Cosmos Privacy Policy

The operator handles users' personal information appropriately in accordance with Japan's Act on the Protection of Personal Information and other applicable laws.

The Japanese version is the authoritative original; if interpretations differ, the Japanese version prevails. This Policy is governed by and interpreted under the laws of Japan.

Purposes of Use and Information We Collect

Name, address, email address, phone number, profile photo, face image, emergency contact (minors only), identity-verification documents, location (distance display and matching while using the app, en-route sharing during an accepted job, and at in-person start/completion — see "Location Data" below), the address of the destination included in a request (a store to shop at, a medical institution to accompany you to, a cemetery, etc.; we also store the coordinates derived from that address so helpers can judge the estimated travel time), usage history, and payment-related information (card details are held by our payment processor; the operator does not store card numbers). Except where required by law, or where provided to subcontractors for payment, maps, or identity verification within the necessary scope, we do not provide information to third parties.

Location Data (Helpers)

We collect a helper's location under the "While Using the App" permission you choose in your device settings, in the following situations. We do not collect location continuously in the background, and we never ask for the device's "always-on" location permission.

While you are using the app: used to show the distance to nearby requests, to judge the distance for notifying you, and to confirm your current location at the moment you accept a request. Only your latest position is stored, overwriting the previous one — we do not keep a movement history. We do not collect location while the app is closed (new-request notifications during that time are based on your registered address).
En route to and during an accepted job: we keep sending your current location, even when the app is closed, so the requester can see your progress toward arrival (a session started while using the app continues until the job is done; iOS shows an on-screen indicator and Android shows a notification during this time). Records from this period are retained as job records for safety verification and dispute handling. Sending stops immediately when the job is completed or cancelled.
At in-person start and completion: stored as the face-to-face verification record.

We do not collect location in any other situation (such as while the app is closed with no accepted job), and we never provide location data to third parties (display to the requester is limited to the en-route sharing above).

Handling of Medical-Related Information

For hospital accompaniment and prescription pickup, you enter the address of the medical institution or pharmacy. This is needed so the helper can estimate travel time and reach the location on the day, and we use it solely to carry out the request and for safety verification.

We never ask for your diagnosis, symptoms, or details of your treatment.
The destination address is visible only to the helper who actually accepts the request and to the operator. Before matching, it is shown to the helpers the request was delivered to, as information needed to judge travel time.

Retention and Display of Request Records

Once a request is completed or ended, the requester's detailed address is no longer shown on the worker's screen.
For safety verification and dispute handling, the operator retains and manages records from the start to the end of each job (location, face-to-face records, and status history).
Chat history and similar records are anonymized before being stored and managed.

Authentication Method (Passwordless)

The Service uses passwordless authentication via Apple Sign In, Google Sign In, and Email Magic Link. Users set no password and the operator stores no password.

Face Verification and Biometric Data (Workers)

To work as a worker, you must register a selfie taken with the front camera for impersonation prevention and safety.

In-work re-verification: for safety, a worker who is ready to work may be asked to retake an on-the-spot selfie at random intervals. If it does not match the registered face, work is suspended. The suspension is lifted only after re-verifying identity (redoing KYC) or after review and clearance by the operator.

Handling of Wellness-Check Report Photos

For wellness-check requests, the worker attaches photos of the visit to the report. These images are sent to an external image analysis service (Amazon Rekognition, provided by Amazon Web Services, processed in the Tokyo region) solely to check whether a person appears in them. The operator receives only that yes/no verdict, and the analysis service does not retain the images. The photos themselves are stored only on this Service's servers and are viewable by the requester and the worker.

This check exists to prevent reports that were not actually made in person (for example, submitting only photos of scenery) and to keep reports trustworthy. It only detects whether a person is present; it does not identify who that person is.

Handling of Parental Consent

For minor workers, we collect and retain the parent/legal-guardian's information and consent. We contact guardians primarily by email and use the phone only in emergencies. Consent may be withdrawn; after withdrawal, the worker's activity is suspended.

Contact and Amendment

For questions about this Policy, contact the operator support window in the app. For material amendments, re-consent is requested within the app.