Privacy Policy

Last updated: May 2026

Cosy Dreams ("we", "our", or "us") is operated by Cosy Dreams Sàrl, Switzerland. This policy explains what information we collect when you use the Cosy Dreams mobile application, how we use it, and your rights.

1. Information We Collect

When you create an account we collect:

• Email address — used to identify your account and send transactional emails.
• Display name — shown inside the app.
• Authentication tokens — provided by Google or Apple when you sign in with those services.

During normal use we collect:

• Favourites — stories and meditations you save.
• Playback progress — how far through an episode you have listened.

We do not collect location data, payment card details, contacts, photos, or any other device data.

2. Children's Privacy

Cosy Dreams is designed for use by children with parental involvement. Accounts must be created by a parent or guardian. We do not knowingly collect personal information directly from children under the applicable digital age of consent in your jurisdiction (16 in most EU countries, 13 in some EU countries and the United States) without verifiable parental consent.

If you believe your child has provided us with personal information without your consent, please contact us at stories@cosydreams.app and we will delete it promptly.

3. How We Use Your Information

• To provide and personalise the app (favourites, progress syncing across devices).
• To authenticate you securely.
• To improve the app's content and performance.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Third-Party Services

We use the following third-party services to operate the app:

• Google Firebase (Authentication, Firestore, Cloud Storage) — stores your account data and app content. Firebase Privacy Policy
• Google Sign-In — optional sign-in method. Google Privacy Policy
• Sign in with Apple — optional sign-in method. Apple Privacy Policy

5. Data Storage and Security

Your data is stored on Google Firebase servers located in Europe (europe-west6, Zürich). We apply industry-standard security measures including encrypted connections (TLS) and role-based access controls. No system is completely secure, and we cannot guarantee absolute security.

6. Data Retention & Account Deletion

We retain your data for as long as your account is active. You can delete your account and all associated data at any time directly within the app: go to Settings → Delete Account. Deletion is processed immediately and is permanent. You may also request deletion by contacting stories@cosydreams.app and we will process the request within 30 days.

7. Your Rights (GDPR / Swiss DPA)

If you are in the European Economic Area or Switzerland, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request erasure of your data.
• Object to or restrict certain processing.
• Receive your data in a portable format.

To exercise any of these rights, contact stories@cosydreams.app.

8. Changes to This Policy

We may update this policy from time to time. For material changes, we will notify you in advance via email or an in-app notice before the changes take effect. We will also update the "Last updated" date at the top of this page.

9. Contact

Cosy Dreams Sàrl
Switzerland
stories@cosydreams.app