Privacy Policy

Effective date: 2026-06-07 · Last updated: 2026-06-07

This Privacy Policy describes how Creative Cosmos ("we", "us") collects, uses, and discloses your personal information when you use Tandem (the "Service") — including the mobile application, web dashboard, and shared kiosk surface.

1. Information we collect

We collect only the information needed to run scheduling, time-tracking, and payroll-summary features for your business.

• Account information. Email address, password (hashed by Supabase Auth), display name, optional phone, address, date of birth, emergency contact, region, and a profile-level preferred hours range.
• Business information. Business name, address, region, hours mode, clock-in mode, kiosk slug + optional access PIN, tier, contact details (manager email, director name + phone, website, phone).
• Employment information. Job role, hourly rate, weekly hour targets (employer override), location, employee numeric PIN, employment status, availability windows.
• Schedule & time-tracking data. Shifts (planned, drafts, published), open shifts, time entries (clock-in / clock-out timestamps), employer edits, attendance confirmations, employer notes, IP address of a kiosk punch.
• Requests & messaging. Time-off requests, shift swaps, announcements, swap-decision history.
• Device tokens for push notifications. Firebase Cloud Messaging device tokens, last-seen timestamp, platform.
• Diagnostics. Crash reports and stack traces via Firebase Crashlytics, locale, app version, device model. Crash reporting is disabled in debug builds.

2. How we use it

• To provide the scheduling, time-tracking, payroll-summary, and team-communication features you sign up for.
• To authenticate you and keep your data secure.
• To deliver push notifications you opted into (shift reminders, request decisions, announcements).
• To diagnose crashes and improve the Service.
• To comply with legal obligations and respond to lawful requests.

We do not sell your data. We do not show third-party advertising. We do not build advertising profiles.

3. Who sees your data

• Within a business. Employers see their own employees' employment data, shifts, time entries, requests, and (when you've configured it) your profile-level preferred hours. Employees see their own data plus published shifts, announcements, and the names of co-workers scheduled on the same day.
• Across businesses. If you belong to more than one business, your profile information (name, email, phone, preferred hours, emergency contact) is shared across them. Per-business overrides (hourly rate, employer-set min/max hours, employer notes) stay scoped to that business.
• Service providers. Supabase (hosting + auth + database), Firebase (push, crash reports), Codemagic (CI/CD for app builds), Apple App Store / Google Play (mobile distribution).
• Public kiosk URL. If the employer enables shared-kiosk clock-in mode, anyone with the per-business URL (and optional access PIN) can submit numeric PINs to punch employees in or out. The kiosk surface does not expose employee names beyond the punch confirmation.

4. Where it lives

Application data is stored in Supabase on Postgres infrastructure in North America. Auth identities live in Supabase GoTrue. Push tokens flow through Firebase Cloud Messaging. Backups are managed by Supabase per their standard retention.

5. Your rights

• Access & portability. Email support@creativecosmos.app to receive a copy of your personal data.
• Correction. Edit your profile directly in the app at any time.
• Deletion. Use More → Delete account in the app to permanently delete your auth identity, profile, business memberships, owned businesses, and all dependent data. This action cannot be undone.
• Withdraw consent for push. Disable notification permissions for Tandem in your device settings.
• Quebec residents (Law 25). You may request access, correction, or deletion at any time. You may also designate someone to exercise these rights after your death. Contact privacy@creativecosmos.app.
• EU residents (GDPR). The same rights apply, including the right to data portability and the right to lodge a complaint with your local data protection authority.

6. Retention

Active account data is kept while your account exists. When you delete your account, we wipe your profile and identity immediately. Shifts and time entries you created remain visible to the business (with your user-link removed) so the employer can keep historical payroll records.

7. Children

Tandem is a workforce tool for working-age users (16+). We do not knowingly collect data from children under 13. If you believe a child has signed up, contact us and we'll delete the account.

8. Changes

We'll post material changes to this page and update the "Last updated" date. If the change is significant, we'll notify you in-app or by email.

9. Contact

Creative Cosmos
Email: privacy@creativecosmos.app
Support: support@creativecosmos.app