← cosmictea.app Privacy Policy

Aurenia Group

PRIVACY POLICY

Effective: May 17, 2026
Updated: May 17, 2026

1. Who We Are

Cosmic Tea (“we,” “us,” or “our”) is operated by Aurenia Group. We provide an AI-powered astrology relationship advice app available on iOS, Android, and the web.

Aurenia Group

Email: privacy@cosmictea.app

Website: cosmictea.app

For EU/EEA users, Aurenia Group acts as the data controller for your personal data. For Canadian users, Aurenia Group is the organization responsible for personal information under PIPEDA.

2. Who This Policy Applies To

This policy applies to all users of the Cosmic Tea app and website globally. By creating an account, you confirm you are at least 18 years old. We do not knowingly collect personal information from anyone under 18.

3. What Data We Collect

Data You Provide Directly

Data TypeWhy We Collect It
Email addressAccount creation and communication
Date of birthGenerating your astrological profile and compatibility readings
Chat messagesProviding AI-generated relationship advice
Subscription and payment informationProcessing your subscription via Stripe

Data We Collect Automatically

Data TypeWhy We Collect It
App usage and interaction dataApp functionality, security, and improving performance
Device type and OS versionTechnical compatibility
Crash reports and diagnostic dataIdentifying and fixing bugs
IP addressSecurity, fraud prevention, and approximate location

We do not collect precise GPS location, or data from your contacts, camera, or microphone unless you explicitly grant access for a specific feature.

4. How We Use Your Data

  • Providing the service — generating AI-powered astrological compatibility readings and relationship advice based on your birth date and chat messages
  • Account management — creating and maintaining your account, processing subscriptions
  • Communication — transactional emails (receipts, account notices), and if you opt in, marketing communications
  • Safety and security — detecting fraud, abuse, and policy violations
  • Legal compliance — meeting our obligations under applicable law
  • Service improvement — analysing aggregated, anonymised usage patterns (never your chat content)

We do not sell your personal information. We do not use your data for targeted advertising.

5. Legal Bases for Processing (GDPR — EU/EEA | PIPEDA — Canada)

Processing ActivityLegal Basis
Providing the core app service (chat, readings)Contract performance (Art. 6(1)(b))
Email address (account management)Contract performance (Art. 6(1)(b))
Date of birth (astrological readings)Explicit consent (Art. 6(1)(a))
AI processing of chat messagesContract performance (Art. 6(1)(b))
Marketing communicationsConsent (Art. 6(1)(a))
Security and fraud preventionLegitimate interests (Art. 6(1)(f))
Legal complianceLegal obligation (Art. 6(1)(c))

Note on astrological data: We collect your date of birth solely to generate astrological readings. Because these interpretations may reflect upon characteristics that could be considered sensitive, we treat this data with extra care and process it only with your explicit consent. You may withdraw consent at any time, but doing so prevents us from providing personalised readings, which are core to the service.

Canadian Users — PIPEDA & Quebec Law 25: Cosmic Tea processes your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Quebec's Act respecting the protection of personal information in the private sector (Law 25 / Bill 64). We collect only the personal information reasonably necessary to provide the Service, obtain meaningful consent before collecting sensitive data, and maintain appropriate safeguards. Quebec residents have additional rights under Law 25, including the right to data portability and the right to request de-indexation of certain published information.

6. Who We Share Your Data With

We share personal data only with the service providers below, who act on our instructions as data processors. We do not share data with third parties for their own marketing or advertising purposes.

Supabase
Database & Cloud Storage
Shares
Email address, date of birth, chat history, account data
Purpose
Secure storage of your account and conversation data
Location
European Union (Frankfurt, Germany)
Safeguards
Standard Contractual Clauses, encryption at rest and in transit, SOC 2
Policy
supabase.com/privacy
Anthropic
AI Processing — Claude
Shares
Your chat messages and date of birth, sent in real time to generate your readings
Purpose
AI-powered relationship advice and astrological analysis
Location
United States
Important
Anthropic does not use your data to train AI models. Data is automatically deleted within 7 days.
Safeguards
Standard Contractual Clauses, EU-U.S. Data Privacy Framework, SOC 2 Type II, ISO 27001
Policy
anthropic.com/privacy
Stripe
Payment Processing
Shares
Payment card details processed directly by Stripe — we never store your full card number
Purpose
Processing subscription payments
Location
United States and European Union
Safeguards
PCI DSS Level 1 certified, Standard Contractual Clauses
Policy
stripe.com/privacy

7. International Data Transfers

Cosmic Tea is operated globally. Your personal data may be transferred to and processed in countries outside your own, including the United States. Data stored in Supabase is processed within the European Union. Data processed by Anthropic and Stripe is transferred to the United States under Standard Contractual Clauses and the EU-U.S. Data Privacy Framework.

You may request a copy of the applicable transfer safeguards by contacting privacy@cosmictea.app.

8. How Long We Keep Your Data

Data TypeRetention Period
Account information (email, birthday)Duration of your account + 30 days after deletion
Chat history90 days from each conversation, then permanently deleted
AI processing data (Anthropic)Automatically deleted from Anthropic's systems within 7 days
Payment transaction records7 years (tax and financial compliance)
Security and server logs30 days
Anonymised analyticsIndefinitely (no personal identifiers)

When you delete your account, we initiate permanent deletion of all personal data within 30 days, except where legally required (e.g. transaction records).

9. Your Rights

All Users

  • Access — request a copy of the personal data we hold about you
  • Deletion — request deletion of your account and personal data
  • Correction — request correction of inaccurate data
  • Portability (EU/EEA) — receive your data in a structured, machine-readable format
  • Objection (EU/EEA) — object to processing based on legitimate interests
  • Restriction (EU/EEA) — request restriction of processing in certain circumstances
  • Withdraw consent (EU/EEA) — withdraw consent at any time without affecting prior processing
  • Complaint (EU/EEA) — lodge a complaint with your local data protection authority

California Residents (CCPA/CPRA)

  • Know what personal information we collect, use, disclose, and sell
  • Delete your personal information
  • Correct inaccurate personal information
  • Opt out of the sale or sharing of personal information (we do not sell or share your data for advertising)
  • Limit use of sensitive personal information
  • Non-discrimination for exercising your rights

Canadian Residents (PIPEDA / Quebec Law 25)

  • Access the personal information we hold about you
  • Request correction of inaccurate or incomplete personal information
  • Withdraw consent to collection or use (subject to legal or contractual restrictions)
  • Lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca
  • Quebec residents: request data portability and de-indexation of published information under Law 25

To make a rights request, contact privacy@cosmictea.app or submit a request through the app under Privacy & Data. We will respond within 45 days (California), 30 days (EU/EEA), or 30 days (Canada / PIPEDA).

“Do Not Sell or Share My Personal Information”: Cosmic Tea does not sell or share your personal information for cross-context behavioural advertising.

10. Children's Privacy

Cosmic Tea is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we discover that a user is under 18, we will immediately terminate the account and delete all associated data. If you believe a child has registered, contact privacy@cosmictea.app.

11. Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS 1.2+) and at rest (AES-256), access controls, regular security assessments, and contractual data security obligations with all processors. No security measure is perfect — in the event of a data breach, we will notify affected users and relevant authorities as required by applicable law.

12. Changes to This Policy

If we make material changes, we will notify you by push notification or in-app banner, email to your registered address, and by updating the “Last Updated” date at the top of this page. Continued use of Cosmic Tea after changes take effect constitutes acceptance of the revised policy.

13. Contact Us

Aurenia Group

Email: privacy@cosmictea.app

Website: cosmictea.app/privacy

For EU/EEA users, you have the right to contact your local supervisory authority. A list of EU data protection authorities is available at edpb.europa.eu.

This Privacy Policy was last reviewed in accordance with GDPR (EU) 2016/679, CCPA/CPRA (Cal. Civ. Code §1798.100 et seq.), PIPEDA (S.C. 2000, c. 5), Quebec Law 25 (Act respecting the protection of personal information in the private sector), Apple App Store Review Guidelines, and Google Play Developer Policies.

Support Terms of Service Entertainment Disclaimer Delete Your Data ← Back to Cosmic Tea