DailyCosmos
Privacy policy
Effective 5 October 2026
DailyCosmos is an app for running family life: care for the people you look after, money, the home, the kitchen and trips. This page explains what the app collects, why, who handles it, and how you can take it out or delete it. DailyCosmos is published by CosmiXI (developer: Renuka Devi P), Kakinada, Andhra Pradesh, India. "We" and "us" mean CosmiXI.
The short version. What you write in DailyCosmos is stored on your phone. When it is backed up or shared, it is encrypted on your phone first, and we hold no key that can open it. We can see who you are, who you share with and when something changed, not your amounts, notes, routines, names or documents. If you lose every way back into your account, nobody can recover your data, including us.
1. What you put in the app
Spends, bills, daily routines, health readings, notes, meal plans, trips, people's names and anything else you type is kept in an encrypted database on your phone.
If you sign in, this is also backed up end-to-end encrypted, so that losing your phone does not lose it. This includes health information such as routines and readings: it leaves your phone only as ciphertext, and our server cannot read it. Things you share into an orbit (a family, a home, a care circle or a group) are encrypted so that only the members of that orbit can open them.
Photos you attach (for example a bill or a warranty card) stay on your phone and are not uploaded.
Steps come from Android Health Connect, or from your phone's own step sensor where Health Connect is not available. We read your step count only while the app is open: never in the background, and never on a schedule. It is stored on your phone and, if you turn on Share with my orbit for someone you look after, the day's total step count only is shared with them, encrypted the same way as everything else you share.
2. What we can see
To run sign-in, sharing, backup and reminders, our server holds:
- Your account: email address, the display name you choose, and your sign-in method (an emailed code, or Google).
- Sharing: which orbits you belong to and your role in them, but not the orbit's name or what is in it.
- Sync metadata: that an encrypted record changed and when, and when a reminder is due, so the right phones can be woken.
- Your mobile number, if you add one: only a one-way hash of it, never the digits. You can turn off Let people find me by this number at any time.
- Device push tokens, so notifications reach your phone.
- Consent records: what you agreed to and when, and any withdrawal.
Notifications carry no content. A push only tells your phone to look; your phone writes the words from data it has already decrypted.
3. Permissions the app asks for
| Permission | Why |
|---|---|
| Notifications, exact alarms, run at start-up | Routine, bill and other reminders at the time you set, including after a restart. |
| Contacts | Only when you choose to add people from your contacts. Their numbers are hashed on your phone and checked to show who already uses DailyCosmos. Your contact list is not uploaded or stored. |
| Microphone | Only while you hold the button to record a short (1.5 second) sound that tells your family a nudge is from you. Nothing is recorded at any other time. |
| Fingerprint / face unlock | The optional app lock. Biometric data never leaves your phone's own system; we never see it. |
Physical activity, and Health Connect's step count
(android.permission.health.READ_STEPS) |
To show your steps for the day and the week. Read only while the app is open; nothing reads it in the background or while the app is closed. No other kind of Health Connect record is asked for. |
Approximate location (ACCESS_COARSE_LOCATION) |
Only when you tap Use my location while planning a trip, to say which town you are starting from. Your phone turns the position into the nearest town and keeps only the town's name; the position itself is never stored, backed up or sent to us. Never asked at start-up and never used in the background. Precise location is not asked for. The town list is from GeoNames (CC BY 4.0). |
| Internet and network state | Backup, sharing and sign-in. |
The camera and photos are used only through Android's own picker, when you choose to attach a picture.
4. Service providers
- Supabase: our server and sign-in, hosted in Mumbai, India. It holds the encrypted records and the metadata in section 2.
- Google Firebase: push notifications (Cloud Messaging), crash reports (Crashlytics), basic usage counts (Analytics), remote settings and app integrity checks. These may process data outside India.
- Google Sign-In: if you choose to sign in with Google.
Crash reports contain technical details of the error and your device model. Before anything is sent, the app removes values you typed. Usage analytics are limited to a few events (for example, the app was opened or an export was made). They never name the Care, Health or Rest areas, and never include your content. We do not use advertising, we do not sell data, and the app does not access your advertising ID.
5. Carpool
Where carpool is available, a lift you choose to publish (the area you typed, the time and your display name) is visible to other signed-in users so they can find it. This is the one place your content is not end-to-end encrypted, and the app says so before you publish. It never includes your exact location. Your phone number is shared only with a rider you accept.
6. Feedback
If you send feedback from our website or the app, we keep what you wrote and the app version so we can act on it.
7. Children
DailyCosmos is meant for adults. A parent or guardian may add a profile for a child they look after; that profile has no login, and the app records the parent's consent before it is created. We do not knowingly let anyone under 18 create an account.
8. Keeping, exporting and deleting
- Export: the account screen exports everything as a zip of spreadsheets (CSV). That file is not encrypted, so keep it safe.
- Delete your account: in the app (account → delete), or at dailycosmos.in/delete-account. Deleting destroys your encryption keys first, which makes every remaining copy permanently unreadable, then removes your account and records from our server.
- Withdraw consent: you can withdraw consent to back up health data in the app; doing so deletes that backup from our server.
- We keep your data while your account exists. Feedback is kept until it has been dealt with.
9. Security
The database on your phone is encrypted, its key is held in the Android Keystore, and everything that leaves your phone is end-to-end encrypted. Because we hold no key that can decrypt your data, if you lose your phone and every recovery path (your backup key and Google's device backup), your data cannot be recovered by anyone, including us. Please keep your backup key somewhere safe.
10. Your rights
Under India's Digital Personal Data Protection Act, 2023 and other applicable laws, you can ask to access, correct or erase your personal data, withdraw consent, and raise a grievance. Most of this you can do yourself in the app. For anything else, write to us at the address below and we will reply within 30 days.
11. Changes
If this policy changes, we will update the date above and, for any important change, tell you in the app before it takes effect.
12. Contact
Privacy questions and grievances: admin@dailycosmos.in
CosmiXI (Renuka Devi P), Kakinada, Andhra Pradesh, India.