App

Privacy Policy

Version 2026-11-03

Effective: 2026-11-02

These policies cover purchases made in the app only. Website (Shopify) orders are separate and follow the cozmozone.com policies.

2.1 What we collect.

• Name, email, phone and business address, and the shipping addresses you save, including the name and address of anyone you ship to, each with its county for sales tax.
• Your date of birth and ZIP code, to check you meet the minimum age where you live, and the result of that check.
• If your phone's app store shares it, whether the App Store or Google Play says you are under 18. We use it only to apply our age rule; we don't store it or send it to our servers. If Apple tells us a parent or guardian has withdrawn consent for the App, we keep a record of that notice.
• If you use Face ID (or your phone's fingerprint or face unlock) to open the App: only whether it matched. Your phone does the check; we never receive or store your face or fingerprint.
• Account type. If you apply for a Professional account: your salon or business name, business address and mobile phone, your license type, state, number and expiry date, and a photo of your license.
• Order and payment history, with invoices and tracking. For cards you pay with or save, we see the card type, last 4 digits and expiry date only; Stripe holds the full card details.
• Points activity, and chat messages and photos if you use chat (Chat with us in the App).
• App information: the app version, whether you use iOS or Android, and your IP address, recorded with your agreements, choices, age checks and orders; and, if you used our previous app, the push token it saved (we delete it when you sign in to this App).
• If you turn on notifications in the App: a notification token for your phone, with a random ID for the App on that phone, whether the phone is an iPhone or an Android phone, its time zone, the App's version, whether your phone's settings allow notifications, and your notification settings.
• A record of each policy you agreed to, with the time and version.

2.2 How we use it.

• To run your account and fill orders.
• To verify Professional licenses and remind you before yours expires.
• To check your age for your state.
• To calculate tax and points.
• To send order and account emails and, if you turn on notifications, notifications about your orders.
• To answer your messages and, if you turn on reply notifications, notify you of our replies.
• To prepare our sales and tax reports.
• To provide support and prevent fraud.
• To suggest products, including ones you've ordered before.
• To send marketing by email or notification, only on each channel you opted in to. We use your account type and the state in your address to choose what we send you.

2.3 Who we share it with. We share it only with:

• Google Firebase: accounts and database.
• Stripe: payments, saved cards and fraud prevention. Your bank may send Stripe updated card details (such as a new expiry date), which keep saved cards working. Stripe's payment screen in the App also collects device and usage information (such as how long it took to load and any errors) for this.
• FedEx: shipping.
• To work out sales tax, when the ZIP code alone doesn't tell us the right county, city or district: the delivery address (street, city, state and ZIP, without your name or apartment number) is sent to the US Census Bureau's address service, which returns its map location; for Texas addresses, only that map location is then sent to the Texas Comptroller's tax-boundary service (run on Esri's ArcGIS mapping service).
• Our email provider, which sends our emails.
• Expo, our notification service provider, and Apple and Google, which deliver notifications to your phone. The notifications we send to the App don't include your name, your messages, card details or what you ordered (notifications from our previous app show the message text).
• Our office mailboxes (office@ and alec@trusspromiami.com; TRUSS Pro Miami is a trade name of COZMOZONE INC.), which receive a copy of each order email (your name, salon, contact details, shipping address, items, card type and last 4 digits, and points balance).
• Tools our staff use to manage the App's catalog and customer records.

We do not sell your personal information. App purchases are processed by the COZMOZONE mobile app, not by Shopify.

2.4 Your choices.

• Notifications: we send them only for what you turn on in Email and notifications (on the Account page): replies to your messages (also with Turn on after a message) and order updates. We send notifications about new products and events only if you turn on New products & events. You can turn any of them off in Email and notifications, or in your phone's settings.
• We don't send marketing text messages. We don't send marketing by email yet. Before we do, we will ask for your permission, and you will be able to turn it off in Email and notifications.
• Request a copy of your data at order.app@cozmozone.com.
• Delete your account with Delete account on the Account page, or by emailing order.app@cozmozone.com from the email address on the account. We delete your personal data within 30 days. Deleted data stays in our database backups for up to 14 weeks. If you had an account in our previous app, a protected copy of our records as they were on October 8, 2026 can't be changed or deleted before October 8, 2031. Deleting your account doesn't change that copy. If a refund or payment dispute is still open, our payment processor keeps your saved cards until it closes. We keep, under a coded ID instead of your name or email: your orders (without your name, email, phone or street address) for tax records; the records of the policies you agreed to and your offer choices, with the time and IP address; your points history; and a record of the deletion itself (when it was done, how we confirmed it was you, and the points that ended). Copies of order emails in our office mailboxes, and our payment processor's records of your payments (with the name and delivery address on them), are also kept. We keep these at least as long as the law requires (at least 5 years for order and tax records) and have not yet set a date for deleting them. Records of our staff's work and our security logs, which may name your account ID but not your name or email, are kept for at least 3 years.

2.5 Security and retention. Data is encrypted in transit and stored with Firebase, Stripe and our email provider, and in our office mailboxes. License photos are deleted when an account is closed; the photo of a replaced license, 30 days after we approve the new one; and the photo with an application we decline, 30 days after we decline it. Chat messages and photos are kept until you delete your account. Notification tokens are deleted when you sign out of the App (if your phone is offline then, the next time you open the App with a connection), when you delete your account, or after 6 months without opening the App.

2.6 Children. The App is not for anyone under 18, or under the age of majority where they live (19 in Alabama and Nebraska, 21 in Mississippi and Puerto Rico). We do not knowingly collect personal information from children under 13. If an age check shows someone is under 13, we block the account and delete its personal information once our staff confirm it.

2.7 Contact. order.app@cozmozone.com · +1 (786) 521-5539.

COZMOZONE INC., 1800 North Bayshore Drive, CU1, Miami, FL 33132 · +1 (786) 521-5539 · order.app@cozmozone.com