Privacy notice
Version 2026-10-19.1 · effective 19 October 2026
Draft under legal review. Items in [brackets] are being confirmed before launch.
CosmicDuos is built so that the most personal things stay with you: your exact birth details stay on your device and your conversations are end-to-end encrypted. This notice explains, item by item, what we do collect, why, and how to use your rights under India's Digital Personal Data Protection Act, 2023.
Who is responsible
The Data Fiduciary is [Legal entity name, to be confirmed], [Registered address in India, to be confirmed]. For anything about your data, write to our Grievance Officer, Terala Shiva Kumar, at grievance@cosmicduos.in.
What we collect, why, and for how long
| Data | Kept | Why | For how long |
|---|---|---|---|
| Birth date, exact birth time and birthplace | Only this device, encrypted with a key that can't be exported | To calculate your chart | Until you delete it or your account |
| Birth date and birth hour (UTC, rounded down) | Our servers, only if you turn on Birthday twins | To find people born on the same day or within hours of you (optional purpose) | Until you turn twins off (removed at once) or delete your account |
| Chart traits: Moon sign, nakshatra and position, ascendant sign, dasha chapter, Sade Sati and Saturn-return status, how sure you are of your birth time; birth state and country | Our servers | To match you with people and show what you share (part of running your account) | Until you delete your account |
| Random name, languages, intentions, interests, and who-sees-what choices | Our servers | To run your account and introduce you to people | Until you delete your account |
| When you were last online | Our servers | To show the people you talk with whether you are around | Until you delete your account |
| Account ID; your Google email and name if you save your account with Google | Our sign-in provider | To sign you in and keep your account across devices | Until you delete your account |
| Public encryption keys | Our servers | So messages can be end-to-end encrypted | Until you delete your account |
| Messages: encrypted content we cannot read, plus sender, recipient, time and a rounded size | Our servers | To deliver messages and keep your history across visits | Deleted automatically after 365 days, or with your account |
| A keyed hash of your IP address (never the address itself) | Our servers | Safety: to enforce suspensions for proven abuse | Replaced on each visit; with a suspension, until it ends |
| Reports you make, the excerpts you choose to share, and moderation records | Our servers | Safety and moderation | [Retention period to be confirmed] |
| Your consent choices, with the notice version and time | Our servers | To prove what you agreed to (the law requires us to) | Until you delete your account [to be confirmed] |
| Rights requests and grievances, and an email if you give one | Our servers | To answer you | [Retention period to be confirmed]; kept without your account link after deletion so we can still answer |
| Pilot membership: whether and when you joined with an invite code (never the code) | Our servers | To keep the pilot small and invite-only | Until you delete your account |
| Activity events: that you finished onboarding, posted, replied, offered help or updated a story, and when (never what you wrote) | Our servers | To learn whether the community actually helps people, and to run the pilot (part of running your account) | Until you delete your account |
| Anonymous visit counts on our public pages (never inside the app): the page, the site you came from, the campaign tag of the link you followed, country and region, browser and device type | Our hosting provider (Vercel Web Analytics), with no cookies | To see how many people find the site and from where | Only as totals; the provider discards its short-lived visitor hash within 24 hours |
| Technical logs (IP address, page or API path, time) | Our hosting and database providers | Security and fixing faults | [Per provider; to be confirmed against legal minimums] |
Inside the app, we ask for your consent before anything about you leaves your device: once to run your account (required) and once for birthday twins (optional). Every box starts unticked. The anonymous visit counts on our public pages, described above, are the only thing collected without asking, and they record no one individually.
What we never do
- Sell your data, show ads, or use advertising trackers or anything that follows you across sites.
- Read your messages: only your devices hold the keys. The one exception is a message flagged as abuse, which the recipient's app sends us as proof (see Safety and moderation).
- Send your messages or profile to an AI service.
- Show your gender, real name or photo to other people, or your birth date unless you choose to. Birthday twins can tell from a match that you were born on the same day, within a few hours.
Storage on your device
We use only what the app needs to work: a sign-in cookie from our sign-in provider, your encrypted profile and encryption keys, with the public keys of the people you talk to, in your browser's storage (IndexedDB), and a few display preferences (localStorage). None of these track you across other sites, so there is no cookie banner. Our public pages count visits without cookies or anything stored on your device, and nothing inside the app is counted.
Who else processes your data
- Supabase: our database and sign-in provider, hosted in Mumbai, India (AWS ap-south-1).
- Vercel: our web hosting, with app servers in Mumbai, and anonymous visit counts on our public pages.
- Google: only if you choose to save your account with Google.
- Other members: they see your random name and only the traits you switch on.
- Authorities: only when Indian law requires it.
Each provider processes data on our instructions under a contract. [Data processing agreements to be confirmed.]
Your rights
- Access: download everything we hold about you from Your data, including who we share it with.
- Correction and completion: edit your details at any time, or ask us to.
- Erasure: delete your account in one step from Your data. Backups are overwritten within 7 days.
- Withdraw consent: as easy as giving it, from Your privacy choices. It takes effect at once; withdrawing consent to run your account means deleting it.
- Nominate: name someone to exercise these rights if you die or cannot act.
- Grievance: complain to our Grievance Officer. We acknowledge within 24 hours and resolve within 15 days. If you're not satisfied, you can complain to the Data Protection Board of India.
Use Your data or write to grievance@cosmicduos.in.
Adults only
CosmicDuos is for people aged 18 and over. We don't knowingly process children's data; if we learn an account belongs to a child, we delete it.
How encryption works, and its limits
Each conversation gets its own key, agreed between your two devices (ECDH P-256, HKDF-SHA256, AES-256-GCM). The server relays ciphertext it cannot read. You can compare a 60-digit safety number with the other person; if their key ever changes, you're told before you can keep chatting.
The server can still see who talks to whom, when, and roughly how long messages are. This version has no forward secrecy, and like every web app the encryption code comes from our server.
Safety and moderation
Abusive language is blocked on your device before it is sent. If an abusive message still arrives, the recipient's app reports it with a cryptographic proof of exactly what was sent, so nobody can be framed and nothing else in the conversation is revealed. Proven abuse suspends the sender's account.
Security and breaches
We protect your data with encryption in transit and at rest, strict database access rules and minimal collection. If a breach affects your personal data, we will tell you without delay, along with what happened, what it may mean for you and what you can do, and we will inform the Data Protection Board of India.
Changes and language
If we change what we collect or why, we will update this notice and ask for your consent again before using your data for anything new. This notice is available in English; a Telugu version is being prepared [open item].