Privacy Policy

Your privacy matters. This policy explains what we collect today, how we use it, and your choices.Cosma provides ingredient information and organization—it is not medical advice.

What we collect now

• Account details (e.g., email) if you create an account or join the waitlist.
• Product interactions (e.g., scans, saved items, collections) to provide the core service.
• Basic usage events (e.g., feature usage counts, errors) to improve reliability.
• Technical data sent by your browser/device (e.g., IP address, user agent) for security and rate-limiting.

What we are not collecting right now

• Medical records.
• Cross‑app or cross‑site tracking.
• Advertising identifiers.

Optional features

Optional features (such as syncing across devices) require an account. We will clearly disclose any new data types before collecting them.

How we use your data

• Provide the service (e.g., scans, ingredient context, saved products).
• Sync your data across sessions if you opt in.
• Improve reliability and safety (e.g., rate-limit abuse, measure latency/errors).
• Email you about access, updates, or beta programs (you can unsubscribe anytime).

Analytics & cookies

We use minimal analytics focused on counts and performance. We avoid tracking raw inputs or sensitive content. Cookies/local storage may be used to keep you signed in and prevent spam (e.g., basic rate-limit timestamps).

Data sharing

We do not sell personal data. We do not run ads. We do not track you across other apps or websites.

Data security

• Encryption in transit (HTTPS) and at rest for stored data.
• Access controls limited to authorized personnel for support/security.
• Per-user row-level security for any signed-in data we store.

Your choices & rights

• Request a copy or deletion of your data by emailing hello@cosma.pro.
• Opt out of non-essential emails anytime via unsubscribe links.
• Revoke any optional permissions (e.g., location) in your device settings.

Children’s privacy

Cosma is not directed to children under 13 (or the minimum age in your country). If you believe a child’s data was provided to us, contact us and we’ll delete it.

Changes to this policy

We may update this policy as we launch new features. We’ll change the date below and, when appropriate, notify you.

Last updated: January 31, 2026

Contact: hello@cosma.pro