Privacy policy

In short

Cosmo needs no sign-up, does not know your name and does not measure your behaviour. There are no ads, no tracking and no analytics services.

The photo your pet is made from leaves your device exactly once: for the transformation. After that it is kept neither by us nor by our service provider.

Controller

Niklas Albrecht Rießnerstraße 51 99427 Weimar Germany

Email: kontakt@niklasxskyz.de

The photo and the transformation

When you create a pet, the selected photo is sent to our server (Supabase, data centre Frankfurt am Main, region eu-central-1). From there it goes to Google's image interface (Gemini API), which generates the individual frames of your pixel pet.

Neither we nor Google keep the photo or the generated image: both exist only for the duration of the processing. What stays is the result on your device, so your pet can live there.

The legal basis is Art. 6 (1) (b) GDPR — this processing is the core of the service you pay for.

Google also processes data in the United States. Google LLC is certified under the EU-US Data Privacy Framework; the European Commission's standard contractual clauses apply in addition.

Your account without sign-up

So that a paid purchase can be matched to the right device, the app creates an anonymous account on first launch. It consists of a random string — no name, no email address, no phone number.

For a purchase we store Apple's transaction number, the identifier of that anonymous account, the processing state and the number of attempts. This is necessary so that a paid purchase is not lost and cannot be redeemed twice (Art. 6 (1) (b) GDPR).

Purchase through Apple

The purchase runs entirely through Apple. We receive a signed confirmation of the transaction from Apple, but no payment details. Which data Apple processes is set out in Apple's privacy policy.

Backup in your iCloud

So that your pet survives a reinstall and a new iPhone, the app stores a backup in your private iCloud (CloudKit, container iCloud.de.cosmopet.app). That backup sits in your Apple account — we have no access to it and can neither read nor delete it.

The pet on your Lock Screen

So that your pet changes pose while the app is closed, the app registers an identifier of the running Live Activity with our server and with Apple's push service. When the activity ends, the identifier is deleted again.

What there isn't

No ads. No tracking. No analytics tools. No sharing with third parties beyond what is described above. No profiling.

Retention

Photos: only for the duration of the transformation. Purchase data: as long as needed for handling the purchase and for statutory retention periods. Activity identifiers: until the activity ends.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Just send us an email.

Because the account is anonymous, we need the transaction number of your purchase to match it — you will find it in your purchase history at Apple.

You also have the right to lodge a complaint with a data protection authority, for example the Thuringian Commissioner for Data Protection.

This website

The site itself sets no cookies and embeds no external fonts, maps or analytics. When you visit, our host processes technically necessary access data (IP address, time, page requested) for delivery and security, Art. 6 (1) (f) GDPR.