Aurenia Group
Cosmic Tea (“we,” “us,” or “our”) is operated by Aurenia Group. We provide an AI-powered astrology relationship advice app available on iOS, Android, and the web.
For EU/EEA users, Aurenia Group acts as the data controller for your personal data. For Canadian users, Aurenia Group is the organization responsible for personal information under PIPEDA.
This policy applies to all users of the Cosmic Tea app and website globally. By creating an account, you confirm you are at least 18 years old. We do not knowingly collect personal information from anyone under 18.
Data You Provide Directly
| Data Type | Why We Collect It |
|---|---|
| Email address | Account creation and communication |
| Date of birth — and, if you choose to add them, birth time and birth city | Generating your astrological profile, birth chart, and compatibility readings. A birth city is converted to geographic coordinates on our servers to compute an accurate chart |
| Names and birthdays of people you add to your roster | Generating compatibility readings for those relationships |
| Chat messages | Providing AI-generated relationship advice |
| Photos you choose to upload (e.g. chat screenshots, tarot card photos) | Optional image-based features — only processed when you upload them |
| Subscription and payment information | Processing your subscription via the Apple App Store or Google Play; subscription state is managed by RevenueCat |
Data We Collect Automatically
| Data Type | Why We Collect It |
|---|---|
| App usage and interaction data | App functionality, security, and improving performance (PostHog analytics) |
| Session replays — recordings of screens and taps inside the app, associated with your account | Diagnosing bugs and improving the experience (PostHog session replay; password fields are always masked) |
| Device type and OS version | Technical compatibility |
| Crash reports and diagnostic data | Identifying and fixing bugs (Sentry) |
| IP address | Security, fraud prevention, and approximate location |
We do not collect GPS location from your device, or data from your contacts, camera, or microphone unless you explicitly grant access for a specific feature. If you enter a birth city, we convert it to precise geographic coordinates on our servers solely to compute birth charts — this is the location of a birthplace you typed, not tracking of your device.
We do not sell your personal information. We do not use your data for targeted advertising.
| Processing Activity | Legal Basis |
|---|---|
| Providing the core app service (chat, readings) | Contract performance (Art. 6(1)(b)) |
| Email address (account management) | Contract performance (Art. 6(1)(b)) |
| Date of birth (astrological readings) | Explicit consent (Art. 6(1)(a)) |
| AI processing of chat messages | Contract performance (Art. 6(1)(b)) |
| Marketing communications | Consent (Art. 6(1)(a)) |
| Security and fraud prevention | Legitimate interests (Art. 6(1)(f)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
Note on astrological data: We collect your date of birth solely to generate astrological readings. Because these interpretations may reflect upon characteristics that could be considered sensitive, we treat this data with extra care and process it only with your explicit consent. You may withdraw consent at any time, but doing so prevents us from providing personalised readings, which are core to the service.
Canadian Users — PIPEDA & Quebec Law 25: Cosmic Tea processes your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Quebec's Act respecting the protection of personal information in the private sector (Law 25 / Bill 64). We collect only the personal information reasonably necessary to provide the Service, obtain meaningful consent before collecting sensitive data, and maintain appropriate safeguards. Quebec residents have additional rights under Law 25, including the right to data portability and the right to request de-indexation of certain published information.
We share personal data only with the service providers below, who act on our instructions as data processors. We do not share data with third parties for their own marketing or advertising purposes.
Cosmic Tea is operated globally. Your personal data may be transferred to and processed in countries outside your own, including the United States. Data stored in Supabase is processed within the European Union. Data processed by Anthropic, Vercel, RevenueCat, PostHog, and Sentry is transferred to the United States under Standard Contractual Clauses and, where certified, the EU-U.S. Data Privacy Framework.
You may request a copy of the applicable transfer safeguards by contacting privacy@cosmictea.app.
| Data Type | Retention Period |
|---|---|
| Account information (email, birthday) | Duration of your account + 30 days after deletion |
| Chat history | 90 days from each conversation, then permanently deleted |
| AI processing data (Anthropic) | Automatically deleted from Anthropic's systems within 7 days |
| Payment transaction records | 7 years (tax and financial compliance) |
| Security and server logs | 30 days |
| Anonymised analytics | Indefinitely (no personal identifiers) |
When you delete your account, we initiate permanent deletion of all personal data within 30 days, except where legally required (e.g. transaction records).
All Users
California Residents (CCPA/CPRA)
Canadian Residents (PIPEDA / Quebec Law 25)
To make a rights request, contact privacy@cosmictea.app or submit a request through the app under Privacy & Data. We will respond within 45 days (California), 30 days (EU/EEA), or 30 days (Canada / PIPEDA).
“Do Not Sell or Share My Personal Information”: Cosmic Tea does not sell or share your personal information for cross-context behavioural advertising.
Cosmic Tea is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we discover that a user is under 18, we will immediately terminate the account and delete all associated data. If you believe a child has registered, contact privacy@cosmictea.app.
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS 1.2+) and at rest (AES-256), access controls, regular security assessments, and contractual data security obligations with all processors. No security measure is perfect — in the event of a data breach, we will notify affected users and relevant authorities as required by applicable law.
If we make material changes, we will notify you by push notification or in-app banner, email to your registered address, and by updating the “Last Updated” date at the top of this page. Continued use of Cosmic Tea after changes take effect constitutes acceptance of the revised policy.
For EU/EEA users, you have the right to contact your local supervisory authority. A list of EU data protection authorities is available at edpb.europa.eu.