Cosmos Kids
Privacy Policy
Last Updated: 27 May 2026 Effective Date: 27 May 2026
1. Introduction
Cosmos Kids ("we", "our", or "the App"), operated by Cosmos One, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use Cosmos Kids.
Cosmos Kids is a local-first Android tablet app for parent-controlled bedtime routines. The app does not use Cosmos Services, cloud accounts, remote administration, advertising, analytics, subscriptions, AI providers, or a backend control plane in the current implementation.
By using Cosmos Kids, you agree to the practices described in this Privacy Policy.
2. Overview
Cosmos Kids helps parents keep bedtime calm on a child's Android tablet with a parent PIN, bedtime schedule, and morning unlock. At bedtime, it shows a parent PIN wall, can keep approved apps available, and restores normal use in the morning. Everything stays on the tablet, with no account or cloud control required.
Key Points:
- Cosmos Kids stores settings, bedtime state, local bedtime history, and diagnostic logs on the device.
- The parent PIN itself is not stored. The app stores a random salt and a SHA-256 hash of the PIN.
- Cosmos Kids does not request the Android
INTERNETpermission. - Cosmos Kids does not use ads, analytics SDKs, cloud sync, in-app billing SDKs, subscriptions, AI models, or Google OAuth.
- If Cosmos Kids is sold as a one-time paid app, purchase and payment details are handled by the app store, not by Cosmos Kids.
- Cosmos One does not automatically receive your child's tablet data.
- Data leaves the device only when a parent chooses to share logs or send a support email from the debug screen, or when Android/Google platform services operate outside the app.
- You can delete local app data by clearing app storage or uninstalling Cosmos Kids.
3. Information We Collect
3.1 Information You Provide or Create
Cosmos Kids stores the following information locally on the device:
| Information | Purpose | Stored Where |
|---|---|---|
| Parent PIN salt and hash | Verify parent access without storing the PIN itself | App-private SharedPreferences |
| Bedtime schedule | Know when bedtime starts and when normal use resumes | App-private SharedPreferences |
| Approved bedtime app package names | Allow selected apps during bedtime | App-private SharedPreferences |
| Tonight-only overrides | Skip bedtime tonight or use a one-night custom window | App-private SharedPreferences |
| Temporary pass state | Track parent-approved extra time | App-private SharedPreferences |
| Support messages typed by a parent | Prepare issue or feature request emails | Sent only through the parent-selected email app |
3.2 Automatically Collected Locally
Cosmos Kids records limited local operational information so bedtime enforcement can work and parents can troubleshoot problems:
| Information | Purpose | Retention |
|---|---|---|
| Bedtime event timestamps and occurrence IDs | Show recent bedtime activity and support troubleshooting | Up to 100 events and up to 14 days |
| Event type, source, and summary code | Explain what happened, such as lock started or temporary pass granted | Up to 100 events and up to 14 days |
| Optional package names for allowed-app launches or blocked-app redirects | Confirm which app was allowed or redirected during active bedtime | Up to 100 events and up to 14 days |
| App logs | Support reliability and troubleshooting | Up to 5 log files, each up to 512 KB, with files older than 7 days pruned |
| Debug logging enabled state and enabled timestamp | Auto-disable detailed debug logs after 24 hours | Until disabled or expired |
| Device metadata in support archives | Help support diagnose issues | Created only when a parent shares or reports an issue |
Device metadata in support archives may include manufacturer, model, Android version, API level, app version, build type, and timestamp.
3.3 Information We Do Not Collect
Cosmos Kids does not collect or transmit:
- Google account data or login credentials.
- Email address, unless a parent sends a support email.
- Location data.
- Photos, videos, microphone recordings, or contacts.
- Messages, passwords, typed text, browser pages, browser URLs, or search terms.
- Continuous usage timelines.
- Advertising identifiers.
- Payment information. Paid app purchases are processed by the relevant app store.
- Remote account profiles.
The Accessibility service is configured with canRetrieveWindowContent=false and is designed to use window/package change events only during active bedtime.
4. Permissions We Request
Cosmos Kids requests Android permissions and user-grantable settings only to support local bedtime enforcement.
| Permission or Setting | Purpose | Required |
|---|---|---|
RECEIVE_BOOT_COMPLETED |
Re-check bedtime state after the tablet restarts | Required for reliable bedtime recovery |
SCHEDULE_EXACT_ALARM |
Schedule bedtime start, pass expiry, and morning unlock transitions | Required for accurate scheduling on supported devices |
POST_NOTIFICATIONS |
Show bedtime and enforcement notifications | Required on newer Android versions for notification fallback |
USE_FULL_SCREEN_INTENT |
Bring the bedtime screen back from full-screen alert fallback paths | Required for stronger background relaunch |
FOREGROUND_SERVICE |
Run active bedtime enforcement while bedtime is active | Required for foreground enforcement |
FOREGROUND_SERVICE_SPECIAL_USE |
Declare the special-use bedtime enforcement service type | Required for active bedtime enforcement |
PACKAGE_USAGE_STATS / App Activity Access |
Read the current foreground package during active bedtime as a backup watchdog | Optional but recommended |
| Accessibility service / Bedtime Blocker | Detect when a non-approved app or Settings appears during active bedtime and return to the parent PIN wall | Optional but recommended |
| Device Admin | Turn the screen off when bedtime starts and add uninstall friction | Optional |
| Package visibility query for launchable apps | List installed launchable apps so parents can choose approved bedtime apps | Required for the allowlist UI |
Cosmos Kids does not request the Android INTERNET permission.
4.1 Foreground Services
Cosmos Kids includes a specialUse foreground service that runs only while bedtime is active. It keeps an ongoing bedtime notification, listens for screen and unlock events, and reopens the parent PIN wall when active bedtime should still be enforced.
5. How We Use Your Information
5.1 Core Functionality
We use locally stored information to:
- Verify the parent PIN.
- Apply the recurring bedtime schedule.
- Show the parent dashboard and bedtime lock screen.
- Allow parent-approved apps during bedtime.
- Grant temporary screen-time passes.
- Unlock the current bedtime occurrence until morning when approved by a parent.
- Apply tonight-only exceptions.
- Reassert the parent PIN wall after app switches, unlocks, boot, or other recovery events.
- Show recent bedtime activity to parents.
- Prepare diagnostic information only when a parent chooses to share it.
5.2 We Do Not Use Your Data For
We do not use Cosmos Kids data for:
- Advertising or ad personalisation.
- Analytics tracking.
- Profiling children or parents.
- Machine learning or AI model training.
- Selling or renting data.
- Remote monitoring by Cosmos One.
- Cloud sync or server-side policy enforcement.
6. Data Storage and Security
6.1 Storage Architecture
Cosmos Kids does not transmit bedtime settings, parent PIN data, allowed-app lists, bedtime state, or bedtime history to Cosmos One servers.
| Component | Location | Protection |
|---|---|---|
| Parent PIN salt and hash | App-private SharedPreferences |
PIN is salted and hashed with SHA-256; PIN value is not stored |
| Bedtime settings and allowed apps | App-private SharedPreferences |
Android app sandbox and device file-based encryption where available |
| Active bedtime state and temporary passes | App-private SharedPreferences |
Android app sandbox and device file-based encryption where available |
| Tonight-only overrides | App-private SharedPreferences |
Android app sandbox and device file-based encryption where available |
| Local bedtime history | App-private SharedPreferences |
Limited retention and sanitised fields |
| Debug logging setting | App-private SharedPreferences |
Debug logs auto-disable after 24 hours |
| Log files | App-private files directory | Rotating files with size and age limits |
| Diagnostic ZIP archives | App cache directory | Created only for parent-initiated sharing or issue reports |
Android backups and device-transfer extraction are disabled for app data through the app manifest and XML backup rules.
6.2 Security Measures
Cosmos Kids uses:
- Android app-private storage.
- Android device file-based encryption where supported by the device.
- Salted SHA-256 PIN hashing rather than storing the parent PIN directly.
- Retention limits for bedtime history and logs.
- Local-only settings and state storage.
- No automatic cloud upload.
- No network permission in the Android manifest.
- Accessibility configuration that does not retrieve window content.
- Parent authentication before access to the dashboard and debug logging screen.
Cosmos Kids does not currently use database-level encryption or Android Keystore-backed encrypted preferences.
7. Data Sharing and Disclosure
7.1 Data Not Shared Automatically
Cosmos Kids does not automatically share bedtime settings, PIN hashes, app allowlists, bedtime events, diagnostic logs, or device data with Cosmos One or third-party cloud services.
7.2 Third-Party Sharing Table
| Third Party | When Data Is Shared | Data Shared |
|---|---|---|
| Google Play and Android platform services | When Android installs, updates, runs, grants permissions, or processes a paid app purchase | Platform-level install, device, crash, permission, purchase, and usage information handled by Google/Android outside Cosmos Kids |
| Parent-selected email or share apps | Only when a parent chooses to send an issue report, feature request, or diagnostic ZIP | Parent message, diagnostic ZIP, device metadata, and optionally local bedtime events |
| Open-source Android libraries | Run inside the app | No data is transmitted by these libraries as configured in Cosmos Kids |
7.3 User-Initiated Sharing
A parent can choose to:
- Share a diagnostic ZIP archive.
- Send an issue report by email with a diagnostic ZIP attached.
- Send a feature request by email without logs attached.
These actions use Android share or email intents. The selected external app or email provider processes the shared content under its own terms and privacy policy.
7.4 Legal Disclosure
We may disclose information if required by law, court order, or a lawful government request. Because Cosmos Kids is local-first and has no backend account data in the current implementation, Cosmos One generally does not hold app data unless a parent has explicitly sent it to us.
We do not sell personal information, share data with data brokers, or provide app data to advertisers.
8. Third-Party Services
Cosmos Kids does not use third-party cloud APIs, advertising SDKs, analytics SDKs, billing SDKs, AI providers, or Cosmos Services in the current implementation.
| Service or Provider | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Google Play and Android platform services | App distribution, paid app purchase processing, Android permissions, notifications, accessibility settings, usage access settings, alarms, and operating-system services | Platform-level data handled by Google/Android outside the app | https://policies.google.com/privacy |
| Parent-selected email or share apps | Optional support, feature request, and diagnostic sharing initiated by a parent | Only the content the parent chooses to send | Depends on the selected app or provider |
| Open-source Android libraries, including AndroidX, Jetpack Compose, Hilt, Kotlin coroutines, and Timber | App UI, dependency injection, asynchronous work, and local logging | No data transmitted by these libraries as configured | Individual open-source project licences and notices |
9. Data Retention and Deletion
9.1 Retention Table
| Data | Retention | How to Delete |
|---|---|---|
| Parent PIN salt and hash | Until changed, app data is cleared, or app is uninstalled | Change PIN, clear app storage, or uninstall |
| Bedtime schedule and allowed apps | Until changed, app data is cleared, or app is uninstalled | Edit settings, clear app storage, or uninstall |
| Active bedtime state and temporary passes | Until replaced, cleared, expired, app data is cleared, or app is uninstalled | Let bedtime expire, clear state through parent actions, clear app storage, or uninstall |
| Tonight-only overrides | Until cleared, expired, app data is cleared, or app is uninstalled | Clear override, wait for expiry, clear app storage, or uninstall |
| Local bedtime history | Up to 100 events and up to 14 days | Clear app storage or uninstall |
| Logs | Up to 5 files, each up to 512 KB; files older than 7 days are pruned | Clear logs in the debug screen, clear app storage, or uninstall |
| Debug logging enabled state | Until disabled or automatically expired after 24 hours | Disable debug logging, wait for expiry, clear app storage, or uninstall |
| Diagnostic ZIP archives | Created in app cache for sharing | Clear app cache/storage, uninstall, or rely on Android cache cleanup |
9.2 Deletion Instructions
Because Cosmos Kids does not use server-side accounts in the current implementation, deletion is handled on the Android device:
- Open Android Settings.
- Go to Apps.
- Select Cosmos Kids.
- Choose Storage.
- Tap Clear Storage or Clear Data.
You can also uninstall Cosmos Kids to remove its local app data. Diagnostic files already sent through an external email or share app must be managed through that external provider.
10. Your Privacy Rights
Depending on where you live, you may have rights to access, correct, delete, export, object to, or restrict processing of personal information.
For Cosmos Kids, most rights can be exercised directly on the device because the app stores data locally:
- Access: view settings, recent bedtime activity, and debug logs in the app.
- Correction: update bedtime settings, approved apps, and parent PIN in the app.
- Deletion: clear app storage or uninstall Cosmos Kids.
- Export: share diagnostic logs only when a parent chooses to do so.
- Objection or restriction: disable optional permissions such as Accessibility, Usage Access, Device Admin, notifications, or debug logging.
You can contact us at support@cosmosone.cloud if you need help understanding or exercising privacy rights.
10.1 GDPR
Cosmos Kids does not currently process app data on Cosmos One servers. Optional support emails or diagnostic files sent to Cosmos One are processed for support purposes.
10.2 CCPA
Cosmos Kids does not sell or share personal information for cross-context behavioural advertising. The app does not use ads or analytics in the current implementation.
11. Children's Privacy
Cosmos Kids is intended for use by parents or guardians who are at least 13 years old. Children may interact with the bedtime screen on a family tablet, but parent-controlled features require the parent PIN.
Cosmos Kids does not knowingly collect personal information from children under 13 on Cosmos One servers. The app does not include ads, social features, public profiles, location tracking, messaging, or in-app purchases.
If you believe a child has sent personal information to Cosmos One through a support email or diagnostic report, contact us and we will help delete it where reasonably possible.
12. International Data Transfers
Cosmos Kids does not automatically transfer app data internationally because it does not use a backend server or network permission in the current implementation.
International processing may occur outside Cosmos Kids when:
- Google Play or Android platform services process platform-level information under Google's policies.
- Google Play or another app store processes a paid app purchase under that store's policies.
- A parent uses an external email or share app to send support messages or diagnostic files.
- Cosmos One receives a support email or diagnostic file from a parent.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the Last Updated date at the top of this document. If changes are significant, we may provide notice in the app or on our website.
Continued use of Cosmos Kids after changes means you accept the updated Privacy Policy.
14. Contact Information
Email: support@cosmosone.cloud
Subject Line: Cosmos Kids Privacy
Website: https://cosmosone.cloud
Response Time: Within 5 business days
15. Summary
| Aspect | Details |
|---|---|
| App type | Offline Android app |
| Backend | None in the current implementation |
| Accounts | No cloud accounts or Google OAuth |
| Parent authentication | Local parent PIN with salted SHA-256 hash |
| Main storage | App-private Android storage |
| Network permission | No INTERNET permission requested |
| Ads | None |
| Analytics | None |
| Billing | One-time paid app purchase may be handled by the app store; no in-app billing SDK or subscriptions |
| AI models | None |
| Sharing | Only parent-initiated support or diagnostic sharing |
| Deletion | Clear app storage or uninstall |