Privacy Policy

1. Scope

This Privacy Policy explains how the Cosmos+ mobile application (“Cosmos+”, the “App”, “we”, “us”) collects, uses and discloses information when you use the App. It applies to the App and to this website. It does not apply to third-party services that you access separately, which are governed by their own policies.

Cosmos+ is an AI photo transformation app for creative and entertainment purposes: you select a personal photo and the App produces artistic, AI-generated visuals such as cinematic portraits, artistic color compositions, era-inspired visual styles and creative lifestyle scenes. All outputs are fictional artistic transformations and are not statements of fact.

2. No account and no authentication

Cosmos+ currently has no account system. You do not create a username or password, and we do not offer or use Sign in with Apple or any other third-party login. We therefore do not maintain a user profile database that identifies you. If this changes, we will update this policy before launching such a feature.

3. Information we collect

3.1 Information you provide

• Photos you upload or select. Images you choose from your photo library or capture in order to create a visual.
• Generated images. The results the App produces for you, stored locally on your device.
• Optional profile inputs. Preferences such as a display name, language and interests that personalise the experience. These are stored locally on your device (AsyncStorage / local device storage) and are not uploaded to a Cosmos+ account server.
• Support correspondence. If you email us, we receive your email address and whatever information you include in your message.

3.2 Information collected automatically

We keep automatic collection to the minimum needed to deliver and maintain the App. This may include limited technical information such as device type, iOS version, App version, and basic error or crash diagnostics, together with information necessary to route and fulfil your generation requests. Where available, Apple may also provide us with aggregated, non-identifying App Analytics if you have consented to share analytics with developers in your device settings.

We do not use advertising SDKs, we do not collect the IDFA, we do not present App Tracking Transparency prompts, and we do not use attribution or marketing analytics providers. We do not track you across apps or websites owned by other companies.

4. Face Data

Photos you submit may contain faces, including your own. For the purposes of this policy, Face Data means the visual appearance of a face contained in the media you provide.

• Face Data is processed only to generate the specific creative visual you requested, and only after you actively start a generation.
• We do not perform facial recognition, biometric authentication, identity verification or identity matching.
• We do not create, derive or store persistent faceprints, facial embeddings, biometric templates or unique facial identifiers.
• We do not use Face Data for surveillance or to identify any individual.
• We do not use Face Data for advertising, profiling or marketing.
• We do not use Face Data or your photos to train or fine-tune Cosmos+ models.
• Face Data is not sold and is not shared with data brokers or third parties for their own purposes.

To create the output, the photo you submit is transmitted to our AI provider, OpenAI, which processes it to fulfil your request and return the generated image. See section 7.

5. Your responsibility and consent

You must own or have the necessary rights to every photo you submit. If a photo contains another identifiable person, you must have that person’s informed consent before uploading it. Do not upload photos of people who have not agreed to their image being used in this way, and do not upload photos of children for transformation.

6. Content standards and prohibited use

You may not use Cosmos+ to upload or attempt to generate:

• content sexually exploiting or endangering a minor, or any sexual content involving minors;
• non-consensual intimate imagery, deepfakes intended to deceive, or content impersonating a real person;
• content that harasses, defames, threatens or discriminates against any person or group;
• content that is unlawful, or that infringes another person’s privacy, publicity or intellectual property rights.

Requests may also be rejected by the safety systems of the App or of our AI provider. Violations may result in loss of access to the App’s features.

7. AI processing

Cosmos+ uses OpenAI (OpenAI Images API, gpt-image-2) as its AI image generation provider. This means:

• Your photo and the associated prompt are transmitted to OpenAI only when you explicitly request a generation. Nothing is sent for AI processing merely by browsing the App.
• The submitted content is used to fulfil that request and to return the generated image to your device.
• We do not use your content to train, fine-tune or improve Cosmos+ models.
• OpenAI processes the data as our service provider under its own terms and privacy policy, which may include limited retention for abuse monitoring and legal compliance. See OpenAI Privacy Policy and OpenAI Terms of Use.

AI processing does not happen entirely on your device: generating a visual requires sending your photo to the AI provider over the internet. If you do not want a photo to leave your device, do not submit it for generation.

8. Data retention and deletion

• Your profile preferences and your generated images are stored locally on your device. You control them.
• You can delete this local data from within the App at any time, and removing the App from your device removes its locally stored data.
• We do not maintain a permanent server-side gallery or archive of your photos. Generation requests are transmitted to our AI provider to fulfil your request. Local copies remain on your device until you delete them.
• Data handled transiently to route a request is retained only as long as needed to complete it and to maintain the security and integrity of the service.
• Our AI provider may retain request data for a limited period under its own policies for abuse monitoring and legal compliance.
• Support emails are retained for as long as needed to answer you and keep a record of the request.

9. Payments

Subscriptions are sold exclusively through Apple In-App Purchase. Apple processes the payment; we never receive or store your credit card number or other payment credentials. We use RevenueCat to validate purchase receipts and manage subscription status and entitlements, which involves processing a pseudonymous app-generated identifier and purchase metadata, not your payment details.

10. Third-party service providers

• OpenAI — AI image generation for the visuals you request.
• Apple — App Store distribution and In-App Purchase processing.
• RevenueCat — subscription status, entitlement and restore handling.

We do not currently use any advertising network, attribution SDK or third-party marketing analytics provider. If we add a provider in the future, this policy will be updated.

11. Data sharing

We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We disclose information only:

• to the service providers listed above, to the extent needed to operate the App;
• when required by applicable law, regulation, legal process or an enforceable governmental request;
• to establish, exercise or defend legal claims, or to protect the rights, safety and property of users, the public or us;
• in connection with a merger, acquisition or asset sale, subject to this policy continuing to apply.

12. Children’s privacy

Cosmos+ is not directed to children under 13, and we do not knowingly collect personal data from children under 13.

13. Security

We use reasonable technical and organisational measures to protect information, including encrypted transmission (HTTPS/TLS) for data sent between the App and our providers, minimising the data we handle, and limiting access. Data stored locally is protected by your device’s own security features, so we recommend keeping a passcode and biometric lock enabled. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. International transfers

Our service providers, including OpenAI, Apple and RevenueCat, may process data on servers located outside your country of residence, including in the United States. Data protection laws in those countries may differ from those in your own. Where required, such transfers are carried out under appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

15. Your rights and requests

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. Because most of your data stays on your device, you can exercise deletion directly in the App — see Delete your data.

For any other request, email salih.yalcin@ozu.edu.tr. We respond within 48 hours and act on valid requests without undue delay. Since we do not operate accounts, we may have very little data associated with you beyond your correspondence, and we may be unable to identify you within our systems. You also have the right to lodge a complaint with your local data protection authority.

16. Changes to this policy

We may update this Privacy Policy as the App evolves. The revised version will be posted on this page with a new effective date, and material changes will be signalled in the App where appropriate. Continued use of the App after the update means you accept the revised policy.

17. Contact

Questions, concerns or privacy requests: salih.yalcin@ozu.edu.tr

Türkçe özet (bilgilendirme amaçlıdır)

Bu özet yalnızca bilgilendirme amaçlıdır; bağlayıcı ve geçerli metin yukarıdaki İngilizce Gizlilik Politikası’dır.

• Cosmos+ bir eğlence ve yaratıcı görsel uygulamasıdır; üretilen görseller kurgusal yorumlardır.
• Hesap sistemi yoktur; Apple ile Giriş dâhil hiçbir oturum açma kullanılmaz.
• Fotoğraflarınız yalnızca siz üretim başlattığınızda, talep ettiğiniz görseli oluşturmak için yapay zekâ sağlayıcımız OpenAI’ye iletilir.
• Yüz verisi yalnızca istenen görseli üretmek için işlenir; yüz tanıma, kimlik eşleştirme, biyometrik doğrulama veya kalıcı yüz şablonu oluşturma yapılmaz.
• Profil tercihleriniz ve üretilen görseller cihazınızda yerel olarak saklanır ve uygulama içinden silinebilir. Kalıcı bir sunucu galerisi tutmuyoruz.
• Abonelikler yalnızca Apple Uygulama İçi Satın Alma ile yapılır; abonelik durumu RevenueCat ile yönetilir. Kart bilgileriniz bize ulaşmaz.
• Kişisel verilerinizi satmıyoruz; reklam veya izleme SDK’sı kullanmıyoruz.
• Uygulama 13 yaş altındaki çocuklara yönelik değildir.
• Talepleriniz için: salih.yalcin@ozu.edu.tr