Privacy Policy
Last updated: 28 August 2026
QOSMO is operated by DAVILEX SOFT S.R.L., a company registered in Romania ("we", "us"). We are the data controller for the personal data described here.
Contact: david@qosmoapp.com
This policy explains what QOSMO collects, why, who it is shared with, and what control you have over it. We have tried to write it plainly rather than defensively, because you are trusting us with information about something private and often difficult.
1. The short version
- Your recovery data — streaks, urges, relapses, journal entries — is private to your account. Nobody else using QOSMO can see it.
- We never see your browsing history. The content blocker runs entirely on your device through Apple's Screen Time system. We cannot see which sites you visit, which sites are blocked, or which apps you choose to block.
- We do not sell your data. We do not run advertising.
- You can delete your account and all of it from inside the app, at any time.
2. Information we collect
2.1 Account information
| Data | Why |
|---|---|
| An anonymous account identifier | Created when you first open QOSMO, so your data has somewhere to live before you sign in |
| Email address | If you sign in with email, Apple or Google |
| Name | Taken from your onboarding answers. Shown to you inside the app only — never beside your community posts |
| A community handle | A name we generate for you, such as "QuietFox42". This, and only this, is what other users see |
If you sign in with Apple and use Hide My Email, we only ever receive Apple's relay address, not your real one.
2.2 Profile information
Age, gender, sexual orientation (optional), religious content preference (optional, used to select prayer content), profile photo (optional), and the recovery goals you choose to track.
2.3 Recovery information
This is the core of the app and the most sensitive data we hold:
- Streak start date, current streak, best streak
- Relapse logs — date, and the trigger, time of day, feeling and goal you record
- Urge logs — intensity, trigger, whether you were alone, how you responded
- Daily pledges and daily protocol completion
- Journal entries, in your own words
- Lesson and quiz progress
2.4 Community information
Posts, comments, likes, views and follows. Anything you post in the community is visible to every other signed-in QOSMO user.
Posts and comments carry a handle we generate for you — never your real name, and never your email. You can change your handle at any time in Edit Profile, though posts you have already made keep the handle they were published under.
Please do not post anything you would not want another user to read, and avoid including details that would identify you.
2.5 Device and technical information
A push notification token, your platform, device name and model — used only to deliver notifications you have enabled.
2.6 Subscription information
Your subscription status and purchase history, through RevenueCat. Payment is handled entirely by Apple. We never receive or store your card details.
2.7 What we deliberately do not collect
- Browsing history. The blocker applies Apple's own adult-content filter via the Screen Time system. Filtering happens on your device and Apple does not report back to us what was blocked or visited.
- Which apps you block. Apple's picker returns opaque identifiers that only Apple's own frameworks can interpret. Your selection never leaves your device and is meaningless to us.
- Camera images. The panic screen may use your front camera to produce a blurred background effect. Nothing is recorded, stored or transmitted.
3. Special category data
Some of what QOSMO holds is "special category" data under Article 9 of the GDPR, which carries stronger protection:
- Data concerning your sex life — urge and relapse logs are inherently about sexual behaviour
- Sexual orientation — if you choose to provide it
- Religious beliefs — if you choose a religious content preference
We process this on the basis of your explicit consent, given when you create an account and record this information. You may withdraw consent at any time by deleting the relevant entries or your entire account. Withdrawal does not affect processing carried out before you withdrew.
Orientation and religious preference are optional. You can use QOSMO fully without providing either.
4. Legal bases
| Purpose | Basis |
|---|---|
| Providing the app and your account | Performance of a contract — Art. 6(1)(b) |
| Recovery, orientation and religious data | Explicit consent — Art. 9(2)(a) |
| Managing your subscription | Performance of a contract — Art. 6(1)(b) |
| Keeping the service secure and preventing abuse | Legitimate interests — Art. 6(1)(f) |
| Notifications you switch on | Consent — Art. 6(1)(a) |
5. Who your data is shared with
We do not sell your data or share it for advertising. We use these processors:
| Processor | Purpose | Location |
|---|---|---|
| Google (Firebase) | Authentication and database | EU / US |
| RevenueCat | Subscription management | US |
| Superwall | Displaying subscription offers | US |
| Expo | Delivering push notifications | US |
| Apple | Sign-in and payment processing | US / EU |
Transfers outside the EEA rely on the European Commission's Standard Contractual Clauses.
We may also disclose data where legally required, or where necessary to protect someone's life or safety.
6. How long we keep it
Your data is kept while your account exists. Deleting your account removes your profile, streaks, urge and relapse logs, journal entries, pledges, protocol history, lesson progress and push tokens.
Two things to be aware of:
- Community posts and comments may remain visible after account deletion, as they form part of other users' conversations. Delete them individually first if you want them gone.
- Backups may retain copies for up to 30 days before being overwritten.
7. Your rights
Under the GDPR you may request access to your data, correction, erasure, restriction of processing, portability, or object to processing. You may withdraw consent at any time.
The fastest route for most of these is in the app: Settings → Delete account removes your data immediately. For anything else, email david@qosmoapp.com. We will respond within 30 days.
If you are unhappy with how we handle your data you may complain to the Romanian supervisory authority, ANSPDCP (www.dataprotection.ro), or to the authority in your own country.
8. Security
Data is stored in Google Firebase and protected by server-side security rules that restrict every user's data to that user alone. Access is authenticated, and transfers are encrypted in transit.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects your data we will notify you and the relevant authority as required.
9. Children
QOSMO is intended for adults and is rated 17+ on the App Store. It is not for anyone under 16. We do not knowingly collect data from children. If you believe a child has provided us with data, contact david@qosmoapp.com and we will delete it.
10. Changes
We may update this policy. Material changes will be notified in the app or by email. The date at the top always reflects the current version.
11. Contact
DAVILEX SOFT S.R.L. Email: david@qosmoapp.com