Overview

Cortex Learning, Inc. ("Cortex," "we," "our," or "us") operates the Cortex web application and mobile apps (collectively, the "Service"). This Privacy Policy explains how we collect, use, and protect information about you when you use our Service.

By using Cortex, you agree to the collection and use of information in accordance with this policy. We are committed to protecting your privacy and being transparent about our data practices.

Information we collect

Information you provide directly

• Account information: your name, email address, and password when you register. If you sign in with Google, we receive your name and email from Google.
• Card content: the text, images, audio, and other media you create or import into your decks. This content is stored on our servers so it can sync across your devices.
• Study data: your review history, card ratings (Again / Hard / Good / Easy), session durations, and scheduling data. This is the core of how the spaced repetition algorithm works.
• Communications: messages you send to our support team, feedback you submit, or responses to surveys.

Information collected automatically

• Usage data: pages visited, features used, session length, and interaction patterns within the app. We use this to improve the product.
• Device information: browser type and version, operating system, device type, and screen resolution.
• Log data: IP address, access times, and referring URLs. Log data is retained for 90 days.
• Performance data: error reports, crash logs, and latency metrics collected via Sentry and our own monitoring infrastructure.

Information from third parties

• Google OAuth: if you choose to sign in with Google, we receive your name, email address, and profile photo. We do not receive access to your Google Drive, contacts, or other Google data.
• Payment processor: if you subscribe to Pro or Team plans, payment is handled by Stripe. We receive confirmation of payment but do not store your card number or banking details.

How we use your data

We use the information we collect to operate, maintain, and improve the Service. Specifically:

• Provide the spaced repetition scheduling algorithm and sync your study data across devices
• Authenticate your account and maintain session security
• Send transactional emails: account verification, password resets, and subscription receipts
• Send optional product updates and tips (you can unsubscribe at any time)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Analyse aggregate, anonymised usage trends to improve the product

Sharing & disclosure

We share your information only in the following circumstances:

• Service providers: we use trusted third-party vendors (e.g. AWS for hosting, Stripe for payments, Postmark for email) who are contractually bound to use your data only to provide services to us.
• Shared decks: if you share a deck with other users, those users can see the content of non-personal fields. Fields you mark as "personal" remain private to you regardless of sharing settings.
• Legal requirements: we may disclose information if required to do so by law or in response to a valid legal process (subpoena, court order). Where legally permitted, we will notify affected users.
• Business transfers: if Cortex is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your data is transferred and a different privacy policy applies.

Data storage & security

Your data is stored on servers located in the United States (AWS us-east-1) and replicated to the EU (AWS eu-west-1) for performance. We implement industry-standard security measures:

• All data transmitted over TLS 1.2 or higher
• Databases encrypted at rest using AES-256
• Card media (images, audio) stored in encrypted S3 buckets
• Regular security audits and penetration testing
• Access to production systems limited to authorised engineers on a need-to-know basis

We retain your data for as long as your account is active. If you delete your account, we will permanently delete your data within 30 days, except where retention is required by law.

Cookies & tracking

We use cookies and similar technologies to operate and improve the Service:

We do not use any third-party advertising cookies or cross-site tracking technologies. You can control cookies through your browser settings; disabling essential cookies will prevent you from signing in.

Your rights

Depending on where you are located, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: ask us to correct inaccurate information
• Deletion: request that we delete your account and personal data
• Portability: export all your cards and study data in a machine-readable format (JSON or .apkg)
• Restriction: ask us to stop processing your data in certain ways
• Objection: object to processing based on legitimate interests

To exercise any of these rights, email us at hello@cortexcards.app or use the data export / account deletion tools in your account settings. We will respond within 30 days.

EU and UK residents may also lodge a complaint with their local data protection authority.

Children's privacy

Cortex is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it.

Users aged 13–17 may use Cortex with parental consent. Schools deploying Cortex for students under 18 must enter into a Data Processing Agreement with us.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and by posting a prominent notice in the app at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

Previous versions of this policy are available upon request.

Contact us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: hello@cortexcards.app
• Post: Cortex Learning, Inc., Attn: Privacy, 340 Pine Street, Suite 800, San Francisco, CA 94104
• EU Representative: For EU GDPR inquiries, contact our EU rep at eu-hello@cortexcards.app

Agreement overview

These Terms of Use ("Terms") govern your access to and use of the Cortex web application, mobile applications, and related services (collectively, the "Service") provided by Cortex Learning, Inc. ("Cortex", "we", "us").

By creating an account or using the Service, you agree to be bound by these Terms and our Privacy Policy. If you are using Cortex on behalf of an organisation, you represent that you have authority to bind that organisation to these Terms.

We may update these Terms from time to time. Continued use after changes take effect constitutes acceptance. We will notify you of material changes at least 14 days in advance.

Your account

You must be at least 13 years old to create a Cortex account. You are responsible for:

• Providing accurate registration information and keeping it up to date
• Maintaining the security of your password and access credentials
• All activity that occurs under your account
• Notifying us immediately of any unauthorised access at hello@cortexcards.app

You may not create accounts for others without their consent, share your login credentials, or use automated means to create accounts.

User content

You own your content. Cards, decks, notes, images, and other content you create or upload ("User Content") remain your intellectual property. You grant Cortex a limited, non-exclusive, worldwide licence to store, process, display, and sync your User Content solely for the purpose of providing the Service to you.

When you share a deck with other users, you grant those users a licence to view and study from the shared content. You can revoke sharing access at any time; previously downloaded copies may remain on devices.

You represent that you have all rights necessary to upload your User Content and that it does not infringe the rights of any third party. Cortex does not claim ownership over content you import from Anki or other third-party sources, but you are responsible for ensuring you have the right to use that content.

Acceptable use

You agree not to use the Service to:

• Upload content that is unlawful, defamatory, obscene, or that infringes any third party's copyright, trademark, or other intellectual property rights
• Distribute spam, phishing content, or malicious code through the deck sharing feature
• Attempt to gain unauthorised access to any part of the Service or other users' accounts
• Scrape, crawl, or systematically extract content from the Service without our written permission
• Reverse-engineer, decompile, or disassemble any part of the Service
• Use the Service in any way that could damage, overburden, or impair our infrastructure
• Circumvent or attempt to circumvent any access controls or subscription restrictions

Violations may result in immediate account suspension or termination. We reserve the right to remove any User Content that violates these Terms without notice.

Intellectual property

The Cortex application, including its design, algorithms, branding, and documentation, is owned by Cortex Learning, Inc. and protected by copyright, trademark, and other intellectual property laws.

Nothing in these Terms transfers ownership of the Service or its underlying technology to you. You receive only a limited, revocable licence to use the Service as described in these Terms.

"Cortex" and the Cortex flame logo are trademarks of Cortex Learning, Inc. You may not use them without our prior written consent.

Paid plans & billing

Cortex offers free and paid subscription plans. For paid plans (Pro and Team):

• Billing: subscriptions are billed monthly or annually in advance, processed by Stripe. Prices are in USD unless otherwise stated.
• Auto-renewal: subscriptions automatically renew at the end of each billing period. You can cancel at any time from your account settings; cancellation takes effect at the end of the current billing period.
• Refunds: we offer a pro-rated refund within 14 days of your initial subscription purchase if you are not satisfied. No refunds are provided for renewals.
• Price changes: we will give you at least 30 days' notice before increasing subscription prices. Continued use after a price change constitutes acceptance.
• Taxes: prices may be subject to applicable taxes based on your location, which will be shown at checkout.

Disclaimers

The Service is provided "as is" and "as available" without warranties of any kind, express or implied. To the fullest extent permitted by law, Cortex disclaims all warranties including:

• Warranties of merchantability or fitness for a particular purpose
• Warranties that the Service will be uninterrupted, error-free, or free from harmful components
• Warranties regarding the accuracy or completeness of any content on the Service

Limitation of liability

To the maximum extent permitted by applicable law, Cortex and its officers, directors, employees, and agents will not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of data, loss of revenue, or loss of business, arising out of or in connection with your use of the Service.

Our total cumulative liability to you for any claims arising from or related to these Terms or the Service will not exceed the greater of (a) the amounts you paid to Cortex in the 12 months prior to the claim or (b) $100 USD.

Some jurisdictions do not allow the exclusion of certain warranties or limitation of liability, so some of the above limitations may not apply to you.

Termination

You may terminate your account at any time via your account settings. Upon termination, your access to the Service will end and your data will be deleted within 30 days.

Cortex may suspend or terminate your account if you breach these Terms, if required by law, or for any other reason with reasonable notice where practicable. In cases of severe or repeated violations, we may act without notice.

Provisions that by their nature should survive termination (including ownership clauses, warranty disclaimers, and limitations of liability) will continue to apply after termination.

Governing law & disputes

These Terms are governed by the laws of the State of California, USA, without regard to conflict-of-law provisions. Any disputes will be resolved in the state or federal courts located in San Francisco County, California, and you consent to personal jurisdiction in those courts.

Before filing any formal legal claim, you agree to first contact us at hello@cortexcards.app and attempt to resolve the dispute informally for at least 30 days.

Users in the EU or UK may also have the right to refer disputes to their local consumer protection authority.

Contact

For questions about these Terms, please contact:

• Legal: hello@cortexcards.app
• Post: Cortex Learning, Inc., Attn: Legal, 340 Pine Street, Suite 800, San Francisco, CA 94104