We can't read your journal. By design.
CortexOS is built on a simple principle: your thoughts belong to you. Not to us. Not to advertisers. Not to anyone.
This isn't marketing. It's architecture.
| Question | Answer |
|---|---|
| Do you store my journal entries? | No. They stay on your device. |
| Can you read my entries? | No. They're encrypted with keys we don't have. |
| Do you sell my data? | No. We have no data to sell. |
| Do you use my entries to train AI? | No. All AI runs locally on your device. |
| What do you collect? | Minimal, anonymous analytics. |
Let's be clear about what we never have access to:
This data exists only on your device, encrypted with keys stored in your device's secure hardware (Android Keystore).
We collect minimal, anonymous data to improve the App:
| Data | Purpose | Identifiable? |
|---|---|---|
| App opens | Understand usage patterns | No |
| Feature usage | Know what features matter | No |
| Crash reports | Fix bugs | No PII included |
| Subscription tier | Service delivery | Tied to Play Store, not content |
| Device type/OS version | Compatibility | Aggregated only |
If you create an account or subscribe:
| Data | Purpose | Storage |
|---|---|---|
| Email (if provided) | Account recovery, receipts | Encrypted, minimal retention |
| Purchase history | Subscription management | Via Google Play |
We never link account information to journal content. We can't—we don't have access to the content.
Your Entry → AES-256-GCM Encryption → Stored Locally
↑
Key from Android Keystore
(Hardware-secured, never exported)CortexOS uses TensorFlow Lite models that run entirely on your phone:
No data is sent to external AI services. No OpenAI. No Google Cloud. No APIs.
Other apps send your entries to cloud servers for AI processing. That means:
CortexOS doesn't work that way. Your phone does all the thinking.
| Data Type | Location | Encrypted? |
|---|---|---|
| Journal entries | Your device only | Yes (AES-256-GCM) |
| AI analysis | Your device only | Yes |
| Settings | Your device only | Partially |
| Subscription status | Google Play | Per Google's policy |
For subscriptions, we use Google Play Billing. Google handles:
Google's privacy policy applies to payment data: https://policies.google.com/privacy
We use Firebase for:
We do NOT use Firebase for:
CortexOS is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with information, please contact us.
CortexOS is operated from Malta, European Union. We comply with:
Our zero-knowledge architecture means most data protection concerns don't apply—we simply don't have the data.
We may update this Privacy Policy. Changes will be posted here with an updated "Last Updated" date. Material changes will be communicated via the App.
Questions or concerns?
Email: info@cortexos.app
Website: https://cortexos.app
Most privacy policies are about what companies promise not to do with your data.
Ours is about what we can't do—because we built it that way.