Cosmofy Privacy Policy

Cosmofy is designed as a local-first salon-management application. This Privacy Policy explains how information is handled by the Cosmofy Android application and by the public website at cosmofyapp.com.

Cosmofy is intentionally designed so that salon and client records remain under the stylist’s control. The Android application does not maintain a Cosmofy cloud account or server-based copy of salon records.

1. Information Stored in the Cosmofy Android App

Cosmofy allows a stylist to enter and maintain information needed to operate a salon business. Depending on how the app is used, this may include client names, preferred names and pronouns, phone numbers, email addresses, postal addresses, birthdays, notes, sensitivities, consent records, photographs, appointments, waitlist entries, service history, formulas, formula templates, haircut and treatment records, checkout records, payment-method labels, income, expenses, receipt images, Daily Close records, inventory information, reports, stylist/business profile information, and other salon records.

This information is stored locally in Cosmofy’s app-private storage on the Android device. Business records are maintained in Cosmofy’s local database. Photographs and certain attachments are maintained as app-private files associated with those records.

Cosmofy also stores local application preferences such as onboarding status, display and scheduling preferences, notification settings, biometric-lock configuration, privacy settings, and User Data Agreement acceptance information.

2. Information Cosmofy Does Not Automatically Transmit

The current Cosmofy Android application does not have Android’s INTERNET permission and does not contain functionality for automatically transmitting salon or client records to Cosmofy-operated servers.

Cosmofy does not currently use analytics, advertising, behavioral tracking, remote telemetry, cloud synchronization, remote crash-reporting services, or remote configuration services.

Cosmofy does not maintain a user account system, cloud login, social login, or remote authentication service.

There is no Cosmofy-operated server copy of the salon database that can be retrieved if the device and the user’s backups are lost.

3. Contacts and Location

Cosmofy does not read from or write to the Android Contacts database and does not request Android Contacts permission.

Client names, telephone numbers, email addresses, addresses, and similar information are entered by the stylist rather than imported from the device’s contact list.

Cosmofy does not request or collect precise location, approximate location, GPS information, or other device-location information.

4. Photographs

Cosmofy can allow the user to add photographs to salon records.

When a photograph is selected through Android’s system photo-selection tools, Cosmofy copies the selected image into its own private application storage.

When the user chooses to take a photograph, Cosmofy delegates camera capture to an appropriate camera application through Android. Cosmofy does not request direct Android Camera permission.

Photographs are not automatically uploaded by Cosmofy.

Photographs may leave the device only when the user deliberately performs an action such as creating a backup that includes photographs, sharing or exporting information, or selecting another user-controlled destination.

5. Biometric Security

Cosmofy can optionally use Android’s biometric or device-credential authentication features to protect access to the application.

Fingerprint, facial-recognition, or other biometric templates are processed by Android and supported device security hardware. Cosmofy does not receive or store the user’s fingerprint, facial image, or biometric template.

Cosmofy receives only the authentication result needed to determine whether access should be granted.

The app may locally store whether biometric locking is enabled and related settings such as the selected automatic-lock interval.

6. Financial and Business Records

Cosmofy may store business information such as service prices, sales totals, discounts, taxes, tips, income, expenses, refunds, payment-method labels, Daily Close information, inventory values, and financial reports.

Cosmofy does not currently process payments.

The app does not store full credit-card numbers, expiration dates, CVV codes, bank-account credentials, online-banking passwords, or payment-processor tokens.

A payment method recorded as, for example, “Credit Card,” “Cash,” or “Check” is a bookkeeping label describing how the stylist was paid; it is not a stored payment credential.

7. Notifications

Cosmofy may provide optional local notifications for features such as appointment and birthday reminders.

On Android versions requiring notification permission, Cosmofy requests that permission only for notification functionality.

These reminders are scheduled and generated locally on the device. Cosmofy does not use Firebase Cloud Messaging or another remote push-notification service for these reminders.

Notification privacy settings can limit whether a client’s name appears in notification content.

8. Telephone, SMS, Email, Clipboard, and Sharing

Cosmofy does not automatically telephone, email, or text clients.

When the user chooses a communication action, Cosmofy may open the device’s dialer, SMS application, email application, Android Sharesheet, clipboard, or printing system with information selected by the user.

The user remains in control of whether the communication, sharing, printing, or other external action is completed.

Once information is deliberately transferred to another application or service selected by the user, that application or service operates under its own privacy practices.

9. Backups

Cosmofy allows the user to create manual backups.

Cosmofy backups contain the salon database and may include app-stored photographs and attachments when the user chooses to include them.

Backups are encrypted using AES-256-GCM. The encryption key is generated and maintained through Android Keystore and is not uploaded to Cosmofy.

The user chooses the backup destination using Android’s storage-selection system.

Depending on the applications installed on the device, Android may offer destinations such as local device storage or third-party storage providers. Cosmofy does not contain direct Google Drive, Dropbox, or similar cloud-storage integration. If the user deliberately chooses a third-party storage provider through Android, that provider is responsible for its own handling of the backup file.

Cosmofy does not receive a separate copy of the user’s backup.

Application preferences such as biometric-lock settings, notification settings, and User Data Agreement acceptance records are not included in Cosmofy’s salon-data backup.

10. Android Automatic Backup

Cosmofy explicitly disables Android’s automatic application backup functionality.

The application is configured with Android automatic backup disabled so the operating system is not authorized by Cosmofy’s application configuration to automatically place Cosmofy application data into Android’s normal cloud-backup or device-transfer mechanism.

Manual Cosmofy backups remain under the user’s control as described above.

11. Exports and Reports

Cosmofy can generate information such as CSV or PDF reports from locally stored business records.

Exports are different from Cosmofy backups. They are intended for viewing, printing, accounting, recordkeeping, or sharing and are not complete restorable copies of the Cosmofy database.

Exports and reports are created locally and are provided to Android’s sharing or printing systems only after the user initiates that action.

Cosmofy does not automatically send those exports to another party.

12. Data Retention

Cosmofy does not currently impose an automatic expiration period on salon records.

Records generally remain on the device until the user edits or deletes them, deletes all Cosmofy application data, or removes the application or its data through Android.

The user is responsible for determining the retention period appropriate for their business and legal obligations.

13. Deleting Information

Cosmofy provides mechanisms for deleting information from the app.

A user can delete individual records and photographs and can use the application’s full-data deletion functionality to remove the local Cosmofy database, app-stored files and attachments, and local application preferences.

When a client has financial history that must remain connected to Cosmofy’s internal financial ledger, deleting that client’s personal information may preserve the associated financial record while removing or replacing identifying client information.

Using Delete all app data removes Cosmofy’s locally stored salon records, photographs and attachments, preferences, onboarding state, and User Data Agreement acceptance information from that installation.

Cosmofy cannot delete copies that the user previously exported, printed, shared, or backed up to another location. Those copies must be managed by the user through the destination where they were stored.

14. User Data Agreement Acceptance Record

Cosmofy locally stores information showing acceptance of the current User Data Responsibility & Limitation of Liability Agreement.

That local record may include the agreement identifier, agreement version, effective date, acceptance date and time, application version and build information, and a cryptographic identifier of the agreement text.

This acceptance information remains on the device and is not transmitted to a Cosmofy server.

The User Data Responsibility & Limitation of Liability Agreement is a separate document and does not replace this Privacy Policy.

15. Advertising, Tracking, and Sale of Information

Cosmofy does not currently contain advertising or ad-network software.

Cosmofy does not use advertising identifiers, analytics identifiers, or persistent device identifiers for behavioral tracking.

Cosmofy does not sell salon or client information and does not share salon or client information with third parties for cross-context behavioral advertising.

16. Children

Cosmofy is a business-management application intended for salon professionals and is not designed as a service directed to children.

Because Cosmofy does not maintain a server copy of salon records, Cosmofy does not operate a remote service that collects client records from children.

A stylist may nevertheless enter information about clients in the course of their business. The stylist is responsible for ensuring that information entered into Cosmofy is collected and used lawfully.

17. The Cosmofy Website

The public website at cosmofyapp.com is separate from the local data stored within the Cosmofy Android application.

The current website does not use Cosmofy-operated analytics, advertising trackers, or intentional marketing cookies and does not currently host a form that stores visitor-submitted information.

The website is hosted using GitHub Pages. GitHub may independently process ordinary hosting and infrastructure information according to GitHub’s own policies.

Selecting an email link or another external-service link may open a service operated by another provider. That provider’s privacy practices apply to information the user chooses to provide there.

18. Third-Party Applications and Services Chosen by the User

Android allows users to choose external applications or services for activities such as photography, email, SMS, telephone calls, file storage, printing, backup destinations, and sharing.

When the user deliberately sends information from Cosmofy to one of those applications or services, Cosmofy no longer controls how that outside provider handles the information.

Users should review the privacy practices of services they choose for backups, sharing, communication, or storage.

19. Security

Cosmofy uses Android app-private storage for its local information.

Manual Cosmofy backups use authenticated encryption, and backup encryption keys are maintained through Android Keystore.

Optional biometric or device-credential locking can provide an additional local access control.

No software or storage system can guarantee absolute security. Users remain responsible for securing their Android device, protecting their backup destinations, and maintaining appropriate backups.

20. Changes to This Privacy Policy

Cosmofy may update this Privacy Policy when the application, website, data practices, or applicable requirements change.

When the policy is materially revised, the Effective Date and Privacy Policy Version should be updated.

Future features such as cloud synchronization, user accounts, analytics, online payments, remote crash reporting, or other network-connected services would require this Privacy Policy to be reviewed and updated before those features are released.

21. Contact

Questions regarding this Privacy Policy may be directed to:

Cosmofy
Email: dkeding1@gmail.com

The current Privacy Policy is also available through the Cosmofy website.

Effective Date: August 14, 2026
Privacy Policy Version: 1.0