COSMIQ is an educational space app for children and families. This Privacy Policy explains how COSMIQ handles information in the app and its supporting services. Parents and guardians can contact us at support@cosmiq-explorer.com about privacy or their child's information.
The app has no advertisements or advertising tracking. An explorer name, age and preferences are stored locally. Optional parent sign-in enables online progress recovery and synchronisation. Purchases, online content and app updates also involve the services described below, even without a COSMIQ sign-in.
1. Information On Your Device
- Explorer name and age. The name personalises the app; use a nickname rather than a full name. Age helps select suitable activities and quiz difficulty. These profile fields are not included in progress uploads.
- Preferences and local activity. The app stores appearance, sound and reminder settings, learning progress, timed-preview records, and parental-gate attempt records. Recent online content may be cached for faster loading and offline use.
- Sign-in session. When a parent signs in, the app keeps session credentials in operating-system protected storage. The provider's email address, and the name if you chose to share it, may be displayed to identify the signed-in account. Authentication information is also processed online as described in section 2.
2. Optional Parent Accounts And Progress
The free experience does not require sign-in. If a parent chooses Apple or Google sign-in, our service verifies authentication credentials with that provider. Credentials can contain an account identifier, an email address and the name you chose to share. If you chose Apple's Hide My Email, the email address is a relay address made by Apple and we never receive your real address. We do not receive your Apple or Google password. Email is not a field in our progress database.
Our service stores an account-linked identifier and learning records: Star Points, badges, completed activities, quiz and game results, medals, weekly totals and activity dates used for streaks and progress recovery. These records are associated with the account; they are not anonymous simply because they do not contain a name.
A randomly generated installation identifier and last-seen timestamps help manage signed-in devices and synchronisation. Up to 4 devices can be signed in to one COSMIQ account at a time. Signing in on a further device signs out the device that synchronised least recently (measured to the day); any progress that device had not yet saved online is kept privately on that device and is merged back when the same account signs in there again. A device that has not synchronised for about 30 days can also give up its place to a new device. A replaced device is marked so that it cannot keep synchronising until it signs in again. Device records, including the record that a device was signed out, are removed by the scheduled cleanup once the account's progress record has been purged (section 8).
If a parent links sign-in methods, we store a mapping so both methods reach the same progress. We use these records to provide the account and learning features, not for advertising.
For protected COSMIQ Pro downloads we keep, for each signed-in device, a fingerprint of a key that stays in the device's secure hardware; on iPhone and iPad also an Apple App Attest key identifier, its public key and a usage counter; short-lived verification challenges; and a download permission that expires after 24 hours. An expired permission stops working but its record stays until the record itself is removed. The records are removed when that device's sign-in is replaced or removed, when the account is deleted, and when the account's saved progress is removed by the scheduled cleanup (section 8).
3. Location And Motion
Stargazing features can request foreground location permission to calculate the sky above the device. The app requests approximate location on Android and defaults to reduced accuracy on iPhone and iPad. Accuracy can depend on platform and device settings; we do not promise that every reading represents only a broad area.
Stargazing coordinates are used for calculations on the device and are not included in our progress uploads or content requests. COSMIQ does not request background location. Compass and motion readings are processed on the device to move the sky map and are not uploaded by the app.
You can deny or revoke location permission in device settings. Other app features remain available. Some stargazing screens use a labelled default location; the sky map explains when it cannot obtain a location. Its pointing and position estimates are educational aids, not navigation instruments.
4. Reminders
With notification permission, COSMIQ schedules reminders on the device. The default schedule is 6 PM on weekdays and 10 AM on weekends in local time. A parent can change or disable reminders in Profile, or turn off notification permission in device settings. Delivery depends on the device's notification and power settings.
These local reminders do not require an account or an upload when they appear. Their schedule is based on the reminder settings, not monitoring a child's behaviour to choose a delivery time.
5. Online Services And Recipients
We do not sell or rent personal information or use it for targeted advertising. The app uses the following services for its features:
- Apple and Google sign-in. These services process authentication requests when a parent signs in or disconnects access. Their own account and privacy settings also apply.
- App Store, Google Play and RevenueCat. The stores handle payments; COSMIQ does not receive card details. RevenueCat processes purchase and subscription records, a purchase-user identifier, and technical app/device information to check access, restore purchases and manage entitlements. A parent sign-in can link that purchase identifier to the COSMIQ account. We do not send RevenueCat the explorer name, age, learning progress or stargazing coordinates. Before allowing protected downloads, our service asks RevenueCat whether the signed-in account has COSMIQ Pro.
- Google Play Integrity and Apple App Attest. For a signed-in family with COSMIQ Pro, the app asks Google (Android) or Apple (iPhone and iPad) to confirm that it is the genuine COSMIQ app on a genuine device. This happens when protected lessons or stories are first downloaded and again in the background, about twice a day, while the download permission is renewed. Google or Apple process information about the app and the device for that check under their own terms. Our service receives and checks their signed verification response (for example whether the app is recognised and the device passes its integrity checks), not the device's contents. It is used only to protect paid content, never for advertising, analytics or tracking. A failed check only pauses new protected downloads; it never removes a purchase or signs anyone out.
- Cloudflare. Our hosting, account synchronisation, content proxy and security services process requests and the account data described above. Network requests expose an IP address and technical request information. Our service uses IP addresses for rate limiting and records operational events and errors.
- Expo app updates. Update checks and downloads send technical information such as platform and app/runtime version to the update service. Network delivery also exposes the connection's IP address.
- Online space content and image hosts. Requests retrieve launch listings, pictures and astronomy information. Some images load directly from their host, which receives an IP address and request information. Birthday Sky sends the selected calendar date through our content service to the picture provider. It may be a birthday if you choose one; any supported date can be used. That date is not a profile field in progress sync.
Zyx narration is prerecorded. Most of it is bundled with the app; for COSMIQ Pro, some lessons, stories and narration are downloaded encrypted from our service and kept on the device so they work offline. COSMIQ does not record a child's voice or send their speech to a voice-generation service.
Online services may process information in countries outside your own. Their privacy terms and retention practices also apply to their processing. See Apple's privacy policy, Google's privacy policy, RevenueCat's privacy policy, Cloudflare's privacy policy and Expo's privacy policy.
External links, such as launch videos and subscription management, are presented through parental controls. An external site's privacy practices govern what happens on that site. Information you voluntarily email to support, including your email address and message, is used to handle your request. Please avoid sending unnecessary information about a child.
6. Advertising And Permissions
COSMIQ does not include advertising SDKs, request an advertising identifier, or track users across apps and websites for advertising. It does not include a separate third-party behavioural analytics SDK. This does not mean that the online services above receive no technical or account information.
The app does not request camera, microphone, contacts or photo-library access. Location and notification permissions can be managed in device settings.
7. Children's Privacy And Parent Controls
The learning experience is designed for children. Parent sign-in, purchases and account controls are intended for a parent or guardian. Parental gates help restrict access to these actions; they are not proof of identity or a substitute for legally required parental consent.
Parents can review progress in the app, change local profile information, disable optional permissions, and request access to or deletion of account information. Contact us if you believe a child has supplied personal information inappropriately. We will investigate and address the request.
8. Retention
Local information remains until cleared through the app or device controls. Uninstalling does not delete online account records. On iPhone and iPad, some secure sign-in information can survive an uninstall; sign out or use account deletion before removing the app.
Saved progress is kept while the account is in use. The progress service is configured to remove it once none of the account's sign-ins or devices has been used for about two years and it has not been updated in that time. A successful progress deletion clears the saved learning payload and leaves an account-linked deletion marker so other devices can recognise the deletion. The scheduled cleanup removes empty progress deletion records older than 90 days. The time of the last reset is also kept with the sign-in mapping, and with any new saved progress, so a returning device does not restore old scores. This timestamp contains no learning history and follows the retention period of the record that holds it. Linked sign-in mappings have a separate cleanup rule: they are removed once none of the account's sign-ins has been used for about two years. Deletion does not immediately remove every identifier.
Store transaction records and subscription-service records have separate retention requirements and are not erased by a local reset or sign-out. Hosting logs, service backups and support correspondence are separate from the learning-progress database. Backups of the learning-progress database are kept for 30 days and then deleted, so progress erased from the service is gone from its backups within 30 days. Contact us about access or deletion of these records; the in-app controls do not promise immediate erasure from every provider or backup.
9. How To Delete Your Data
- Reset learning progress, under Manage data, clears learning records. When signed in, a successful online reset applies to the account and other devices when they next sync. It keeps the sign-in, explorer name, age and purchases.
- Sign Out, under Account, attempts to save pending progress before clearing account progress and the session from this device. Saved online progress remains for a later sign-in. Explorer name, age and appearance remain locally. Follow any error message if saving cannot complete.
- Delete COSMIQ account, under Manage data, clears saved learning progress and this device's profile and signs out. It also signs the account out on every other device, removes its protected-download registrations, and requests revocation of the sign-in connection. Follow any error or retry message if an online step fails. The retention exceptions in section 8 apply.
Other devices need a connection to receive changes. These controls do not delete your Apple or Google account. Signing out, resetting progress or deleting a COSMIQ account does not cancel a subscription. Cancel in the store where it was purchased. Lifetime purchases have no recurring charge.
To request deletion without the app, visit our account deletion page or email support@cosmiq-explorer.com. We may need to verify account ownership before disclosing or deleting information.
10. Security
The app uses HTTPS for service requests, protected device storage for native sign-in credentials, and authentication checks for account progress. Access controls and request limits help protect our services. No system can guarantee absolute security. Protect your device and parent sign-in credentials, especially on a shared device.
11. Your Choices And Rights
Depending on where you live, you may have rights to access, correct, delete or receive a copy of personal information, restrict or object to processing, withdraw consent where processing relies on it, and complain to a privacy regulator. Contact support@cosmiq-explorer.com to exercise these rights or raise a concern. We will assess requests under applicable law and explain any information we must retain.
You can use the free experience without an account, stop account syncing by signing out, and change optional permissions in device settings. Signing out alone does not delete information already saved online.
12. Changes To This Policy
We update this policy when our practices change. The revision date appears below. Material changes will be explained through appropriate notice, and consent will be requested where required. The policy is available in Profile and on our website.
Last updated: October 1, 2026