Privacy Policy
Updated on September 8th, 2025
At Cosmo, your privacy is not just a box we check—it's something we are deeply committed to. We know how important your personal data is. When you use our mobile app, we handle your data with the utmost care, ensuring that you are always in control.
Our promise to you: your data, your control
We believe your data belongs to you. When you delete your recordings, transcriptions, or summaries, they are permanently removed from our servers. Our goal is to give you the most convenient service while keeping your privacy intact.
Information we collect
Account creation
When you sign up for Cosmo using Google, Apple, or Facebook, we collect your name and email address. This information is used to create and maintain your account, allow access to your data across multiple devices, and communicate important updates to you.
Purchase information
If you make purchases through the iOS or Android App Stores, we collect transactional data. This is used to manage billing and account services.
Audio and text data
Audio recordings: When you record audio within the app, these recordings are uploaded to our server for transcription processing. The audio files are stored until you delete them from the app. This storage allows us to stream the audio to you from any device on which you use Cosmo.
Transcriptions and summaries: The text generated from transcriptions and summaries is stored on our servers to provide you with easy access across your devices.
Usage data
We gather data on how you interact with our app, including features used and time spent. This helps us improve the app for you.
How we use Google user data
If you sign up for Cosmo using your Google account:
We collect your Google name and email address. This data is used exclusively to:
Create and manage your Cosmo account ;
Provide secure login and synchronization of your data across multiple devices ;
Send you important notifications about your account or relevant Cosmo updates.
We do not use any additional Google user data beyond your name and email address. Your Google user data is not used for advertising or marketing purposes, nor is it shared with any third parties outside of the services described below.
We do not use data obtained from Google Workspace APIs to develop, improve, or train generalized AI or machine learning models.
Our technology partners: ensuring secure, seamless experiences
Cosmo utilizes cutting-edge tools to deliver transcription and summarization services. Here's who we partner with and how we share data with them:
Fly.io: All transcriptions and text storage are stored securely using Fly.io infrastructure, protected by native encryption.
Cloudflare: All audio files are stored securely using Cloudflare infrastructure, protected by native encryption.
OpenAI: We use OpenAI's language models to generate summaries from your transcripts. The audio transcriptions are sent to OpenAI's model to create summaries. We do not share personal identifying information. Read more about OpenAI's privacy practices here.
AssemblyAI: Your audio is transcribed using AssemblyAI's services. We send your audio data for transcription, which is processed temporarily and not stored beyond this purpose. Learn more here.
Firebase (by Google): We use Firebase services such as Analytics and Crashlytics to help us understand how our app is used, improve stability, and quickly resolve unexpected issues.
Data sharing and transfer
Third-party service providers
We share audio data with AssemblyAI for transcription and text data with OpenAI for summarization.
No selling or renting of data
We do not sell, rent, or disclose your personal data to unauthorized third parties.
Data retention and deletion
We retain your data as long as you maintain an active account. When you delete content or your account, all associated data is permanently removed from our servers. Server logs are kept for 14 days to diagnose issues, then automatically deleted. Once deleted, data cannot be recovered.
Data security
All data is encrypted both at rest and in transit
Strict access controls limit data access to authorized personnel
Monitoring protects against unauthorized access
Google API Services User Data Policy
Our use and transfer of information received from Google APIs comply with Google's API Services User Data Policy, including the Limited Use requirements.
Updates to this policy
We'll notify you of any changes by updating this page with a new effective date.
Contact us
For privacy inquiries, please contact us at privacy@cosmonotes.app