Privacy Policy

Last updated: July 2, 2026

This Privacy Policy explains how [LEGAL ENTITY / LLC NAME] ("we," "us") collects, uses, and protects your information when you use Cosmic Intentions (the "Service"). By using the Service, you agree to this Policy.

1. Information We Collect

Account: email address and authentication details.
Your Content: the goals, intentions, affirmations, notes, habits, and other inputs you enter.
Optional tracker data: if you use the daily habit tracker, the items you tick — which may include health-adjacent entries you choose to add. Provide this only if you wish; treat it as personal.
Usage & device data: basic analytics, device/browser type, and log data to operate and improve the Service.
Payment data: handled by our payment processor. We do not store your full card details.

🔒 Health-adjacent data. Any health-related items you track are stored to provide the Service to you and are never sold. Depending on where you live (e.g., Washington's My Health My Data Act, GDPR, CCPA/CPRA), such data may have special protections. You can delete it or your whole account at any time (see "Your Rights").

2. How We Use Information

To provide, personalize, and operate the Service (including generating your affirmations, roadmaps, and audio).
To process payments and manage subscriptions.
To communicate with you (service messages, and — if you opt in — product updates).
To secure, debug, and improve the Service.

We do not sell your personal information.

3. Third-Party Processors

We share the minimum data necessary with trusted providers to run the Service:

Supabase — authentication, database, and storage.
Netlify — hosting and serverless functions.
OpenAI — generating text (affirmations, roadmaps, recaps) from your inputs.
ElevenLabs — generating your personalized audio.
[Stripe / Paddle / Lemon Squeezy] — payment processing.
[Email provider, e.g. Kit] — waitlist and email communications.

These providers process data under their own terms and privacy policies.

4. Cookies & Analytics

We use essential cookies to keep you logged in and may use privacy-respecting analytics to understand usage. You can control cookies through your browser settings. [If/when advertising or non-essential tracking is added, a consent banner will be provided.]

5. Data Retention

We keep your information while your account is active and as needed to provide the Service. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where retention is required by law.

6. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights — including deleting your account and data — email privacy@cosmicintentions.com. GDPR (EU/UK) and CCPA/CPRA (California) rights are honored where applicable.

7. Security

We use industry-standard measures (encrypted connections, access controls, row-level database security) to protect your data. No method is 100% secure, but we work to safeguard your information.

8. International Users

The Service is operated from the United States; by using it you consent to processing your data in the U.S. and other countries where our providers operate.

9. Children

The Service is not intended for children under 16, and we do not knowingly collect their data.

10. Changes

We may update this Policy; material changes will be posted here with a new "Last updated" date.

11. Contact

privacy@cosmicintentions.com