CosmoCare Privacy Policy

CosmoCare Privacy Policy

Effective: August 26, 2026

About this policy

CosmoCare ("CosmoCare", "we", "us", or "our") operates the CosmoCare web application and related services available through cosmocare.me (the "Service"). This Privacy Policy explains what personal information CosmoCare collects, how we use and protect it, how information is processed when using the Pip AI assistant, how long information is retained, and the choices available to users. By creating an account or using CosmoCare, you acknowledge that you have read and understood this Privacy Policy. CosmoCare is an educational and supportive digital platform. CosmoCare and Pip are not medical, psychological, psychiatric, addiction-treatment, legal, or emergency services.

1. Information we collect

CosmoCare collects only information reasonably necessary to provide and maintain the Service. Account information: when a user creates an account, CosmoCare may collect an email address, a username/login, and password information. Passwords are not stored in plain text — only as cryptographic hashes, and CosmoCare has no access to the original password in readable form.

1.2 Profile information

Users may voluntarily provide information for their CosmoCare profile, including a profile picture/avatar and other information they choose to provide. Users are encouraged not to provide unnecessary sensitive personal information.

1.3 Information entered into CosmoCare

CosmoCare may store information that users voluntarily enter into the Service, including information entered into interactive features, notes, tracker information, and other user-generated content. Because users control what they enter, such information may sometimes contain personal or sensitive information. Users should avoid submitting information that is unnecessary for using the Service.

2. Pip AI

CosmoCare provides an artificial-intelligence assistant called Pip. Pip is currently powered through the OpenRouter API and uses the model Meta Llama 3.3 70B Instruct (meta-llama/llama-3.3-70b-instruct). The model or underlying provider may change in the future. If the AI infrastructure changes in a way that materially affects how user information is processed, CosmoCare will update this Privacy Policy and provide additional notice where required.

2.1 How Pip processes information

When a user sends a message to Pip: (1) the message is sent from CosmoCare's systems; (2) the request is transmitted through OpenRouter; (3) OpenRouter routes the request to the applicable model/provider for inference; (4) the model processes the request and generates a response; (5) the response is returned through OpenRouter to CosmoCare; and (6) CosmoCare displays the response to the user. Information entered into Pip may therefore be transmitted to third-party infrastructure necessary to provide the AI service.

3. Pip conversations

CosmoCare may store Pip conversations in its own database so that users can access recent conversations and Pip can maintain useful conversational context. Pip conversations may contain information voluntarily provided by users. CosmoCare does not intentionally create medical, psychological, psychiatric, or addiction diagnoses or permanent sensitive profiles about users based solely on their conversations with Pip. Pip may use information contained in the current conversation and retained conversation history to provide more relevant responses.

4. Third-party AI processing

Information submitted to Pip may be transmitted to OpenRouter and to the applicable model provider used for inference. OpenRouter's current privacy documentation states that OpenRouter itself does not use user inputs or outputs for model training, but different model providers may have different retention and training practices. CosmoCare will seek to use configurations that do not permit user prompts and responses to be used for model training where such options are available. Because OpenRouter can route requests through different providers, CosmoCare cannot represent that every possible underlying provider has identical retention practices. CosmoCare will not intentionally use Pip conversations for advertising or sell Pip conversations to third parties.

5. Temporary / incognito chat

CosmoCare may provide a Temporary Chat feature. When a user chooses Temporary Chat: the conversation is not saved as a normal persistent conversation in the user's chat history and is automatically deleted after the applicable technical retention period. Temporary Chat does not necessarily mean that no technical copy exists at any moment — information may be temporarily processed or retained where reasonably necessary for transmitting the request, security, abuse prevention, debugging, technical operation, legal compliance, or prevention of fraud or unauthorized use.

6. Retention of Pip conversations

CosmoCare follows a limited retention period for normal Pip conversations. Unless deleted earlier, Pip conversation data is automatically deleted 90 days after the applicable conversation data becomes eligible for deletion. The purpose of this retention period is to allow users to access recent conversations while avoiding indefinite storage of potentially sensitive conversations. Temporary chats are subject to the shorter retention period described above. Certain technical records, such as security logs or legally required records, may be retained for different periods where reasonably necessary.

7. Account deletion

CosmoCare will provide users with the ability to request deletion of their account. Upon account deletion, CosmoCare intends to delete or irreversibly anonymize personal information associated with the account, including the email address, username, profile information, avatar, password hash, Pip conversations, and other user-generated content. Email addresses and usernames are not retained merely for statistical purposes. Where statistical information is useful, CosmoCare may retain aggregated or anonymized statistics that cannot reasonably be used to identify an individual. Some information may remain temporarily in encrypted backups, security records, or other systems until their normal deletion cycles are completed, or where required by law or reasonably necessary for security, fraud prevention, or dispute resolution.

8. Data storage and security

CosmoCare stores user information using a PostgreSQL database and other technical infrastructure necessary to operate the Service. CosmoCare implements reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, alteration, disclosure, or destruction. These measures may include password hashing, authentication controls, access restrictions, secure network connections, database access controls, security monitoring, backups, and recovery procedures. No online service can guarantee absolute security — users should avoid submitting unnecessary sensitive information.

9. Technical and security information

CosmoCare may process technical information necessary to operate, secure, and troubleshoot the Service. Depending on the technical configuration, this may include IP address, browser type, operating system, device information, timestamps, authentication events, security events, error logs, and performance information. This information may be used to secure accounts, prevent abuse, detect unauthorized access, troubleshoot problems, maintain reliability, and comply with legal obligations.

10. Cookies and similar technologies

CosmoCare may use cookies and similar technologies necessary to maintain user sessions, authenticate users, protect the Service, remember user preferences, maintain security, and analyze technical performance. If CosmoCare introduces non-essential analytics, advertising, or tracking technologies that require user consent under applicable law, appropriate notice and consent will be provided where required.

11. Analytics and aggregated information

CosmoCare may generate aggregated or anonymized statistics about use of the Service — for example, the number of registered or active users, general feature usage and trends, technical performance, and aggregated engagement statistics. CosmoCare will seek to ensure that such statistics cannot reasonably be used to identify an individual user, and does not need to retain identifiable email addresses or usernames merely to calculate anonymous statistics.

12. Third-party service providers

CosmoCare may use third-party service providers to operate the Service, including services for hosting, database infrastructure, authentication, email delivery, AI processing, security, analytics, error monitoring, and website infrastructure. Third-party providers may process information only to the extent reasonably necessary to provide their services to CosmoCare or as otherwise permitted by applicable law. Where required, CosmoCare will take reasonable steps to ensure that appropriate contractual and technical safeguards are in place.

13. Data sharing

CosmoCare does not sell users' personal information. CosmoCare may disclose information where reasonably necessary: (1) to service providers operating the Service; (2) to OpenRouter and applicable AI/model providers when a user uses Pip; (3) to protect the security of CosmoCare; (4) to prevent fraud, abuse, or unlawful activity; (5) to comply with applicable law or a lawful request from an authorized authority; (6) to protect the rights, safety, or property of CosmoCare, its users, or others; or (7) in connection with a merger, acquisition, restructuring, or transfer of the Service, subject to applicable law. CosmoCare will not intentionally disclose private Pip conversations publicly.

14. Information users should not provide to Pip

Users should not provide unnecessary highly sensitive information to Pip, including passwords, authentication codes, payment-card information, government identification numbers, exact home addresses, private information belonging to another person, information that could be used to access another person's account, or other information that is not necessary to receive the requested assistance. Remember that messages sent to Pip are processed through third-party AI infrastructure.

15. Pip's limitations

Pip provides general educational and informational assistance. Pip is not a doctor, psychologist, psychiatrist, therapist, addiction-treatment professional, lawyer, emergency service, crisis hotline, or substitute for qualified professional advice. Pip may produce inaccurate, incomplete, outdated, or inappropriate information. Users should not rely on Pip as the sole source of information for medical, psychological, addiction-related, legal, financial, or emergency decisions. Where a situation involves immediate danger, users should contact an appropriate emergency service or qualified professional rather than relying on Pip.

16. Minors and teenagers

CosmoCare may be used by teenagers. CosmoCare seeks to minimize the collection of unnecessary personal information from younger users. Users should not provide unnecessary identifying or highly sensitive information to Pip. Where applicable law requires parental or guardian consent, age verification, or other safeguards, CosmoCare will comply with those requirements. If a parent or legal guardian believes that a child has provided personal information to CosmoCare in circumstances where it should not have been collected, they may contact CosmoCare using the contact information below.

17. International data processing

Because CosmoCare uses third-party infrastructure, including OpenRouter and potentially other service providers, personal information may be processed or stored outside the Republic of Uzbekistan. For example, OpenRouter states that personal data may be transferred to servers in the United States or other countries. Where personal information is transferred internationally, CosmoCare will take reasonable measures to comply with applicable personal-data protection requirements.

18. User rights

Subject to applicable law, users may have rights concerning their personal information, including the right to request information about personal data processed by CosmoCare, request correction of inaccurate information, request deletion of their account and associated personal information, request restriction or cessation of certain processing where legally applicable, withdraw consent where processing is based on consent, object to certain processing where applicable, and submit a complaint to a competent authority. Requests may be submitted using the contact information below. CosmoCare may request reasonable information necessary to verify the identity of a person making a request involving personal information.

19. Security incidents

If CosmoCare becomes aware of a personal-data security incident, CosmoCare will take reasonable steps to investigate the incident, contain and remediate it, assess potential risks, comply with applicable notification requirements, and notify affected users or competent authorities where required by applicable law.

20. User responsibility

Users are responsible for the information they voluntarily submit to CosmoCare. Users must not intentionally submit another person's personal information without appropriate authorization. Users are responsible for maintaining the confidentiality of their account credentials and should notify CosmoCare promptly if they believe their account has been compromised.

21. Changes to this policy

CosmoCare may update this Privacy Policy from time to time. When material changes are made, CosmoCare will update the "Last Updated" date and may provide additional notice where appropriate or required by law. The updated Privacy Policy will apply from its stated effective date. Users are encouraged to review this Privacy Policy periodically.

22. Contact

For questions, concerns, privacy requests, or requests regarding personal information, contact CosmoCare: privacy email cosmocare.team@gmail.com, website www.cosmocare.me. When submitting a privacy request, provide sufficient information for CosmoCare to understand and process the request. CosmoCare may request reasonable identity verification before processing requests involving personal information.

23. Governing framework

CosmoCare seeks to process personal information in accordance with applicable laws and regulations of the Republic of Uzbekistan and other applicable data-protection requirements. Nothing in this Privacy Policy is intended to remove or restrict rights that users have under mandatory applicable law.

24. Important summary for users

CosmoCare collects only account information necessary to operate your account; your password is stored only as a secure hash, never as readable text. Information you enter into CosmoCare may be stored to provide the Service. Pip conversations are automatically deleted after approximately 90 days unless deleted earlier. Temporary Chat is not saved as a persistent chat history. Pip currently uses the Meta Llama 3.3 70B Instruct model through OpenRouter; your Pip messages pass through third-party AI infrastructure to generate responses. OpenRouter states that it does not store prompts or responses by default, but the model providers that receive requests may have their own data practices. CosmoCare does not sell your personal information. You may request deletion of your account and associated personal information. Aggregated or anonymized statistics may remain after deletion where they cannot reasonably identify you. Pip is not a doctor, therapist, psychologist, emergency service, or substitute for professional assistance. Avoid submitting passwords, government IDs, payment information, or other unnecessary highly sensitive information to Pip.

Privacy Policy · Terms & Conditions · Pip rules