Privacy Policy for Cosmo Training App

Last Updated: September 30, 2025

Filisia Interfaces Ltd. ("we", "us", or "our") operates the Cosmo Training mobile application ("App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App, including our integration with the YouTube Data API.

IMPORTANT NOTICE ABOUT YOUTUBE API SERVICES: This App uses YouTube API Services. By using our App's video features (CosmoTube), you are agreeing to be bound by the YouTube Terms of Service. Please also review Google's Privacy Policy at http://www.google.com/policies/privacy, which describes how Google handles information when you use YouTube API Services.

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: Email address and basic profile information when you create an account
• Educational Content: Video preferences and playlists you create for educational purposes
• Support Communications: Messages you send to our support team

1.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: App usage patterns, feature usage, and interaction data
• Performance Data: Crash reports and performance metrics

1.3 YouTube API Services Data

Data We Access and Collect:

• Video Metadata: Video titles, thumbnails, durations, descriptions, and channel names from YouTube's public video database


• Search Queries: The search terms you enter when looking for educational videos (stored temporarily for 24-48 hours to improve search performance)


• Video Identifiers: YouTube video IDs for content you've selected for playlists (stored locally on your device and in our database)


• Playlist Information: Your custom playlists containing YouTube video references (stored in our database associated with your account)

Data We Do NOT Collect or Store:

• Actual video content or files (all videos remain hosted on YouTube)


• Your YouTube account credentials or personal YouTube viewing history


• YouTube comments, likes, subscriptions, or engagement data


• Personal information about video creators


• YouTube analytics or monetization data

Data Sharing with YouTube/Google:
When you use the CosmoTube feature, certain information is automatically shared with Google/YouTube:

• API requests containing search queries are sent to YouTube servers


• Video playback requests containing video IDs


• Device and browser information through YouTube's embedded player


• Your IP address (processed by YouTube for video delivery)

Google/YouTube may collect additional data through their embedded video player according to their own privacy policy at http://www.google.com/policies/privacy.

2. How We Use Your Information

2.1 Primary Purposes

• Educational Service Delivery: To provide interactive therapy and learning activities
• Content Curation: To help educators find and organize appropriate educational video content
• App Functionality: To ensure the App works properly on your device
• Customer Support: To respond to your questions and provide assistance

2.2 YouTube Integration Purposes

• Video Search and Discovery: To help you find educational and therapeutic content
• Content Organization: To create and manage playlists for educational activities
• Content Verification: To ensure videos are available and appropriate before use

2.3 Analytics and Improvement

• Performance Monitoring: To identify and fix technical issues
• Usage Analytics: To understand how features are used and improve the educational experience
• Research and Development: To enhance our evidence-based therapeutic approaches

3. Third-Party Services and Data Sharing

3.1 YouTube API Services Integration

How We Use YouTube API Services:

• Search for educational videos using your search queries


• Retrieve video metadata (titles, thumbnails, descriptions)


• Verify video availability and appropriateness


• Display YouTube videos through embedded players

Data Shared with YouTube/Google:

• API Authentication: Our API key for service authentication


• Search Requests: Your search queries sent to YouTube's search API


• Video Requests: Video IDs for metadata retrieval and playback


• Playback Data: When you play videos, YouTube's embedded player collects viewing data per Google's Privacy Policy

How YouTube/Google Processes Your Data:

• YouTube processes your search queries to return relevant educational content


• Video playback occurs through YouTube's embedded player, which may set cookies and collect viewing data


• YouTube may use this data according to their own privacy practices


• For details on how Google handles your information, see Google Privacy Policy

Data Retention and Authorization:

• Authorization Tokens: If you grant authorization to access your YouTube account (for future features), we store authorization tokens only for as long as necessary to provide the requested service. These tokens are used solely for purposes consistent with your explicit consent and applicable law. You may revoke access at any time through your Google Account settings.


• Search Queries: Cached for 24-48 hours to improve search performance, then automatically deleted


• Video Metadata: Stored for up to 3 months, then refreshed from YouTube's API or deleted if no longer in active use


• Playlist Data: Video IDs in playlists are retained as long as the playlist exists in your account


• Inactive Users: If your account becomes inactive for 12 months, YouTube API data associated with your account will be reviewed and deleted unless required for legal or educational continuity purposes

3.2 Analytics and Error Tracking

Firebase Analytics (Google)

• Collects anonymous usage data to understand app performance


• Helps us improve educational features and user experience


• Subject to Google's Privacy Policy

Sentry (Functional Software, Inc.)

• Collects crash reports and performance data


• Helps us identify and fix technical issues quickly


• Data is used solely for app improvement and is subject to Sentry's Privacy Policy

3.3 How We Share Your Information

Internal Use:

• Information is accessible only to authorized personnel for app support, maintenance, and improvement


• Educational content preferences are stored securely in your account


• Data is used internally for analytics and service improvement

External Sharing:
We share information with third parties only as follows:

1. YouTube/Google: Search queries, video IDs, and playback requests as described in Section 3.1
2. Analytics Providers: Anonymized usage data with Firebase Analytics (Google)
3. Error Tracking: Crash reports and performance data with Sentry
4. Legal Requirements: When required by law, court order, or government regulation
5. Business Transfers: In the event of a merger, acquisition, or sale of assets (with notice to users)

What We Do NOT Do:

• We do not sell, trade, or rent your personal information to third parties for marketing purposes


• We do not share identifiable student data with advertisers


• We do not use your data for targeted advertising

3.4 Cookies, Tracking Technologies, and Local Storage

Our App and third-party services use various technologies to store and access information on your device:

Technologies We Use:

• Local Storage: We store playlist data, app preferences, and cached video metadata locally on your device


• Session Data: Temporary session identifiers to maintain app functionality


• Device Identifiers: Anonymous device IDs for analytics and crash reporting

Third-Party Cookies and Tracking:

• YouTube Embedded Player: YouTube may place cookies and use tracking technologies when you watch videos through the embedded player. These are governed by Google's Privacy Policy


• Firebase Analytics: May use cookies and similar technologies for analytics purposes


• Sentry: May collect device and session information for error tracking

Your Control:

• You can clear local app data through your device settings


• Some YouTube cookies can be managed through your Google account settings


• Disabling certain tracking may limit app functionality

4. Children's Privacy

Important: Cosmo Training is designed for use by educators, therapists, and caregivers working with individuals who have special educational needs and disabilities. We are committed to protecting children's privacy and comply with:

• Children's Online Privacy Protection Act (COPPA)
• Family Educational Rights and Privacy Act (FERPA)
• General Data Protection Regulation (GDPR)
• UK Data Protection Act 2018

4.1 Age Restrictions

• The App is intended for use by adults (educators, therapists, parents/caregivers)
• We do not knowingly collect personal information from children under 13
• All YouTube content accessed through our App uses "strict" safe search filtering
• Educators are responsible for ensuring content appropriateness for their students

4.2 Educational Data Protection

• We minimize data collection to only what is necessary for educational purposes
• Data is stored securely and only accessible to the account holder
• We support data deletion requests in compliance with educational privacy laws

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption: Data is encrypted in transit and at rest
• Secure Storage: Information is stored on secure servers with access controls
• Regular Security Audits: We regularly review and update our security practices
• Access Controls: Only authorized personnel can access user data
• Data Minimization: We collect only the minimum data necessary for our services

6. Data Retention

• Account Data: Retained while your account is active and for a reasonable period after closure (up to 12 months for inactive accounts)
• Educational Content: Retained to support ongoing educational programs (typically 3-12 months)
• Analytics Data: Anonymized and aggregated for continuous improvement
• YouTube API Data:
• Search Queries: Cached temporarily (24-48 hours) then automatically deleted
• Video Metadata: Stored for up to 3 months, then refreshed or deleted
• Authorization Tokens (if applicable): Stored only as long as necessary for consented purposes and until you revoke access
• Playlist References: Retained as long as playlists exist in your active account

Consent-Based Storage: All YouTube API authorization tokens and data are stored and used only for purposes consistent with the specific consent you've granted. Tokens are never used beyond the scope of your explicit authorization.

Inactive Account Policy: If your account is inactive for 12 months or more, YouTube API data will be reviewed and deleted unless retention is necessary for legal compliance or educational continuity.

You can request deletion of your data at any time (see Contact Information below). To revoke YouTube API access specifically, visit your Google Account permissions.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Restriction: Request limitation of how we process your data
• Objection: Object to certain types of data processing

7.1 YouTube API Data Rights

• Revoke Access: You can revoke our App's access to YouTube data at any time through your Google Account permissions
• Delete YouTube Data: Request deletion of YouTube-related data stored in your account by contacting privacy@explorecosmo.com
• View YouTube Data: Request a copy of what YouTube API data we've stored about you
• Consent Limitation: Your authorization tokens are used ONLY for the specific purposes you've consented to (e.g., video search, playlist creation)

7.2 App Permissions

• Location services (if enabled)
• Analytics tracking (can be limited)
• Crash reporting (can be disabled)

8. International Data Transfers

Our services are hosted in the United States and European Union. If you are located outside these regions, your data may be transferred to and processed in these locations. We ensure appropriate safeguards are in place for such transfers.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy within the App


• Sending you an email notification


• Providing an in-app notification

Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

10. YouTube API Services - Additional Information

API Client Configuration:
This App operates under a single Google Cloud Project and uses one project number for YouTube API Services integration. All YouTube API requests are authenticated using credentials associated with this single project.

Revoking Access:
If you wish to revoke this App's access to data obtained through YouTube API Services, you can do so by visiting your Google Security Settings.

YouTube Terms of Service:
Your use of YouTube content through this App is subject to the YouTube Terms of Service. We recommend reviewing these terms.

11. Contact Us

If you have any questions about this Privacy Policy, our data practices, or our use of YouTube API Services, please contact us:

Filisia Interfaces Ltd.
Email: privacy@explorecosmo.com
Support Email: support@explorecosmo.com
Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Phone: +44 (0) 7442 674373
App Support: Available through the App or website at www.explorecosmo.com

Data Protection Officer:
For GDPR-related inquiries: dpo@explorecosmo.com
For YouTube API data inquiries: privacy@explorecosmo.com

12. Governing Law

This Privacy Policy is governed by the laws of England and Wales. Any disputes will be resolved through the courts of England and Wales.

13. Compliance and Certifications

We are committed to maintaining high standards of data protection and regularly review our practices to ensure compliance with:

• GDPR (European Union)
• UK Data Protection Act 2018
• COPPA (United States)
• FERPA (United States)
• Accessibility standards (WCAG 2.1 AA)

---

Thank you for using Cosmo Training. Your privacy and the privacy of those you support through our educational platform are important to us.