Privacy Policy

01 Information We Collect

We collect what COSI needs to keep your space comfortable. Health and wearable data is optional: COSI only reads it if you connect a health app or watch and give permission.

02 How We Use It

• To run COSI: show your Comfort Score, control your devices, and run the schedules, routines and Comfort Wake you set up
• Automatic adjustments: if you say yes to “Can COSI adjust your home automatically?”, COSI compares your body signals with your own normal to tell when you're running warm, cool or stressed, and adjusts your temperature and lights. If you say no, body data is only shown to you and used for Comfort Wake
• To learn your preferences from your feedback and the changes you make, and suggest routines (nothing runs until you say yes)
• To improve COSI for everyone using anonymous comfort data (see section 6)
• To manage your plan, answer support requests, keep COSI secure and prevent abuse
• To send notifications you've allowed (for example, comfort alerts or a connection that needs attention)
• To meet legal obligations

03 Health Data & Consent

• Apple Health / Health Connect: with your permission, COSI reads (never writes) the health types listed in section 1. On iPhone it can read new data in the background. You choose which types to share, and can change this anytime in the Health app or Health Connect
• Fitbit and Pixel Watch (Google Health API): if you connect them, you sign in with Google and COSI reads, read-only: skin temperature and its nightly deviation, heart rate variability, resting heart rate, heart rate, sleep and workouts. You can disconnect in COSI, which also revokes COSI's access at Google. COSI's use of data from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements
• We ask for your explicit consent before using health data to adjust your home, and you can withdraw it anytime (Profile → Automatic adjustments)
• Health data is never pooled with other users' data, never sold, never used for advertising, and never used to train general AI models
• If you live in Washington, Nevada or another state with a consumer health data law, see our Consumer Health Data Policy

04 Location, Microphone & Bluetooth

• Microphone (optional): COSI measures how loud your room is, on your phone. Audio is never recorded, stored or sent — only a loudness number (decibels) is used
• Bluetooth: used to find and control nearby devices, such as Govee lights over Bluetooth
• Location: only on Android 11 and older, where Android requires location permission to scan for Bluetooth devices. COSI doesn't read, store or send your location
• You can turn any of these off in your phone's settings; the rest of COSI keeps working

05 Who We Share Data With

We use a small number of service providers to run COSI. They process data on our behalf and only for that purpose.

• Google Firebase / Google Cloud — hosting, database, sign-in, backend functions, analytics, crash reports and push notifications. Data is stored on Google servers in the United States
• Apple, Google Play and RevenueCat — subscriptions are bought and billed through the App Store or Google Play; RevenueCat tells COSI which plan you have. They receive your account ID and plan status, never health or comfort data
• Smart home services you connect (Govee, Google Nest, Sensibo) — COSI sends them the commands needed to control your devices and receives your devices' status. No health data is sent
• Apple Health, Health Connect and Google (Fitbit / Pixel Watch) — COSI reads data from them with your permission; COSI never writes data back
• Zite — hosts the waitlist form on our website (email, first name and how you heard about COSI)
• Our email provider — when you email us for support
• Friends and guests: if you turn on “Share Comfort Score”, friends you've accepted can see your overall score — not the health readings behind it
• We may disclose information if required by law, to protect someone's safety, or as part of a merger or sale of the business (we'd tell you first)

06 Anonymous Comfort Data

To make COSI more comfortable for everyone, each time you tell COSI a room feels too warm, too cold or just right, that answer, the room temperature, whether it was day or night and whether you run hot or cold are added to an anonymous summary shared across users. The summary only keeps typical comfortable temperatures for groups of at least 5 people, and never includes your name, email, account, location or any health or wearable data. It is stored privately and never sold. You agree to this when you accept this policy at sign-up, and you can turn it off anytime in Profile → Help improve COSI; your answers then stop being added.

07 Storage, Transfers & Security

• Data is encrypted in transit and at rest on Google Cloud (Firebase)
• Security rules limit your data to you: other users can't read it, and COSI staff access it only to provide support or fix problems
• Device connection keys and Google sign-in tokens are stored encrypted; passwords are handled by Firebase Authentication and never stored by us
• International transfers: COSI is based in Quebec, Canada, and your data is stored in the United States. It may therefore be subject to the laws of the United States. We protect it there with the same safeguards described here
• Data breaches: if a breach puts your information at risk, we'll notify you and the authorities as the law requires — including the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, and, for health data of U.S. users, the U.S. Federal Trade Commission under its Health Breach Notification Rule

08 Your Rights

Wherever you live, you can:

To make a request, email hello@cosicomfort.com. We'll confirm it's you and reply within 30 days. We won't treat you differently for using your rights.

09 How Long We Keep Data

• We keep your data while your account is open
• When you delete your account, we delete your account and its data right away, and remove you from other users' friend lists, guest lists and shared rooms. Copies in routine backups, if any, expire within 30 days
• We may delete older detailed logs (such as raw health readings and automation history) once they’re no longer needed
• Anonymous comfort statistics (section 6) contain no personal information and may be kept to keep improving COSI
• We keep records we're legally required to keep (for example, for tax or accounting) for as long as the law requires

10 Children

COSI is not directed at children. You must be at least 16 to use COSI, and we don't knowingly collect personal information from anyone under 16. If you believe a child has given us information, email us and we'll delete it.

11 Canada & Quebec

COSI follows Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25) and Canada's PIPEDA. Our person in charge of the protection of personal information is Noah Sullivan, Founder, reachable at hello@cosicomfort.com. You can ask to access or correct your information, withdraw consent, or ask how it's used. If you're not satisfied with our answer, you can contact the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

12 U.S. State Privacy Rights

Residents of California and other U.S. states with privacy laws (including Colorado, Connecticut, Virginia, Texas, Oregon and others) have the right to know what personal information we collect and how we use it, to access, correct and delete it, and to get a copy. Health data is “sensitive” under these laws: COSI only processes it with your consent and only to provide the service.

• COSI does not sell personal information, does not “share” it for cross-context behavioral advertising, and does not use it for targeted advertising or profiling with legal effects — so there is nothing to opt out of
• To make a request, email hello@cosicomfort.com with “Privacy Request” in the subject. You can use an authorized agent. We'll respond within 45 days
• If we deny your request, you can appeal by replying with “Appeal” in the subject; we'll answer within the time your state's law sets

13 EEA & UK (GDPR)

• Contract: to provide COSI, your account and your devices
• Consent: for health data (explicit consent under GDPR Article 9(2)(a)), microphone, notifications and anonymous comfort data. You can withdraw consent anytime
• Legitimate interests: to keep COSI secure, fix problems and understand how features are used
• Legal obligation: to keep required records and respond to lawful requests
• You can complain to your local data protection authority (in the EU, see edpb.europa.eu)

14 Changes to This Policy

If we make important changes, we'll tell you in the app or by email before they take effect, and ask for your consent again where the law requires it. The current version is always at cosicomfort.com/privacy.html.

15 Contact Us

Questions, requests or concerns about your privacy: