your natal chart (planet positions and houses).

We do NOT send: your name, email, postal address, contacts, photos, device identifiers, IP address, IDFA / AAID, or precise location.
Supabase (AWS)Database + auth tokensAll account data listed in Section 3.
RevenueCatIn-app purchase entitlement managementAnonymous RevenueCat user ID, purchase receipts (provided by Apple / Google), subscription status.
Google AdMobAdvertising on the free tierIf you grant App Tracking Transparency permission: a coarse advertising identifier. If you decline (default): no identifier is shared and only non-personalised ads are served.
DingoMailTransactional email (verify-email, password-reset, account-deletion confirmation)Your email address and the contents of the transactional email.
[ 5.1 — Explicit Notice ]

AI processing

What is sent
The question you type into “Ask the Void”, plus your active profile's birth date / time / place and a numeric summary of your natal chart (planet positions, ascendant, houses).
Who it is sent to
Emergent LLM Gateway, which currently routes to Google Gemini (Google's enterprise Vertex AI API). Data is transmitted over HTTPS (TLS 1.3).
What it is used for
Generating your AI reading only. The data is NOT used to train any external model.
Retention
The question and the AI's answer are stored under your account on Cosmly's servers so you can revisit them. You can delete individual AI conversations or your entire history at any time from Settings → Privacy & Data.
Your consent
Cosmly will not send any data to the AI service until you have explicitly tapped “I Agree — Send to AI” in the in-app consent dialog that appears on your first session. You can revoke this consent at any time in Settings → Privacy & Data → AI Data Sharing.
Provider's protections
Google Gemini via Vertex AI is bound by Google's enterprise data-processing terms, which prohibit the use of input data for model training and require deletion of cached payloads within 24 hours. Full text at cloud.google.com/terms/data-processing-addendum.

6. Data Retention

  • Account Data: Retained while active.
  • Chat History: Deletable via Privacy Dashboard.
  • Daily Vibes Cache: 24-hour auto-expiry.
  • Deleted Accounts: Permanently removed within 30 days.

7. Your Rights

  • Access: View data via Settings > Privacy Dashboard.
  • Delete: Delete categories or all data via Privacy Dashboard.
  • Export: Contact hi@aishai.com.au for data export.
  • Opt out: Disable notifications via device settings.
  • Withdraw consent: Delete account anytime.

EU/EEA users: GDPR rights apply. Australian users: Privacy Act 1988 and APPs apply.

8. Children's Privacy

Not intended for children under 13. We delete any data from children under 13 promptly.

9. Advertising

Free-tier users see Google AdMob ads. Opt out via iOS Settings > Privacy > Tracking or Android Settings > Google > Ads. Clean Slate and Premium are ad-free.

10. Data Storage Location

Data stored on secure servers in Australia. Protected under Privacy Act 1988 and Australian Privacy Principles (APPs).

11. International Data Transfers & EU Users

EU/EEA users: Data transferred to Australia under Standard Contractual Clauses (SCCs) per Commission Implementing Decision (EU) 2021/914.

EU Consent Notice

“Cosmly processes and stores your data on secure servers in Australia. This transfer is protected by EU Standard Contractual Clauses. By continuing, you consent to this transfer. You may withdraw consent at any time via Settings > Privacy Dashboard.”

Request SCC copies at hi@aishai.com.au.

12. Changes to This Policy

We notify of significant changes via the App or email.

13. Contact Us

AISH AI PTY LTD

Email: hi@aishai.com.au

Web: aishai.com.au

Cosmly — FAQsDelete Your Account

AISH AI is registered in Surry Hills, NSW 2010. All AI insights are for entertainment and educational purposes only.