Privacy Policy

App Name: Cortex
Last Updated: March 23, 2026

1. Scope

This Privacy Policy explains how Cortex ("we", "our", or "us") collects, uses, stores, and protects information when you use our iOS app and related services.

2. Information We Collect

2.1 User Content

When you use Cortex AI features, we may collect and process content you choose to provide, such as:

• Photos and images you upload from your library or camera.
• Videos you upload for AI processing.
• Text prompts you enter to generate or edit content.
• Generated outputs and task history needed to display results in the app.

Uploaded media may contain faces. This content is processed on your device or on our own servers only, and is not sent to any third-party AI service.

2.2 Face Data

When you use AI image/video features, Cortex may process images that contain facial information. We collect and use face data only as follows:

• Collection: We collect images you upload or capture that may contain your face or the face of others, solely to provide the AI feature you requested.
• Use: Face data is used exclusively to perform requested AI features. We do not use face data for identity recognition, biometric identification, profiling, or advertising.
• Disclosure and sharing: We do not share or disclose face data with any third parties. Face data is processed on your device or on our own servers only.
• Storage: If server-side processing is required, face data (as part of uploaded media) is stored only on infrastructure under our control for processing purposes.
• Retention: Face data processed on our servers is automatically deleted within 7 days after processing is completed. You may request deletion at any time; we process deletion requests within 30 days.

Face data collection, use, disclosure, sharing, storage, and retention are covered in this section and in Sections 5, 6, 7, and 8.

2.3 Device, Diagnostics, and App Activity Data

We may collect limited technical data to keep the app stable and secure, such as device model, OS version, app version, crash/diagnostic data, and API error logs.

2.4 Purchase and Subscription Data

If you purchase subscriptions or consumable credits via Apple In-App Purchase, we process product identifiers, transaction/receipt data, and verification results to deliver purchased services and prevent fraud.

2.5 Advertising and Attribution (IDFA)

With your permission via App Tracking Transparency (ATT), we may access the advertising identifier (IDFA) for attribution and ad performance measurement. If you do not grant permission, we do not access IDFA.

3. AI Image and Video Processing

Cortex does not send your personal data to any third-party AI service. All AI-related processing is performed on your device or on infrastructure under our direct control. User-uploaded photos, videos, images containing faces, text prompts, and generated outputs are never transmitted to external AI providers.

User content is used only to provide the AI features you request and is not used for biometric identification or unrelated profiling.

4. How We Use Information

• Provide AI image/video generation and editing features requested by you.
• Process uploads and return generated results.
• Display history, favorites, and account-related status in the app.
• Process purchases, verify transactions, and maintain credits/subscription state.
• Protect service security, detect abuse, and improve app performance.
• Measure advertising attribution and campaign performance (with ATT permission where required).

5. Data Sharing and Third-Party Services

5.1 No Third-Party AI Sharing

We do not share your content (photos, videos, images containing faces, prompts, or generated outputs) with any third-party AI service. Cortex does not send your personal data to external AI providers.

5.2 Service Providers

Cortex does not use third-party AI services. No user data (including photos, face data, prompts, and generated media) is sent to external AI providers.

We may use trusted service providers for limited functions such as:

• Apple: In-App Purchase and subscription transaction processing.
• Meta/Facebook SDK: Attribution and app event measurement (subject to platform permissions).
• Infrastructure and security services: Hosting, network delivery, and operational security under contractual confidentiality obligations.

These providers must process data only as necessary for their role and with appropriate safeguards. We do not sell personal data, and we do not share face data or user-generated images with third-party AI providers.

6. Data Security

We use reasonable technical and organizational measures to protect data, including access control, secure transmission practices, and operational monitoring. No method of transmission or storage is completely secure, but we continuously improve safeguards.

7. Data Retention

• Face data and uploaded media used for AI processing: automatically deleted within 7 days after processing completion (including images/videos that contain faces).
• Deletion requests: processed within 30 days after request validation.
• Purchase and compliance records: retained as required for accounting, legal, and anti-fraud obligations.
• Technical logs: retained only for as long as necessary to maintain security and stability, then deleted or anonymized.

8. Your Rights and Choices

Depending on applicable laws, you may request access, correction, deletion, or restriction of your personal data.

• You can submit requests through the app's Profile > Contact Us feature.
• You may also control camera/photo permissions and tracking permissions in iOS Settings.
• We process verified deletion requests within 30 days.

9. Children's Privacy

Cortex is not intended for children under 13 (or the minimum age required in your region). We do not knowingly collect personal data from children below the applicable age threshold.

10. International Transfers

Your data may be processed in regions where our infrastructure or service providers operate. Where required, we implement safeguards for cross-border data transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last Updated" date.

12. Contact Us

For privacy questions or deletion requests, please contact us via Profile > Contact Us in the app.

Email: nguyenduythanh11208@icloud.com

If the in-app channel is unavailable, you may contact us by email. We process verified deletion requests within 30 days.

Important: If you publish this policy at a public URL for App Store submission, ensure the same content is accessible from your app listing and, if needed, from in-app legal links.