VBRA

Privacy Policy

Effective date: February 11, 2026

1. Who We Are

VBRA is developed and operated by CosmicFeel (“we,” “us,” or “our”). We are committed to protecting your privacy and handling your data responsibly.

Contact: hello@cosmicfeel.com

2. Data We Collect

We collect only the minimum data necessary to provide the VBRA service:

  • Check-in data — mood, energy, sleep, and stress scores you enter during daily check-ins.
  • Archetype quiz responses — answers you provide during the initial archetype assessment.
  • App usage data — anonymous usage patterns (e.g., feature usage frequency) to improve the product.
  • Device information — device model, OS version, and app version for compatibility and debugging.
  • Authentication data — your Apple ID identifier (via Sign in with Apple) or Firebase Authentication credentials for account management and data sync.

We do not collect your name, email address, phone number, location, contacts, photos, or any health data governed by Apple HealthKit.

3. How We Use Your Data

  • To provide personalized recommendations based on your archetype and check-in history.
  • To display trend analysis and wellbeing patterns over time.
  • To sync your data across your devices via your authenticated account.
  • To improve the app experience through anonymous, aggregated analytics.
  • To manage your subscription and restore purchases.

4. Data Storage and Security

Your check-in data is stored locally on your device and synced to our secure cloud infrastructure (Firebase/Google Cloud Platform) only when you are signed in. All data in transit is encrypted using TLS 1.2+. Data at rest is encrypted using AES-256 encryption.

We do not store your data in plaintext. Access to production databases is restricted to authorized personnel only.

5. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We do not serve advertisements. We may share anonymized, aggregated data for research purposes (e.g., “average check-in completion rate”) but never individual user data.

We use the following third-party services:

  • Firebase Authentication — for secure sign-in and account management.
  • Firebase Cloud Firestore — for data sync across devices.
  • Apple StoreKit / App Store — for subscription management and payment processing.

These services process data under their own privacy policies and in compliance with applicable data protection regulations.

6. Your Rights

You have the right to:

  • Access your data — view all your check-in history within the app.
  • Delete your data — delete your account and all associated data from within the app or by contacting us.
  • Export your data — request a copy of your data by contacting us.
  • Withdraw consent — stop using the app at any time; no data is collected when the app is not in use.

To exercise any of these rights, contact us at hello@cosmicfeel.com. We will respond within 30 days.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data is permanently deleted from our servers within 30 days. Anonymous, aggregated analytics data may be retained indefinitely.

8. Children's Privacy

VBRA is not intended for children under 13. We do not knowingly collect data from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

9. European Users (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the following additional provisions apply:

  • Legal basis for processing: We process your personal data based on (a) your consent when you create an account and submit check-in data, (b) the necessity to perform our contract with you (providing the VBRA service), and (c) our legitimate interest in improving the app through anonymous analytics.
  • Data transfers: Your data may be transferred to and processed in the United States via Firebase (Google Cloud Platform). These transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of data protection.
  • Additional rights: In addition to the rights listed in Section 6, you have the right to (a) restrict processing of your data, (b) object to processing based on legitimate interest, (c) data portability, and (d) lodge a complaint with your local data protection authority.
  • Retention: We retain your data only as long as necessary for the purposes described in this policy. See Section 7 for specific retention periods.

10. California Users (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:

  • Right to know: You may request the categories and specific pieces of personal information we have collected about you. See Section 2 for a full list.
  • Right to delete: You may request deletion of your personal information. See Section 6 for how to exercise this right.
  • Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.
  • We do not sell your personal information. We have not sold personal information in the preceding 12 months and do not intend to do so. We do not share personal information for cross-context behavioral advertising.

To exercise your CCPA rights, contact us at hello@cosmicfeel.com. We will verify your identity and respond within 45 days.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions or concerns about this Privacy Policy, contact us:

Email: hello@cosmicfeel.com

Developer: CosmicFeel