Privacy Policy
Last updated: July 3, 2026
1. Introduction
This Privacy Policy explains how Cosmio Technology Corp. ("Cosmio", "we", "our" or "us") collects, uses, discloses and protects personal information when you access or use the CosMeal mobile application, website and related products and services (collectively, the "Services").
Your use of the Services is also governed by our Terms of Service, which should be read together with this Privacy Policy. By accessing or using the Services, you acknowledge that we collect, use and disclose your personal information as described in this Privacy Policy. For purposes of this Privacy Policy, "personal information" means information about an identifiable individual, as defined under applicable privacy laws.
2. Information We Collect
We collect information that you provide directly to us, information generated through your use of the Services and certain information from third-party service providers.
(a) Account and Profile Information
When you create and use your account, we may collect information such as your name, email address, optional phone number, authentication provider information (including Google or Apple sign-in), language preferences and subscription information.
To personalize the Services, we may also collect household profile information, including names, avatars, age, gender, height, weight, activity level, calorie goals, dietary preferences, allergies, health conditions relevant to meal planning, foods to avoid, favourite foods and cuisine preferences.
(b) Content You Provide
We collect information that you choose to submit through the Services, including meal plans, recipes, grocery lists, notes, survey responses, photographs submitted for AI analysis, chat conversations with AI features and other content you voluntarily provide.
(c) Technical and Usage Information
When you use the Services, we may collect technical and usage information necessary to provide, maintain and secure the Services, including AI usage records, subscription status, application version, device platform and authentication tokens stored on your device.
Payment card information is processed directly by the Apple App Store or Google Play Store, as applicable. We do not receive, process or store your payment card information.
We do not currently use third-party analytics, advertising or crash reporting services within the Services.
3. How We Use Your Information
We use your personal information to:
- provide, operate, maintain and support the Services;
- authenticate your account and manage your household profile;
- generate AI-powered meal plans, recipes, nutrition estimates and other AI Outputs that you request;
- personalize your experience and recommendations;
- process subscriptions and payments;
- communicate with you regarding your account, the Services and customer support requests;
- maintain, troubleshoot, secure and improve the reliability and functionality of the Services;
- comply with applicable legal and regulatory obligations; and
- detect, investigate and prevent fraud, security incidents and misuse of the Services.
Except as expressly described in this Privacy Policy, we will not use your User Content or personal information to train or fine-tune artificial intelligence models. We may use aggregated or de-identified information that does not identify you or any member of your household to maintain, secure, analyze, improve and develop the Services and related products and services. Such information is not used to identify you or members of your household.
Certain features of the Services rely on third-party artificial intelligence providers to generate AI Outputs. Information that you submit when using these features is processed by those providers solely to provide the requested functionality.
4. How We Share Your Information
We may disclose your personal information to trusted third parties where reasonably necessary to provide and operate the Services, including:
| Third-Party Provider | Purpose |
|---|---|
| Clerk | User authentication and Google/Apple sign-in. |
| OpenAI | Generation of meal plans, recipes, nutrition estimates, chat responses, image analysis and other AI Outputs. |
| Microsoft Azure | AI processing and hosting of AI models (such as DeepSeek and GPT) used to generate AI Outputs for supported AI features. |
| NeonDB | Database hosting and storage of user information. |
| Vercel | Backend hosting and storage of application content and uploaded images. |
| RevenueCat | Subscription management and purchase validation. |
| Apple App Store / Google Play Store | Payment processing and subscription billing. We do not receive or store payment card information. |
| Expo | Application framework and software updates. |
| Instacart | Grocery ordering when you choose to send a grocery list to Instacart. |
Information submitted when you use AI-powered features is shared with the applicable AI provider only to the extent reasonably necessary to generate the requested AI Output.
We may also disclose personal information:
- where required or permitted by applicable law, court order or other lawful governmental request;
- to protect our rights, property, users or the security of the Services;
- in connection with a merger, acquisition, financing, corporate reorganization or sale of all or substantially all of our business or assets; or
- with your consent or at your direction.
We do not sell your personal information to third parties.
5. International Transfers
Some of our service providers may collect, access, store or process personal information in jurisdictions outside your province or country of residence in connection with providing the Services.
As a result, your personal information may be subject to the laws of those jurisdictions and may be accessible to courts, law enforcement authorities, regulators or other governmental authorities in accordance with applicable laws.
Where personal information is processed by service providers outside your jurisdiction, we take reasonable steps to ensure that such information is protected through appropriate contractual, technical, organizational and security safeguards consistent with applicable privacy laws.
6. Data Retention
We retain personal information only for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with applicable legal obligations, resolve disputes and enforce our agreements.
The length of time we retain personal information depends on the nature of the information, the purpose for which it was collected and any applicable legal or regulatory requirements. When personal information is no longer required, we will securely delete, anonymize or otherwise dispose of it in accordance with our data retention practices.
7. Your Rights
Subject to applicable law, you may have the right to:
- request access to the personal information we hold about you;
- request that we correct inaccurate or incomplete personal information;
- request deletion of your personal information;
- withdraw your consent where we rely on your consent to process personal information; and
- make inquiries or complaints regarding our privacy practices.
You may also update or correct certain account information directly through the Services. To exercise any of these rights, please contact us using the contact information set out below. We may request additional information to verify your identity before responding to your request.
8. Security
We implement reasonable administrative, technical and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration and destruction. While we take reasonable steps to protect personal information, no method of electronic transmission or storage is completely secure. Accordingly, we cannot guarantee absolute security.
9. Children's Privacy
The Services are intended for individuals who are able to lawfully consent to the collection and use of their personal information or who use the Services with the consent and supervision of a parent or legal guardian.
If you believe that a child has provided us with personal information without the required consent, please contact us using the contact information below. We will take reasonable steps to investigate the request and, where appropriate, delete the applicable personal information in accordance with applicable law.
10. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our Services, our privacy practices or applicable laws. If we make material changes, we will update the "Last updated" date above and provide any additional notice required by applicable law.
Your continued use of the Services after any updated Privacy Policy becomes effective constitutes your acknowledgment of the revised Privacy Policy.
11. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, or if you wish to exercise any of your privacy rights, please contact us at: info@cosmeal.ai.