Cosmos

External transmission of information

External transmission of information

Cosmos (the app and this site) sends information from your device to the companies listed below in order to provide the service. This page is published under Article 27-12 of the Japanese Telecommunications Business Act, which requires disclosure of the recipient, the information sent, and the purpose.

  • Supabase Inc.

    Country
    United States (data stored in the Tokyo region, Japan)
    Information sent
    Login credentials (email address, session token), profile, request details, current location, uploaded photos
    Purpose
    Providing the service (login, creating and accepting requests, sharing progress, storing photos). This is the backend platform we operate on.
    How it is sent
    Directly from your device / App and this site
    Privacy policy
    https://supabase.com/privacy

  • Google LLC

    Country
    United States
    Information sent
    Your Google account email address, name and profile picture. Also the password and two-factor code you enter on the sign-in page
    Purpose
    Signing in with your Google account. Sent only when you choose to sign in with Google. The sign-in page is Google’s own page opened in your browser, so anything you type there goes straight to Google and never passes through our servers.
    How it is sent
    Directly from your device / App
    Privacy policy
    https://policies.google.com/privacy

  • Apple Inc.

    Country
    United States
    Information sent
    Your Apple ID email address (you may choose to hide it) and name. Also the password and verification code you enter on the sign-in screen
    Purpose
    Signing in with your Apple ID. Sent only when you choose to sign in with Apple. Authentication happens on Apple’s own screen, so anything you type there goes straight to Apple and never passes through our servers.
    How it is sent
    Directly from your device / App
    Privacy policy
    https://www.apple.com/legal/privacy/

  • Stripe, Inc.

    Country
    United States
    Information sent
    Card number, expiry date, security code, payment amount, and device/network information used for fraud detection. If 3-D Secure authentication is required, also the password or one-time code you enter on that screen
    Purpose
    Processing payments and preventing fraud. Card details go straight from your device to Stripe and never pass through our servers. If your card issuer requires 3-D Secure, the issuer’s authentication screen opens on your device via Stripe and what you enter there goes to that issuer.
    How it is sent
    Directly from your device / App
    Privacy policy
    https://stripe.com/jp/privacy

  • Stripe, Inc. (Stripe Identity)

    Country
    United States
    Information sent
    Images of your identity document (driving licence, My Number card, passport, etc.), a selfie taken on the spot, and the name and date of birth read from the document
    Purpose
    Verifying a helper’s identity at sign-up and when re-verification is needed. For helpers under 18 who registered before 15 September 2026 it is also used to verify their parent or guardian (we no longer accept new registrations from under-18s). The verification page is Stripe’s own page opened in your browser, so the document images and selfie go straight to Stripe and never pass through our servers. Nothing is sent if you only use the app to request help.
    How it is sent
    Directly from your device / App
    Privacy policy
    https://stripe.com/jp/privacy

  • Stripe, Inc. (Stripe Connect)

    Country
    United States
    Information sent
    Your payout bank account details (bank, branch, account number and holder name), name, date of birth, address, phone number and email address. Of these, your name, phonetic name, date of birth, phone number and email address are sent to Stripe from our servers beforehand so the form opens pre-filled.
    Purpose
    Registering the bank account that receives your earnings. The onboarding page is Stripe’s own page opened in your browser, so the account details go straight to Stripe and never pass through our servers. For helpers under 18 who registered before 15 September 2026 the parent or guardian registers an account in their own name (we no longer accept new registrations from under-18s). Nothing is sent if you only use the app to request help.
    How it is sent
    Directly from your device / App
    Privacy policy
    https://stripe.com/jp/privacy

  • Google LLC

    Country
    United States
    Information sent
    The coordinates shown on the map, plus device and network information
    Purpose
    Rendering the map on Android. When you open turn-by-turn directions, the destination is passed to the map app.
    How it is sent
    Directly from your device / App
    Privacy policy
    https://policies.google.com/privacy

  • Apple Inc.

    Country
    United States
    Information sent
    The coordinates shown on the map
    Purpose
    Rendering the map on iOS. When you open turn-by-turn directions, the destination is passed to the map app.
    How it is sent
    Directly from your device / App
    Privacy policy
    https://www.apple.com/legal/privacy/

  • Geospatial Information Authority of Japan (GSI)

    Country
    Japan
    Information sent
    The address text you entered (no name or contact details are sent)
    Purpose
    Converting the address to coordinates so we can check it exists and calculate distances. Sent only when you save or change an address.
    How it is sent
    Directly from your device / App
    Privacy policy
    https://www.gsi.go.jp/privacy.html

  • Expo, Inc.

    Country
    United States
    Information sent
    The push token issued to your device for notifications, and the app version
    Purpose
    Delivering push notifications and receiving app updates.
    How it is sent
    Directly from your device / App
    Privacy policy
    https://expo.dev/privacy

  • Apple Inc.

    Country
    United States
    Information sent
    The device token that identifies where to deliver a notification, and the notification text
    Purpose
    Delivering notifications on iOS via Apple Push Notification service. Sent only if you allow notifications.
    How it is sent
    Directly from your device / App
    Privacy policy
    https://www.apple.com/legal/privacy/

  • Google LLC (Firebase)

    Country
    United States
    Information sent
    The device token that identifies where to deliver a notification, and the notification text
    Purpose
    Delivering notifications on Android via Firebase Cloud Messaging. Sent only if you allow notifications.
    How it is sent
    Directly from your device / App
    Privacy policy
    https://policies.google.com/privacy

  • Google LLC

    Country
    United States
    Information sent
    IP address, browser and device type
    Purpose
    Loading the web fonts. Sent only when using the browser version — the App Store / Google Play app does not send this.
    How it is sent
    Directly from your device / App
    Privacy policy
    https://policies.google.com/privacy

  • Google LLC (Google Analytics)

    Country
    United States
    Information sent
    An identifier stored in a cookie, the pages you viewed, IP address, browser and device type
    Purpose
    Understanding how the site is used so we can improve it. Used on this marketing site only — not in the app.
    How it is sent
    Directly from your device / This site
    Privacy policy
    https://policies.google.com/privacy
    Opt out
    https://tools.google.com/dlpage/gaoptout

  • Amazon Web Services, Inc.

    Country
    United States (processed in the Tokyo region, Japan)
    Information sent
    The name, email address and message you enter in the contact form
    Purpose
    Receiving and replying to your enquiry. This is the server platform we operate on.
    How it is sent
    Directly from your device / This site
    Privacy policy
    https://aws.amazon.com/jp/privacy/

  • Amazon Web Services, Inc. (Amazon Rekognition)

    Country
    United States (processed in the Tokyo region, Japan)
    Information sent
    The selfie taken for identity verification and the photo on your identity document
    Purpose
    Verifying that the helper is the same person as on the ID document. Sent via our servers, not directly from your device.
    How it is sent
    Via our servers / App
    Privacy policy
    https://aws.amazon.com/jp/privacy/

  • Amazon Web Services, Inc. (Amazon SES)

    Country
    United States (processed in the Tokyo region, Japan)
    Information sent
    The recipient email address and the message body
    Purpose
    Sending our emails, such as the consent request to a parent or guardian. Sent via our servers, not directly from your device.
    How it is sent
    Via our servers / App
    Privacy policy
    https://aws.amazon.com/jp/privacy/

  • Google LLC (Geocoding API)

    Country
    United States
    Information sent
    The address text you entered (no name or contact details are sent)
    Purpose
    Resolving coordinates for addresses that GSI could not pin down to the street number. Sent via our servers, not directly from your device.
    How it is sent
    Via our servers / App
    Privacy policy
    https://policies.google.com/privacy

You can withdraw permission for location, camera and notifications at any time in your device settings (those features stop working when you do). Card details are sent directly to Stripe and never pass through our servers.

Terms of Service · Privacy Policy · Specified Commercial Transactions Act notation

← Back to top