YouYour device
MMaya's device
Only the people in the chat hold the keys.
Messages are encrypted on your device before they are sent. Cosmo is not in this chat and has no key to it.
Security at Cosmo
Your chats stay private. Even when Cosmo helps.
Chats between people stay between those people. When you invite Cosmo, they work inside a private runtime, with only the context you allow.
- End-to-end encrypted chats
- A private runtime for Cosmo
- Memory you can see and edit
Dinner plans
Andrew, Maya + Cosmo
End-to-end encrypted · Cosmo replies from the private runtime
Cosmo can help because they are invited—not because they have a master key.
Cosmo can only work with what a conversation shares with them. The protection is in exactly what Cosmo can reach, where that work happens, and who else can get to it.
Cosmo in the chat
Two kinds of chat. One clear boundary.
Cosmo's access changes only when you invite them.
YouYour device
Private runtime
MMaya's device
Cosmo joins as a named participant.
Cosmo works inside a private runtime with only the messages and context this chat allows. A seat in the conversation, not access to everything in your life.
A locked room for software
When Cosmo helps, the work happens here.
Cosmo's private runtime proves it is running approved code before a key is ever released. Messages are opened only inside that isolated environment, and only while Cosmo prepares a reply.
- 01
Arrives locked
Delivery and storage systems only ever handle encrypted message data.
- 02
Proves its code
Before a key is released, the runtime proves it is running approved Cosmo code.
- 03
Uses only allowed context
Cosmo works from the thread, memories, and connected data permitted for this request.
- 04
Returns locked
The reply is encrypted back to the thread before it leaves the runtime.
Outside the runtimeEncrypted data, routing, and delivery.Inside the runtimeOnly the context permitted for this request.
What “Family logistics” can useScoped to this chat
Allowed
- This conversation
- Messages from Family logistics
- Family memories
- 3 details shared with this group
- Weekend calendar
- Read availability · ask before changes
Work chatsPrivate calendar
Context with boundaries
Helpful in this chat doesn't mean access everywhere.
Cosmo starts with the conversation you are in. Every request is checked against who is present and what that chat is allowed to use. A detail from one conversation is not automatically available in another.
Visible memory
What Cosmo remembers is never a mystery.
Useful details live in an encrypted memory vault, not as invisible facts absorbed into a model. You can see what Cosmo remembers, where it came from, who can use it, and remove it when it no longer belongs.
MemoryEncrypted vault
Sarah is gluten-free.
- Available to
- Family only
- Saved from
- Dinner thread
- Added
- August 17
Family logistics · Cosmo is here
Add dinner to the family calendar?
SpinasseTuesday, September 8 · 6:30 PM
Dinner with Maya and Andrew
Dinner with Maya and Andrew
This will change “Family calendar”
Approval before action
Cosmo can prepare. You give the final yes.
Understanding a request is different from acting on it. Calendar changes and other consequential steps are shown before they happen, with the account and effect named in plain language.
The more consequential the action, the more explicit the permission.
Plain answers
The questions we would ask, too.
Can Cosmo employees read my chats?
No. Chat messages and scoped Memory are end-to-end encrypted, and the people who work on Cosmo hold no key to them. Servers, databases, logs, and support tools only ever hold encrypted data. If you send something to support or report a safety issue, the team sees only what you chose to include. Messages sent over SMS travel through carrier networks and are handled separately.
Are conversations used to train AI models?
We do not make a blanket promise today. Our Privacy Policy allows conversation content to help operate, test, secure, and improve Cosmo. Google Calendar data is never used to train generalized AI models. We will make a broader promise when the policy and the system support it.
What information reaches a model provider?
Only what a request needs: the message, permitted Memory, and connected-account data for that work. Depending on the feature, Cosmo may use Anthropic, OpenAI, or Google. Google data keeps its separate Limited Use protections.
What happens when I remove Cosmo from a chat?
Cosmo stops receiving new message keys and cannot read anything sent after that. Memory created earlier keeps its own scope and can be removed at any time.
How do I delete a memory, chat, or account?
Edit or remove any memory in Memory. Deleting a chat removes your history and clears its runtime state, relay content, and attachments. Deleting your account disables it immediately and starts a 30-day recovery window before permanent deletion, keeping only the narrow legal and audit records the law requires.