PRIVACY POLICY
Last Updated: October 5, 2026
This Privacy Policy describes how MOONSTER PARK, S.L. (CIF B67217372), Calle Àngel Guimerà 149, 08950 Esplugues de Llobregat (Barcelona), Spain (“Company,” “we,” “us,” or “our”) collects, uses, stores, and discloses personal information when you access or use the Product.
This Policy applies to all users of the Product.
1. INFORMATION WE COLLECT
We may collect the following categories of personal information.
A. Information You Provide
• Name
• Email address
• Phone number
• Account credentials
• Subscription status related to in-app purchases processed by Apple App Store or Google Play
• Images uploaded for task verification
• Task descriptions and other user-generated content
B. Automatically Collected Information
• IP address
• Device information
• Browser type
• Operating system
• Usage data
• Cookies and similar technologies
C. AI Processing Data
When using AI-based task verification features, we may process the following information:
• Task reference image
• Task completion image
• Task description text
• Technical task identifier
• Limited technical metadata necessary to perform the analysis
D. Voice Input Data
When using voice input features, the Product may access the device microphone and speech recognition capabilities to convert voice commands into text.
Voice input may include:
• Spoken task descriptions
• Voice commands used to create or modify tasks
• Voice notes provided by the user
Voice data is processed solely for the purpose of converting speech into text and assisting users in creating, editing, or clarifying tasks.
The microphone and speech recognition features are activated only when the user explicitly initiates voice input. The application does not record or access the microphone without user interaction.
2. HOW WE USE INFORMATION
We use personal information to:
• Provide and operate the Product
• Manage subscription access and features associated with in-app purchases processed by Apple App Store or Google Play
• Communicate with users
• Improve performance and functionality
• Ensure security and prevent misuse
• Comply with legal obligations
• Process voice input and convert speech into text for creating, editing, or clarifying tasks
AI-based data is used solely for automated comparison and task verification purposes.
We do not sell personal information.
3. AI-BASED PROCESSING
The Product includes optional AI-based task verification functionality provided by OpenAI, L.L.C. (United States).
When you enable AI-based task verification, certain data may be transmitted to the OpenAI service for automated analysis, including:
• Task description text
• Task reference image
• Task completion image
• Limited technical metadata required for processing
Transmission of such data occurs only when the user explicitly enables the AI verification feature within the Product.
Voice input may first be converted into text before being processed by AI-based services when such functionality is used.
AI-generated results:
• Are provided solely as a technical assistance tool
• Do not constitute legally binding decisions
• Are not used for marketing, profiling, or advertising purposes
Users are responsible for ensuring that sensitive personal information is not included in task descriptions unless necessary.
4. DISCLOSURE OF INFORMATION
We may disclose personal information:
• To service providers (such as hosting providers, payment processors, and AI service providers) who perform services on our behalf
• To comply with legal obligations or lawful requests by public authorities
• To protect our rights, prevent fraud, or ensure the security of the Product
• In connection with a merger, acquisition, or transfer of assets
Third-party service providers are required to process personal information only for specified purposes and in accordance with applicable privacy laws and contractual obligations.
5. DATA STORAGE AND TRANSFER
Personal information may be stored and processed in the United States or other jurisdictions where our service providers operate.
If you access the Product from outside the United States, your information may be transferred to countries where data protection laws may differ from those in your jurisdiction.
We implement reasonable contractual, administrative, and organizational safeguards designed to protect personal information during transfer and processing.
Personal information is retained only as long as reasonably necessary to:
• Provide the Product
• Comply with legal obligations
• Resolve disputes
• Enforce agreements
6. DATA SECURITY
We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction.
However, no method of transmission over the Internet or electronic storage can guarantee absolute security.
7. YOUR PRIVACY RIGHTS (U.S.)
Depending on your state of residence, you may have rights under applicable U.S. privacy laws, including:
• The right to know what personal information we collect
• The right to access your personal information
• The right to request deletion of your personal information
• The right to request correction of inaccurate personal information
• The right to opt out of the sale or sharing of personal information (we do not sell personal information)
• The right not to be discriminated against for exercising your privacy rights
Requests may be submitted using the contact information provided within the Product.
8. CHILDREN’S PRIVACY
The Product is not intended for individuals under 13 years of age.
We do not knowingly collect personal information from children under the age of 13.
If we become aware that personal information from a child under 13 has been collected, we will take appropriate steps to delete such information.
9. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time.
If material changes are made, we will provide notice through the Product or by other appropriate means.
The updated Privacy Policy becomes effective as of the “Last Updated” date indicated above.
10. CONTACT INFORMATION
If you have questions regarding this Privacy Policy, you may contact us using the contact information provided within the Product.
11. GOVERNING LAW
This Privacy Policy shall be governed by the laws of the jurisdiction where the Company is legally established, without regard to conflict-of-law principles.
12. WEBSITE COOKIES, ANALYTICS AND ADVERTISING MEASUREMENT
This section applies to visitors of our website www.cosanostra.pro.
When you visit the website, we and our partners may use cookies and similar technologies to operate the website, understand how it is used and measure the effectiveness of our advertising.
We use the following third-party tools on the website:
• Google Analytics and Google Ads (Google LLC) — website traffic analytics and measurement of advertising conversions
• Yandex Metrica (Yandex) — website traffic analytics
• OpenAI Ads Measurement Pixel (OpenAI, L.L.C.) — measurement of visits and actions on the website (such as clicks on App Store or Google Play links) that result from our advertising in ChatGPT
The OpenAI Ads Measurement Pixel may set the first-party cookies __oppref (stored for up to 30 days) and __obref (stored for up to 365 days). It may also detect customer information entered on the website, convert it into an irreversible SHA-256 hash in your browser and send only the hash to OpenAI to help match conversions to ads. Raw customer information is not sent to OpenAI through this feature.
Data collected through these tools may include your IP address, browser and device information, pages visited, the referring source and your interactions with the website. These providers may process data in the United States and other countries.
Where consent is required by applicable law, analytics and advertising cookies are used only after you give consent through the cookie banner on the website. You can change or withdraw your consent at any time through the cookie settings on the website or by deleting cookies in your browser. Cookies that are strictly necessary for the website to function do not require consent.
13. ADDITIONAL INFORMATION FOR USERS IN THE EUROPEAN ECONOMIC AREA, THE UNITED KINGDOM AND SWITZERLAND
This section applies if you are located in the European Economic Area (EEA), the United Kingdom or Switzerland. It supplements the rest of this Privacy Policy. If there is a conflict, this section prevails.
Data controller
The controller of your personal data is MOONSTER PARK, S.L. (CIF B67217372), Calle Àngel Guimerà 149, 08950 Esplugues de Llobregat (Barcelona), Spain. You can contact us about any data protection matter at contacts@cosanostra.pro.
Legal bases for processing
We process personal data under the General Data Protection Regulation (GDPR) on the following legal bases:
• Performance of a contract — to create and manage your account, provide the Product and its features (including AI-based task verification and voice input when you use them) and manage subscriptions
• Legitimate interests — to keep the Product and the website secure, prevent misuse, improve the Product and communicate with you about the service; we balance these interests against your rights and freedoms
• Consent — for analytics and advertising cookies and similar technologies on the website (Google Analytics, Google Ads, Yandex Metrica and the OpenAI Ads Measurement Pixel); you can withdraw your consent at any time without affecting the lawfulness of processing before the withdrawal
• Legal obligation — where we must keep or disclose data to comply with the law
International data transfers
Some of our service providers, including OpenAI, Google and hosting providers, are located outside the EEA, for example in the United States. When personal data is transferred outside the EEA, we rely on an adequacy decision of the European Commission (such as the EU–U.S. Data Privacy Framework for certified recipients), on the Standard Contractual Clauses approved by the European Commission or on other safeguards permitted by the GDPR.
Data retention
We keep account data for as long as your account is active and delete or anonymize it within a reasonable period after the account is deleted, unless we must keep it longer to comply with legal obligations, resolve disputes or enforce our agreements. Website analytics and advertising data are kept for the periods set by the respective providers and for the cookie lifetimes described in Section 12.
Your rights
Under the GDPR you have the right to:
• access your personal data and receive a copy of it
• rectify inaccurate or incomplete data
• request erasure of your data
• restrict processing of your data
• receive your data in a structured, commonly used and machine-readable format (data portability)
• object to processing based on legitimate interests
• withdraw your consent at any time
To exercise your rights, write to contacts@cosanostra.pro. We will respond within one month. You can also delete your account at any time in the app or at www.cosanostra.pro/accountdeletion.
You have the right to lodge a complaint with a supervisory authority, in particular in the country where you live or work. In Spain, this is the Agencia Española de Protección de Datos (AEPD), www.aepd.es.
Automated decision-making
AI-based task verification produces assistive results only. It does not make decisions that have legal or similarly significant effects on you; the final decision is made by a person.
Children
In the EEA, the Product is not intended for individuals under the age of digital consent in their country (14 in Spain).