Privacy Policy

Effective 6 September 2026 · Last updated 29 September 2026 · Supersedes the version of 24 August 2026

This policy describes exactly what Cosmic Match stores about you. It lists real fields, not categories — if something is not named below, the app does not collect it.

Who we are

Cosmic Match is a dating app that matches people by astrological compatibility and by how well their personalities fit. It is a project of Good Life, the registered legal entity behind it. For any privacy question, or to exercise any right described here, write to care@cosmicmatch.in

What we collect

Your account

Your profile

Photo moderation

Face verification (only if you choose to verify)

Matching and conversations

Your Aura

Cosmic Match uses an AI model to get to know you, so that it can choose who you are introduced to. The model reads what you write and answers a fixed set of questions about it: the topics you bring up, your sense of humour, what you value, how you open up to people, and traits such as how curious or how organised you come across. The answers add up to a private Aura of you, which gets sharper the more you write. Our own software then compares Auras to find the people who fit you best. To build an Aura the model describes one person at a time, and it is never asked who should meet whom. Your answers to This or That, described below, also count towards your Aura, but our own software reads them; they are not sent to the model.

This applies to every account. It is part of how Cosmic Match works.

Where the text goes. To reach the model, the text is sent through one of two services, OpenRouter or the Vercel AI Gateway. Both are run by companies in the United States. They pass it to the company that runs the model. We use more than one model and change them from time to time, so this policy does not name them. Some of the companies that run these models keep a log of what they are sent and may use that text to train their AI. Whichever company runs the model keeps and uses the text under its own terms, not ours, and we cannot delete it from their systems. OpenRouter says it does not use the text to train AI itself. We do not send the model your photos, or the phone number, email address, birth details or location stored with your account.

Your Aura is private. Other people never see it. When the app shows you or a match a short line based on it, the line comes from a fixed set we have written and approved in advance, never from text the AI writes about you on the spot. The shared note described next is different: the AI does write it, from your chat, and only the two of you see it.

Aura noticed something: the note on you two

Once a chat has 20 or more messages, with at least 8 from each of you, the AI reads the chat and writes the two of you one short note. It has two lines: why you two fit, pointing to things you said in the chat, and something good about the conversation. There is one note per match at most, and no notification comes with it. Only the two people in that match ever see it.

The chat text, from both of you, goes to the AI model the same way as for your Aura — see Where the text goes above. Before the note is shown, our own software checks it, and a second AI model reads it as a further check. If it fails any check, there is no note for that match.

You can turn Aura noticed something off under Chat options, on the You tab. That hides the note for you. It does not stop the note being written: if the chat passes the bar, the AI still reads it and writes the note, and the other person still sees it unless they have turned it off too.

This or That

This or That is an optional game, offered while you sign up and again on the You tab: two choices at a time, and you tap the one that is more you, or skip.

Your answers are not sent to the AI model. They are not shown on your profile, and the app does not show them to anyone else.

Invites

Location

Payments (only if you buy Pro or Elite)

Pro and Elite are bought through Google Play on Android and the App Store on iPhone, not from us. The store takes the payment on its own screen. We never see or store your card, UPI ID, bank details or any other payment instrument — none of it reaches Cosmic Match, and we do not keep a payment instrument on file. We are not told your name or email by the store either. What we receive is a reference for the purchase, which we check with the store before granting anything.

Because the store handles the billing, cancelling, changing or getting a refund on a subscription is done in Google Play or the App Store, not in Cosmic Match. Your subscription stays active until the date you have paid up to, even after you cancel.

Device

How you found us

The last question in signing up asks how you heard about Cosmic Match — Instagram, a friend, a creator, an ad, or something else — with an optional line of text beside two of those answers. It is optional and you can skip it; if you answer, we keep the answer, and it is used only to work out where to tell more people about the app. It is never shown on your profile and nobody else ever sees it.

On Android, when you install from the Play Store we also read the install referrer Google Play provides, which tells us which of our own links led to the install. It carries only our own campaign labels — no advertising identifier, no device fingerprint, and nothing that identifies you. There is no equivalent on iPhone and we do not attempt one.

The city waitlist

Cosmic Match does not open everywhere at once, so the waitlist on this website lets you ask to be told when it opens in your city. It is on the website, not in the app, and it is not an account — you can join it without ever installing anything.

Joining counts straight away, and there is nothing to confirm. We store your email address and your city the moment you press the button. There is no confirmation email and no link to click.

What we send: one email, when Cosmic Match opens in your city. That is the only message this list ever produces — no newsletter, no offers, nothing else — and it is separate from the news and offers described below, which only an account can be signed up for. It carries a working unsubscribe link and the one-click unsubscribe button your mail app shows; using it deletes your address straight away and stops anything already queued for you. It travels through Amazon Web Services in the United States, the same route every other email described here takes — see the table below.

How long it is kept, as an automatic sweep rather than a promise to remember. Your address is deleted 24 months after you join, or 30 days after your city opens, whichever comes first — and immediately if you unsubscribe. What is left afterwards is a row with no address in it, kept only so that nobody else's place in the queue moves. Your city and your sign are not identifiers on their own and stay as counts.

What we do not collect

• No card numbers, UPI IDs or bank details. Payment instruments never reach us.
• No video from the verification check. See above — nothing is stored, not briefly.
• No background location. Your position is read only while the app is open, and only if you allow it. We keep your latest position, never a trail of previous ones.
• No location history, and no inference about places you visit.
• No calendar data. If you tap Add to calendar on a date you both agreed, the app opens your phone's own new-event sheet with the details filled in and you decide whether to save it. On iOS it asks only for permission to add events and it never reads your calendar; on Android it uses the system sheet with no calendar permission at all. Nothing about your calendar reaches us.
• No call data, and no contact names, no address book, and no record of who is in your phone. One exception, described in full under Blocking below: if you block a contact, a one-way scrambled form of that number is stored so the block can work in both directions.
• No microphone access except while you are recording a voice note, at your instruction.
• Nothing about you is used to make Aura's voice. The lines she speaks when the app opens are clips recorded in advance and shipped inside the app, with no names or numbers in them, and playing them sends nothing anywhere. Whether you turned her voice on is remembered on your phone only.
• No advertising identifiers, and no third-party advertising or analytics trackers.
• No identity documents, and no biometric template stored for future identification.

Blocking a contact

If you pick someone from your phone to block, the app does not upload their name, and does not upload their number as you can read it. It converts the number into a fixed-length scramble (a SHA-256 hash) on your phone, and stores only that.

Why anything is stored at all. A block has to work both ways: you never see them, and they never see you. The second half can only be enforced by our server, which means the server needs something to compare against.

Being straight about the limit. A scrambled Indian mobile number is not a secret from somebody who already holds our database — there are only ten digits, and they could be tried one by one. What it does buy is real: the column cannot be read, browsed, exported or shown as a contact list, and a leak yields scrambles rather than a list of names and numbers. We declare this to Google Play as contact data because that is the honest answer.

Unblocking deletes the entry. Deleting your account deletes all of them.

Who can see what

• Other users see your display name, age, photos, bio, birth city, your three signs, your intent, lifestyle, interests, prompt answers, education and profession, whether you are verified, your compatibility score with them, and how far away you are.
• Your coordinates are never shown to another user — they see only a distance in whole kilometres, and never anything finer than 2 km. Positions are held in a separate table that no other user's account can read at all, so a distance is the most anyone can ever learn about where you are. Your birth city is a separate thing entirely: it is a city you pick from a list for the astrology, and it is not where you live.
• Your phone number and email address are never shown to other users.
• Your exact birth date and birth time are never shown to other users — only your age and the signs calculated from them.
• The likes and passes you made before 26 September 2026 are never visible to anyone else, including the person concerned. Where two people liked each other, the result was a match.
• Messages and voice notes are visible only to the two people in that match. Typed messages are also read by an AI model, as described under Your Aura. That is software, not a person.
• The note in Aura noticed something is shown only to the two people in that match.
• "Typing…" reaches only the other person in that chat, and only while the match stands.
• Your profile completion, your activity score, your Aura, your thumbs on Your Aura, your chat options and your tier are not shown to other users.
• A person you report is never told that a report exists, who made it, or what it said.

These are enforced by row-level security rules in the database, not only by the app.

What our own staff can see

A small number of named people run this service, and moderation is not possible without some access. Being straight about the limits of it:

• When someone is reported, a moderator can read the conversation that was reported — including its photos and voice notes — so the report can be judged. That includes a report the word check filed. No person reads a conversation that has not been reported. The AI model described under Your Aura reads typed messages, but it is software, and what it keeps is its answers, not the messages.
• If someone reports the note in Aura noticed something, a moderator can read the note's two lines, which are kept with the report.
• Staff can see photos held in the moderation queue, including ones quarantined automatically. That is the queue's purpose.
• Moderators can see which messages the word check caught, and in which category.
• An administrator can see what a person's Aura records, and how it shapes who they are introduced to, to check that the matching works. It holds the model's answers, such as topics and traits, not the messages themselves.
• An administrator can see and change an account's location, which is used to correct a wrong position and to test the matching itself. Moderators cannot.
• An administrator can grant or remove the verification tick, and can ban, unban or permanently delete an account.
• Nobody on the team can read your password — there isn't one — and nobody can see the likes and passes you made before 26 September 2026.

Notifications

If you allow notifications, we send one when someone you have matched with sends you a message, and one when you are introduced to someone, since every introduction is a new match; that includes your welcome and bonus introductions. A message notification contains the sender's display name and the first 140 characters of the message, so it can show a preview on your lock screen the way any messaging app does. Anyone who can see your screen can read that preview.

To reach your phone, that text is handed to Expo and then to Google Firebase on Android, or to Apple's notification service on iPhone. All of them sit outside India — see the table below.

A few other kinds of notification exist, each listed with its own switch under You → Notifications: reminders (quiet matches, unanswered messages, and nudges to come back), account notices (subscriptions and photo review), and cosmic events (retrogrades, full moons and your Sun return).

If you have added an email address, some things also come by email: a note that a message is waiting, which names the sender and never quotes the message; a receipt when you buy or renew Pro or Elite; and a reminder a few days before a subscription, or the free Pro days an invite earned you, run out. Receipts and those reminders cannot be switched off; the others are listed with their own switches on the same screen.

You can turn notifications off at any time in your phone's system settings. The app keeps working; messages still arrive when you open it. Signing out deletes the token for that device, and deleting your account deletes it everywhere.

News and offers are separate again, and described next.

News and offers

Separately from the notifications above, we sometimes send news about Cosmic Match — a new feature, or an offer on Pro or Elite. These reach you two ways: as a push notification on a channel called News & offers, and as an email to the address on your account if you have added one.

Both are on by default. You did not have to ask for them. You can switch either one off on its own under You → Notifications, where push and email are listed separately, and every news email also carries an unsubscribe link and the one-click unsubscribe button your mail app shows. Switching one off does not affect match and message notifications, and it takes effect immediately — anything already queued for you is dropped rather than sent.

The only thing about you that goes inside one of these is your first name, and only if the message is written to use it. Nothing else decides who receives one or what it says — not your location, your birth details, your signs, your photos, your introductions, your matches, your messages, or whether you pay. Everyone who is switched on receives the same message.

We do not measure whether you opened it or tapped it: there is no tracking pixel in the email and no click-tracking link in it. We never sell any of this, and we never share it with advertisers, ad networks or data brokers. The app contains no advertising SDK and no analytics SDK, and it does not read any advertising identifier.

Like every other notification, these are held between 22:00 and 08:00 IST and sent after that window. A news email travels through Amazon Web Services and a news notification through Expo and Google, the same route and the same countries as the table below describes.

Where your data is stored

Your profile, photos, voice notes, introductions, matches, messages, Aura, This or That answers, position and face verification records are all stored in India, and processed there apart from what is described next. Six things leave the country. The first is email — if you add an email address, the message carrying your sign-in code, the account emails described under Notifications, and any news and offers email you have not switched off, are sent through Amazon Web Services in the United States. The second applies only if you turn notifications on: the sender's name and the message preview described above travel through Expo, and then Google or Apple, to reach your phone. The stored conversation stays in India — it is the copy inside the notification that travels. The third applies only if you buy Pro or Elite: the payment itself is taken by Google Play or the App Store on the store's own infrastructure, which is not tied to one country. The record we keep of it — the tier, the status and the store's reference — is stored in India with the rest of your data. The fourth is error reports: when something in the app goes wrong, a technical description of the failure is sent to Sentry in the European Union so we can find and fix it. The fifth is the text the AI model reads: your bio, interests, prompt answers and typed messages, with the last few messages of each conversation as context, and the chat a shared note is written from. It goes through OpenRouter or the Vercel AI Gateway, both run by United States companies, and on to the company that runs the model, as described under Your Aura. The sixth applies only when a GIF is sent from the picker inside a chat: your search words go to Klipy, and the GIF is loaded from Klipy's servers by both phones, so Klipy sees each phone's internet address, as any website would. Klipy sees a scrambled code in place of your account, never your name or number, and keeps your searches under its own terms. We do not store those GIFs; the chat keeps only their address.

When the app breaks

Software fails, and an app that cannot tell us how it failed is one we cannot fix. When something goes wrong, the app sends a technical error report to Sentry, a service that collects them for us. It is stored in the European Union.

What the report contains: what went wrong and where in the code, your device model and its Android or iOS version, the app version, and the screens you moved through beforehand. It also carries the random identifier your account already has in our database, so we can tell whether one person hit a problem forty times or forty people hit it once.

What it deliberately does not contain: your messages, your photos, your voice notes, your name, your email address, your phone number, your position, and any sign-in code. We do not record your screen — the ability to do that exists in this kind of service and we have switched it off, because on an app like this it would capture other people's conversations and photographs as well as your own. We also strip the log output that the app writes while it runs, because it is the place a stray piece of your data would most easily end up by accident.

How long we keep it

We keep your data while your account exists. When you delete your account, your profile, photos, voice notes, the likes and passes you made before 26 September 2026, your introductions, matches and messages, your Aura and your This or That answers, your payment records, verification records and your stored location are deleted along with it — see Delete your account. Deletion is immediate and permanent; we do not keep a shadow copy.

Your Aura goes with your account. The Aura, every answer the AI model gave about you, and everything worked out from them are deleted when your account is. Text that has already been sent to the model is different: the service it went through and the company running the model hold it under their own terms, and we cannot recall it. Some model makers log what they are sent and may use it for training.

A message you sent is stored as part of that conversation. Deleting your account removes it from the conversation entirely.

Your device notification token is deleted when you sign out of that device, and deleting your account deletes any that remain.

One thing deliberately outlives an account: a ban. If an account is banned, the email address and phone number are recorded as blocked, and that record is kept even if the account is later deleted — otherwise a ban would be undone by deleting the account it was imposed on. It holds nothing but those identifiers. Ban guidelines.

One other thing outlives an account, and only for 90 days. If an account joined on somebody's invite and is later deleted, we keep a scrambled, one-way code made from its phone number — never the number itself, and nothing can turn the code back into one. It exists for a single purpose: so the invite reward cannot be collected again and again by deleting an account and joining afresh on the same number. After 90 days that code is deleted as well. Apart from what this section describes, nothing about the account survives the deletion in our systems. Text already sent to the AI model is the one thing outside them, as described above.

Your rights

• See your data — export a copy from inside the app, in Account. You do not need to ask anyone. Email care@cosmicmatch.in if you want something the export does not cover.
• Correct it — edit your profile in the app, or write to us. Your phone number is the one field that cannot be changed.
• Delete it — from inside the app, immediately. See Delete your account.
• Withdraw consent — deleting your account withdraws it entirely. Verification consent can be withdrawn on its own by asking us to remove the tick.
• Object to a decision — a photo removal or a ban that came from the automatic scan, or anything the word check did, is reviewable by a person on request. Write to us and say so.
• Complain — write to us first; we would rather fix it.

Automated decisions

Four things happen without a human in the loop, and you should know about all of them.

• Photo checks. Every photo is checked automatically. One found to be explicit ends the account. Anything borderline, and anything showing violence, hate symbols or drug use, is hidden and looked at by a person.
• Face verification. The tick is granted and withdrawn automatically, based on the camera check and how well your face matched your photos.
• Word checks. Typed messages, and your name, bio and typed prompt answers when you change them, are checked against a list of words our community guidelines don't allow. A profile change that matches is refused. A message that matches is still delivered, marked for the person who receives it, and for sexual content, harassment, hate or self-harm, reported to a moderator.
• Who you are introduced to, and when. The app chooses this automatically. It uses your Aura and theirs, your astrological compatibility, and how people use the app. The AI model reads what people write, but the choice is made by our own software, and nobody hand-picks an introduction. Nobody is left out this way: a low score does not stop an introduction.

All four are reviewable by a person. If you believe any of them got you wrong, write to care@cosmicmatch.in and someone will look.

Age

Cosmic Match is for adults. You must be 18 or older; the app checks your birth date at sign-up and refuses to create a profile for anyone younger. If you believe someone under 18 has an account, report them in the app or tell us at care@cosmicmatch.in and we will remove it.

Security

Sign-in is by one-time code, so there is no password to be stolen. Your photos and voice notes are private: they are never on a public web address, and the links that show them expire. Who can see what is decided centrally rather than screen by screen, so one mistake in the app cannot open your data to other people.

No system is perfectly secure. If we ever discover a breach affecting your data, we will tell you at the contact details on your account.

Changes to this policy

When this policy changes, the date at the top changes with it, and the box at the top says what changed. Using Cosmic Match after a change means you accept the updated policy.