Privacy Policy
This policy describes exactly what Cosmic Match stores about you. It lists real fields, not categories — if something is not in the table below, the app does not collect it.
Who we are
Cosmic Match is a dating app that matches people by astrological compatibility. For any privacy question, or to exercise any right described here, write to info@cosmicmatch.in.
What we collect
| Data | Why |
|---|---|
| Email address | It is your login. We send a 6-digit sign-in code to it. We do not store a password. |
| Display name | Shown on your profile. |
| Gender, and who you are looking for | Used to decide whose profiles you see and who sees yours. |
| Bio | Optional free text shown on your profile. |
| Birth date, birth time, birth city (with its latitude, longitude and timezone) | Required to calculate your Sun, Moon and Rising signs. Longitude and time of day are what determine a Rising sign. |
| Your Sun, Moon and Rising signs | Calculated from the above and stored so profiles load quickly. Shown to other users. |
| Photos (up to six) | Shown on your profile. |
| Swipes (like or pass) | To stop showing you the same people and to detect a mutual like. |
| Matches | Created when two people like each other. |
| Messages | Delivered to the person you matched with. |
| When you last opened a conversation | To show unread counts. |
| A notification token for your device, and whether it is Android, iOS or web | So a new-message notification can reach that specific device. Stored only while you are signed in on it. |
What we do not collect
- No payment or card details. The app has no payments.
- No device GPS or background location. Your birth city is a city you pick from a list — it is not where you are.
- No contacts, calendar, microphone or call data.
- No advertising identifiers, and no third-party advertising or analytics trackers.
Who can see what
- Other users see your display name, photos, bio, birth city, your three signs, and your compatibility score with them.
- Your email address is never shown to other users.
- Your exact birth date and birth time are never shown to other users — only the signs calculated from them.
- Who you liked or passed on is never visible to anyone else, including the person concerned, unless you both liked each other.
- Messages are visible only to the two people in that match.
These are enforced by row-level security rules in the database, not only by the app.
Notifications
If you allow notifications, we send one to your device when someone you have matched with sends you a message. That notification contains the sender's display name and the first 140 characters of the message, so it can show a preview on your lock screen the way any messaging app does. Anyone who can see your screen can read that preview.
To reach your phone, that text is handed to Expo's push service and then to Google's Firebase Cloud Messaging. Both sit outside India — see the table below.
You can turn notifications off at any time in your phone's system settings. The app keeps working; messages still arrive when you open it. Signing out deletes the token for that device, and deleting your account deletes it everywhere.
Where your data is stored
| Service | What it handles | Location |
|---|---|---|
| Supabase | Database, sign-in, photo storage, message delivery | India (ap-south-1) |
| Amazon Web Services (SES) | Sending your sign-in code email | United States (us-east-1) |
| Expo push service | Passing message notifications on towards your device | United States |
| Google Firebase Cloud Messaging | Delivering notifications to Android devices | Google infrastructure, not region-specific |
Your profile, photos, swipes, matches and messages are stored in India. Two things leave the country. The first is the email carrying your sign-in code, sent through Amazon SES in the United States. The second applies only if you turn notifications on: the sender's name and the message preview described above travel through Expo and Google to reach your phone. The conversation itself stays in India — it is the copy inside the notification that travels.
How long we keep it
We keep your data while your account exists. When you delete your account, your profile, photos, swipes, matches and messages are deleted along with it — see Delete your account. Deletion is immediate and permanent; we do not keep a shadow copy.
A message you sent is stored as part of that conversation. Deleting your account removes it from the conversation entirely.
Your device notification token is deleted when you sign out of that device, and deleting your account deletes any that remain.
Your rights
- See your data — most of it is visible in the app; email info@cosmicmatch.in for a full copy.
- Correct it — edit your profile in the app, or write to us.
- Delete it — see Delete your account.
- Withdraw consent — deleting your account withdraws it entirely.
- Complain — write to us first; we would rather fix it.
Age
Cosmic Match is for adults. You must be 18 or older; the app checks your birth date at signup and refuses to create a profile for anyone younger. If you believe someone under 18 has an account, tell us at info@cosmicmatch.in and we will remove it.
Security
Sign-in is by one-time code sent to your email; there is no password to leak. Photos live in a private bucket and are served through short-lived signed links rather than public URLs. Access rules are enforced in the database itself.
No system is perfectly secure. If we ever discover a breach affecting your data, we will tell you at your registered email address.
Changes to this policy
If this policy changes materially, we will update the date at the top and notify you in the app or by email before the change takes effect.
Questions about anything here: info@cosmicmatch.in.