COSMIQ is an educational space app for ages 4 and up, including children, families and adult learners. This Privacy Policy explains how COSMIQ handles information in the app and its supporting services. You can contact us at support@cosmiq-explorer.com or by phone on +61 494 727 534 about privacy or account information. Our postal address is PO Box 30, Wentworthville NSW 2145, Australia.
The app has no advertisements or advertising tracking. An explorer name, age and preferences are stored locally. Optional sign-in enables online progress recovery and synchronisation, and is needed to buy or restore COSMIQ Pro. Online content and app updates also involve the services described below, even without a COSMIQ sign-in.
1. Information On Your Device
- Explorer name and age. The name personalises the app; use a nickname rather than a full name. Age helps select suitable activities and quiz difficulty. These profile fields are not included in progress uploads.
- Preferences and local activity. The app stores appearance, sound and reminder settings, learning progress and timed-preview records. Versions with grown-up questions also store attempt records locally; those records may remain after the questions are disabled, but no new attempts are recorded while they are disabled. Recent online content may be cached for faster loading and offline use.
- Sign-in session. When you sign in, the app keeps session credentials in operating-system protected storage. Your email address, and the name if you chose to share it, are kept only in the app on this device, to show which account is signed in. They are not stored in our online database. Authentication information is also processed online as described in section 2.
2. Optional Accounts And Progress
The free experience does not require sign-in. If you choose Apple or Google sign-in, our service verifies authentication credentials with that provider. Credentials can contain an account identifier, an email address and the name you chose to share. Our service reads them only to confirm the sign-in. We do not store your email address or name in our database or logs; they stay in the app on your device. If you chose Apple's Hide My Email, the email address is a relay address made by Apple and we never receive your real address. We do not receive your Apple or Google password.
Our service stores an account-linked identifier and learning records: Star Points, badges, completed activities, quiz and game results, medals, weekly totals and activity dates used for streaks and progress recovery. These records are associated with the account; they are not anonymous simply because they do not contain a name.
A randomly generated installation identifier and last-seen timestamps help manage signed-in devices and synchronisation. Up to 4 devices can be signed in to one COSMIQ account at a time. Signing in on a further device signs out the device that synchronised least recently (measured to the day); any progress that device had not yet saved online is kept privately on that device and is merged back when the same account signs in there again. A device that has not synchronised for about 30 days can also give up its place to a new device. A replaced device is marked so that it cannot keep synchronising until it signs in again. Device records, including the record that a device was signed out, are removed by the scheduled cleanup once the account's progress record has been purged (section 8).
If you link sign-in methods, we store a mapping so both methods reach the same progress. We use these records to provide the account and learning features, not for advertising.
When a purchase changes, for example a purchase, renewal, cancellation or refund, RevenueCat sends our service a copy of that event. We keep its store order number, product, price and currency, country, store, whether it was a test or live purchase, its dates and the purchase identifier, with the rest of the event as RevenueCat sends it except any customer attributes. We use these records only to answer support and refund questions about purchases, never for advertising or analytics.
When protected COSMIQ Pro downloads are in use, we keep, for each signed-in device, a fingerprint of a key that stays in the device's secure hardware; on iPhone and iPad also an Apple App Attest key identifier, its public key and a usage counter; short-lived verification challenges; and a download permission that expires after 24 hours. An expired permission stops working but its record stays until the record itself is removed. The records are removed when that device's sign-in is replaced or removed, when the account is deleted, and when the account's saved progress is removed by the scheduled cleanup (section 8).
3. Location And Motion
Stargazing features can request foreground location permission to calculate the sky above the device. The app requests approximate location on Android and defaults to reduced accuracy on iPhone and iPad. Accuracy can depend on platform and device settings; we do not promise that every reading represents only a broad area.
Stargazing coordinates are used for calculations on the device and are not included in our progress uploads or content requests. COSMIQ does not request background location. Compass and motion readings are processed on the device to move the sky map and are not uploaded by the app.
You can deny or revoke location permission in device settings. Other app features remain available. Some stargazing screens use a labelled default location; the sky map explains when it cannot obtain a location. Its pointing and position estimates are educational aids, not navigation instruments.
4. Reminders
With notification permission, COSMIQ schedules ordinary space reminders on the device. The default schedule is 6 PM on weekdays and 10 AM on weekends in local time. You can change or disable reminders in Settings → Gentle Reminders, or turn off notification permission in device settings. Delivery depends on the device's notification and power settings.
These local reminders do not require an account or an upload when they appear. Their schedule is based on the reminder settings, not monitoring a child's behaviour to choose a delivery time.
You can also turn on a Daily COSMIQ Pro reminder in Settings → Gentle Reminders. It is off by default. It is scheduled on the device like the space reminders, 30 minutes from the space reminder (6:30 PM when that is 7 PM), and only while the account on the device does not have COSMIQ Pro. Nothing extra is sent to our service, and no push token is collected. Tapping it opens COSMIQ, which checks the subscription again before showing what COSMIQ Pro includes.
5. Online Services And Recipients
We do not sell or rent personal information or use it for targeted advertising. The app uses the following services for its features:
- Apple and Google sign-in. These services process authentication requests when you sign in or disconnect access. Their own account and privacy settings also apply.
- App Store, Google Play and RevenueCat. The stores handle payments; COSMIQ does not receive card details. RevenueCat processes purchase and subscription records, a purchase-user identifier, and technical app/device information to check access, restore purchases and manage entitlements. Signing in can link that purchase identifier to the COSMIQ account. We do not send RevenueCat the explorer name, age, learning progress or stargazing coordinates. Before allowing protected downloads, our service asks RevenueCat whether the signed-in account has COSMIQ Pro. RevenueCat also sends our service a copy of each purchase event (section 2).
- Google Play Integrity and Apple App Attest. When protected COSMIQ Pro downloads are in use and a signed-in family has COSMIQ Pro, the app asks Google (Android) or Apple (iPhone and iPad) to confirm that it is the genuine COSMIQ app on a genuine device. This happens when protected lessons or stories are first downloaded and again in the background, about twice a day, while the download permission is renewed. Google or Apple process information about the app and the device for that check under their own terms. Our service receives and checks their signed verification response (for example whether the app is recognised and the device passes its integrity checks), not the device's contents. It is used only to protect paid content, never for advertising, analytics or tracking. A failed check only pauses new protected downloads; it never removes a purchase or signs anyone out.
- Cloudflare. Our hosting, account synchronisation, content proxy and security services process requests and the account data described above. Network requests expose an IP address and technical request information. Our service uses IP addresses for rate limiting and records operational events and errors.
- Expo app updates. Update checks and downloads send technical information such as platform and app/runtime version, and a random identifier created for this installation, to the update service. Network delivery also exposes the connection's IP address.
- Online space content and image hosts. Requests retrieve launch listings, pictures and astronomy information. Some images load directly from their host, which receives an IP address and request information. Birthday Sky sends the selected calendar date through our content service to the picture provider. It may be a birthday if you choose one; any supported date can be used. That date is not a profile field in progress sync.
Zyx narration is prerecorded and bundled with the app. When protected COSMIQ Pro downloads are in use, some lessons, stories and narration are instead downloaded encrypted from our service and kept on the device so they work offline. COSMIQ does not record your voice or send your speech to a voice-generation service.
Online services may process information in countries outside your own. Their privacy terms and retention practices also apply to their processing. See Apple's privacy policy, Google's privacy policy, RevenueCat's privacy policy, Cloudflare's privacy policy and Expo's privacy policy.
External links, such as launch videos and subscription management, open when selected without a grown-up question. An external site's privacy practices govern what happens on that site. Information you voluntarily email to support, including your email address and message, is used to handle your request. Please avoid sending unnecessary information about a child.
6. Advertising And Permissions
COSMIQ does not include advertising SDKs, request an advertising identifier, or track users across apps and websites for advertising. It does not include a separate third-party behavioural analytics SDK. This does not mean that the online services above receive no technical or account information.
The app does not request camera, microphone, contacts or photo-library access. Location and notification permissions can be managed in device settings.
7. Children's Privacy
When a child uses COSMIQ, sign-in, purchases and account controls are intended for a parent or guardian. The app currently does not require a grown-up question to access these controls or external links, and access to Settings does not verify age, identity or parental consent. Purchases use the app store's purchase flow. Account deletion and reset actions require confirmation. These controls are not a substitute for any legally required parental consent.
Parents and guardians can review a child's progress in the app (Profile → Your progress), change their local profile information, disable optional permissions, and request access to or deletion of their child's account information. Contact us if you believe a child has supplied personal information inappropriately. We will investigate and address the request.
8. Retention
Local information remains until cleared through the app or device controls. Uninstalling does not delete online account records. On iPhone and iPad, some secure sign-in information can survive an uninstall; sign out or use account deletion before removing the app.
Saved progress is kept while the account is in use. The progress service is configured to remove it once none of the account's sign-ins or devices has been used for about two years and it has not been updated in that time. A successful reset or account deletion clears the saved learning payload and leaves an account-linked deletion marker so other devices can recognise the deletion. The scheduled cleanup removes empty progress deletion records older than 90 days. Inactivity cleanup also records a deletion time before removing progress, so a returning device does not restore old scores.
We retain the minimum mapping between hashed sign-in identifiers and the account's purchase identifier, including linked Apple and Google sign-ins, so a purchase can still be found after a long absence or account deletion. This mapping is not removed after two years of inactivity. It includes shared account keys and activity, reset and session-security timestamps needed to keep linked accounts working, prevent deleted scores from returning and enforce sign-out. It does not contain learning progress, explorer names or ages. Resetting progress or using Delete COSMIQ account does not erase this purchase-recovery mapping. Contact us to request access to or deletion of retained account information.
Copies of purchase events (section 2) are kept for two years from when our service receives them and are then removed. Resetting progress or deleting a COSMIQ account does not remove them sooner; contact us to request their deletion.
Store transaction records and subscription-service records have separate retention requirements and are not erased by a local reset or sign-out. Hosting logs, service backups and support correspondence are separate from the learning-progress database. Backups of the learning-progress database are kept for 30 days and then deleted, so progress erased from the service is gone from its backups within 30 days. Contact us about access or deletion of these records; the in-app controls do not promise immediate erasure from every provider or backup.
9. How To Delete Your Data
- Delete guest profile, under Manage data when signed out, removes your explorer name, age and learning progress from this device and returns to setup. No sign-in or internet connection is needed. Device preferences and purchases are kept. It does not delete a previously signed-in account or its cloud data, or cancel a store subscription.
- Reset learning progress, under Manage data, clears learning records. When signed in, a successful online reset applies to the account and other devices when they next sync. It keeps the sign-in, explorer name, age and purchases.
- Sign Out, under Account, attempts to save pending progress before clearing account progress and the session from this device. Saved online progress remains for a later sign-in. Explorer name, age and appearance remain locally. Follow any error message if saving cannot complete.
- Delete COSMIQ account, under Manage data, clears saved learning progress and this device's profile and signs out. It also signs the account out on every other device when that device next connects, removes its protected-download registrations, and requests revocation of the sign-in connection. Follow any error or retry message if an online step fails. The retention exceptions in section 8 apply.
Other devices need a connection to receive changes. These controls do not delete your Apple or Google account. Signing out, resetting progress or deleting a COSMIQ account does not cancel a subscription. Cancel in the store where it was purchased. Lifetime purchases have no recurring charge.
To request deletion without the app, visit our account deletion page or email support@cosmiq-explorer.com. We may need to verify account ownership before disclosing or deleting information.
10. Security
The app uses HTTPS for service requests, protected device storage for native sign-in credentials, and authentication checks for account progress. Access controls and request limits help protect our services. No system can guarantee absolute security. Protect your device and sign-in credentials, especially on a shared device.
11. Your Choices And Rights
Depending on where you live, you may have rights to access, correct, delete or receive a copy of personal information, restrict or object to processing, withdraw consent where processing relies on it, and complain to a privacy regulator. Contact support@cosmiq-explorer.com to exercise these rights or raise a concern. We will assess requests under applicable law and explain any information we must retain.
You can use the free experience without an account, stop account syncing by signing out, and change optional permissions in device settings. Signing out alone does not delete information already saved online.
12. Changes To This Policy
We update this policy when our practices change. The revision date appears below. Material changes will be explained through appropriate notice, and consent will be requested where required. The policy is available in the app under Settings → Account and on our website.
Last updated: November 9, 2026