Legal

Privacy Policy

Last updated: August 2026. This policy covers both the Awake mobile app and cosmation.ai.

Awake exists because people trust it with half-formed thoughts they haven’t shown anyone. We take that seriously. This policy is written to be read, not to be survived — if anything in it is unclear, email us and we’ll explain it properly.

1. Who we are

Awake is operated by Cosmation AB, a limited company registered in Sweden (org. no. 559446-5022), based in Stockholm. Cosmation AB is the data controller for the personal data described here.

Contact for any privacy matter: info@cosmation.ai

2. What we collect

Account information

Your email address, which is how you sign in. We send a short numeric code to it each time rather than asking you to keep a password.
Optional profile details you choose to add. We use these to make the images generated from your entries more contextual and personal to you. That’s their only purpose.

The things you record

Voice recordings you make in the app.
Text you type in the app.
The transcript, summary, keywords and image generated from each entry.
Reminders you set, and any feedback you give on a generated result.

Technical information

Device type, operating system version, app version, approximate region, and a device identifier used for push notifications.
Usage events — screens opened, features used, errors and crashes — so we can find what’s broken.

Website information

Standard server logs, and cookies set by our analytics and advertising tools when you visit cosmation.ai.

3. What happens to an entry

When you record an entry:

The recording or text is sent to our backend and stored in our database and file storage.
It is passed to an AI processing service, together with any profile details you’ve added, which transcribes it, produces a summary and keywords, and generates an image from your words.
The result is stored against your account so you can find it again.

Your entries are not used to train AI models — not ours, and not our providers’. They are not sold. They are not shared with anyone else unless you explicitly share them yourself, or unless we are legally required to. We only use AI providers whose terms prohibit training on customer data. That’s a condition of us using them, not a preference. Current providers named on request.

4. Why we’re allowed to process it

To provide the service you asked for (contract) — your account, your entries, transcription, summarising, image generation, reminders.
Consent — marketing emails, push notifications, and advertising or analytics cookies. You can withdraw consent at any time.
Legitimate interests — keeping the service secure, fixing crashes, and understanding in aggregate how the app is used.
Legal obligation — accounting and tax records where required by Swedish law.

5. Who else touches your data

We’re a small company and we don’t build everything ourselves. We use a limited number of established providers, each bound by a data processing agreement and each able to access only what they need:

Cloud hosting and file storage — runs our servers and stores your recordings and images.
An AI processing service — performs transcription, summarising and image generation.
An email delivery service — sends your sign-in codes and service emails.
An email marketing service — sends the newsletter, if you’ve opted in.
A push notification service — delivers your reminders.
Analytics and crash reporting — tells us what broke and roughly how the app is used.
Advertising platforms — measure whether our ads led to an install. Applies to the app and the website. In this day and age, despite our misgivings, there is no way for an indie developer to scale without advertising on social media platforms. If you want to support our mission, please help us spread the word organically, so we can avoid these platforms altogether.

If you want the specific providers for your own assessment, ask us at info@cosmation.ai and we’ll tell you. If you have suggestions on better providers for each category — who respect EU laws, and are morally and ethically unambiguous about the impact of AI and the work required to lessen it — please send us a recommendation. This is our top priority.

6. Where your data goes

Some of our providers process data outside the European Economic Area, for example the AI processing service. Where that happens, transfers are made under the European Commission’s Standard Contractual Clauses or an equivalent approved safeguard. Nothing supersedes your rights under EU law.

7. How long we keep it

Your entries — for as long as your account is open. They’re your archive; deleting them is your call, not ours.
Your account — until you delete it. After deletion, data is removed from live systems within 30 days and from backups within 90 days. If you email us at info@cosmation.ai with the subject line FASTER DATA DELETION, we will try to accommodate the request as a priority.
Newsletter details — until you unsubscribe.
Analytics and crash data — 36 months.
Accounting records — seven years, as Swedish law requires.

8. Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another service. You can also withdraw any consent you’ve given.

Email info@cosmation.ai with the subject line Data request. We’ll respond within one month.

One thing worth knowing: our newsletter system and the app’s own database are separate. Unsubscribing from emails does not delete your app data, and deleting your app account does not automatically remove you from the mailing list. If you want both gone, say so and we’ll do both.

We do our best to handle user data the most honest and safe way we can, because our founder is an EU data rights nerd herself, but if you have any concerns or questions, do not hesitate to reach out.

9. Security

There are no passwords. Signing in uses a single-use code sent to your email, which expires after ten minutes, so there’s nothing stored that can be leaked, guessed, or reused against you somewhere else. The flip side is that ongoing access to your email means ongoing access to your archive — keep that inbox secure.

Your voice recordings and the images generated from them are encrypted at rest in our file storage.

Access to production systems is limited to the people who need it. We go out of our way to restrict it — for example, the founder pointedly does not access the idea and dream logs. No system, and no self-reported guardrail, is perfect. We’ll tell you promptly if something goes wrong that affects you.

10. Children

Awake is not intended for children under 16. We don’t knowingly collect data from them. If you believe a child has given us data, tell us and we’ll delete it.

11. Cookies on this website

cosmation.ai uses cookies that are necessary for the site to work, plus analytics and advertising cookies that help us understand whether our ads reach anyone. You can refuse the non-essential ones and the site will work fine.

12. Changes

If we change anything material here, we’ll tell users by email before it takes effect, not quietly update the page. If you notice something that gives you pause, please reach out.

13. Contact

Cosmation AB, Stockholm, Sweden — info@cosmation.ai