Skip to content
CosmoCrew

Privacy Policy

Last Updated: May 2026

Protecting your personal data and your family's data is of utmost importance to us. This Privacy Policy explains what information we (Devise Digital s. r. o.) collect when you use the "CosmoCrew" app, how we process it, and what your rights are.

CosmoCrew is designed for families. We have built the app so that children do not need an email address, real name, or password to use it.

1. Data Controller

The entity responsible for data processing is:

Devise Digital s. r. o.
Koceľova 937/9
821 08 Bratislava
Slovakia
Company Registration Number (IČO): 57294623
Email: office@dedi.sk

2. What data we collect and why

a) Parent / Guardian Accounts

To create a family in the app, parents or legal guardians must register.

  • Data collected: Email address and authentication tokens (Apple Login or Google Login).
  • Purpose: Managing the family account, syncing data across devices, and ensuring account security.

b) Child Profiles

Children do not need their own accounts. They are created by the parents as profiles within the secure family environment.

  • Data collected: A display name of your choice (a nickname is perfectly fine) and their progress in missions (completed tasks, collected treasures). Children log in to their devices anonymously using a QR code.
  • Purpose: Assigning tasks and rewards within your family unit.

c) Photo Proofs (Optional)

  • Data collected: Photos that children voluntarily take and upload as proof of completed missions.
  • Purpose & Storage: These photos are solely for internal family communication. They are stored securely in our cloud infrastructure and can only be viewed by linked family members. You can delete these photos at any time within the app.

d) Technical Data & Push Notifications

  • Data collected: Device IDs (push tokens) for sending notifications, IP addresses for basic server communication.
  • Purpose: Sending relevant app notifications (e.g., "Mission completed").

3. Third-Party Services (Google Firebase)

To provide the technical infrastructure, database, file storage, and authentication, we use Google Firebase (provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Firebase processes data on our behalf in strict compliance with GDPR guidelines. We use Firebase for:

  • Firebase Authentication: For secure logins (Apple / Google).
  • Firestore / Realtime Database: To store your family missions and profiles.
  • Firebase Cloud Storage: To securely store the optional photo proofs.
  • Firebase Cloud Messaging: To deliver push notifications.

We DO NOT use Google Analytics, and we do not track your behavior for advertising purposes. The app is completely ad-free.

4. Data Deletion

We retain your data only for as long as your account is active.

  • If you delete your account in the app settings, your profile, all linked child profiles, missions, and uploaded photos will be immediately and irreversibly deleted from our servers.
  • Completed missions and their associated photos can also be manually deleted within the app at any time.

5. Your Rights (GDPR)

You have the right to access, rectify, delete, restrict the processing of, or object to the processing of your personal data, as well as the right to data portability. If you wish to exercise any of these rights or have questions about privacy, please contact us at: office@dedi.sk

If you believe that the processing of your data violates data protection laws, you have the right to lodge a complaint with the competent supervisory authority.