Privacy Policy

For processing whose purposes and means are determined in connection with the iOS App, the Company is the data controller or equivalent responsible organization, subject to applicable law. You may contact us at privacy@ai-corso.com or the postal address above.

Contact details:

The data we process depends on what you do in the App. We limit App data collection to information reasonably needed to provide, secure, support and improve the Service and to comply with law.

• Account data, for example email address, account identifier, optional display name, password authentication information or secure authentication tokens supplied when you sign in or register; account or authentication provider information where used.
• Learning data, for example courses opened or completed, lessons, reading/audio progress, quiz and exercise answers, streaks, searches, AI Workbook entries, prompt selections, certificate name, course, completion/issue date and certificate identifier.
• AI Chat data, for example messages and earlier messages in the same conversation, chosen AI model, AI responses, generated content and any answer report with relevant conversation context. Collected when you submit or report content.
• Apple purchase and access data, for example product identifiers, transaction/original transaction identifiers, subscription status, entitlements, renewal/expiry or revocation status and limited storefront information received from Apple or its purchase framework. Full payment-card details are not supplied to us by Apple.
• Technical, security and diagnostics, for example IP address and approximate country derived from it, device model, operating system, App version, language, service logs, security events, feature interaction and crash/performance records, including Sentry diagnostic information where applicable.
• Support and preferences, for example support requests, messages, feedback, safety reports, notification or email preferences, and the record of your AI Chat sharing permission.

The App does not request access to your camera, microphone, contacts, photo library or precise device location for the functionality described here. Audio lessons are playback functionality, not microphone recording. The App does not use advertising identifiers or track your activity across unrelated companies’ apps or websites for advertising, as currently configured.

Where EU or UK data-protection law applies, each processing purpose uses the following lawful basis, as appropriate. Other jurisdictions may apply different but comparable rules.

• To provide the App and Account. Account data, learning data, user-generated entries and entitlements: performance of a contract or steps requested before entering it.
• To process Apple IAP access. Apple transaction/entitlement data and limited Account identifiers: performance of a contract; compliance with accounting obligations where applicable.
• To provide AI Chat. Prompts and chat context: requested performance of the feature; a distinct explicit App permission is requested before third-party AI disclosure, and consent is relied on where legally required.
• For security and error handling. Technical logs, crash diagnostics, fraud/abuse indicators: legitimate interests in securing, supporting and maintaining the Service, subject to applicable balancing tests; legal obligations where relevant.
• To respond to requests. Support communications, deletion or privacy rights records: performance of a contract, legitimate interests and/or compliance with law.
• For product performance and improvements. Minimized App-use events and aggregated reporting: legitimate interests, or consent if a specific technology or jurisdiction requires it.
• For service messages. Account, security, legal and subscription-service messages: performance of a contract and/or legal obligations.
• For marketing, if offered. Email address and preferences: consent or another lawful basis where permitted, with an opt-out. No cross-app advertising tracking is performed in the App under this Policy.

When you choose to send a message in AI Chat, the text of that message and prior messages in the same conversation are sent to OpenRouter, Inc., which routes them to the company operating the selected AI model. The current model-provider list may include OpenAI, Anthropic, Google, xAI, DeepSeek and Perplexity; the actual destination depends on your selection and the currently available models. The Company does not intentionally send your account name or email address as part of the AI prompt payload. Nevertheless, chat text may itself contain information that identifies you or another person.

The App displays a separate disclosure identifying this external processing and requests your explicit permission before the first message is transmitted. You can withhold permission and continue to use eligible non-chat App features, or withdraw permission through Settings. Withdrawal disables future AI Chat transfers unless permission is given again, but does not undo processing already lawfully performed. The model companies may process the content under their applicable privacy terms and retain limited operational or abuse-prevention data. We configure our AI service integrations to prohibit the use of your AI Chat messages for model training or fine-tuning by the selected AI providers. We may allow providers to retain limited data for security, abuse prevention, or legal compliance where permitted under the applicable provider arrangements. Independent provider obligations may still apply. Avoid entering sensitive or confidential data.

We store your AI Chat conversations in your Account so that they can be displayed until you delete the conversation or the Account, subject to lawful residual retention. If you flag an answer, the report and related chat/message context are made available to our authorized team for review and investigation. We do not represent AI-generated answers as verified facts.

Apple processes the payment transaction for an App Store Subscription or other IAP, using the Apple Account payment method and Apple’s own transaction rules. We receive transaction and entitlement information needed to recognize access, manage the Account and address support cases; we do not receive your full Apple payment-card information.

• Apple and App Store services: purchase validation, subscription management, refunds, revocations and App distribution.
• OpenRouter, Inc. and the selected model provider: content necessary to respond to AI Chat messages, after the required in-App permission.
• Cloud hosting and infrastructure providers, such as Amazon Web Services and Google Cloud: secure storage, hosting and backend operation, depending on the production system in use.
• Sentry (Functional Software, Inc.): App crash and performance diagnostics.
• Mailgun and Reteno: sign-in/password-reset messages, service reminders and permitted marketing communications.
• Customer-support, security, fraud-prevention and infrastructure providers, as strictly needed to operate and protect the Service.
• Authorities, courts or professional advisers: where legally required or needed to establish, exercise or defend lawful rights; a successor in a legitimate corporate transaction, subject to lawful safeguards.
• Recipients chosen by you: when you voluntarily export, download or share certificates, prompts or other content.

We require processors acting on our instructions to use personal data only for authorized purposes and maintain appropriate confidentiality and security controls. Third parties that independently determine their own processing purposes are responsible for providing their applicable notices and honoring relevant law. We do not sell personal data collected through the App or share it for cross-context behavioral advertising under the current App configuration.

We require service providers and affiliated entities processing App personal data on our behalf to maintain privacy, confidentiality and security protections consistent with this Policy and applicable law. Where a recipient acts as an independent controller, its own lawful processing obligations also apply.

We retain personal data only as long as reasonably necessary for the stated purposes. The following reflects the retention practices described for the current App; legal records or incident investigations may require more limited exceptions:

• Account and learning progress: while your Account exists and as needed to provide the Service, unless you delete it or a shorter period applies.
• AI Chat: until the relevant chat or Account is deleted, subject to limited legal, security and backup retention; independent external model providers may have their own limited processing and retention terms.
• Account-linked analytics records: scheduled for deletion within 30 days after Account deletion under the current operational policy.
• Sentry crash reports: retained for up to 90 days under the currently described diagnostic configuration.
• Apple purchase, finance, tax, refund, security and dispute records: retained as required or permitted by applicable law and legitimate reconciliation requirements, even after Account deletion.
• Backup copies: retained for up to 12 months under our documented backup and disaster-recovery procedures and are subsequently deleted or overwritten, unless further retention is legally required.

You may initiate Account deletion within the App at Profile → Settings → Delete account or send a request to privacy@ai-corso.com. After verification where needed, we delete or de-identify associated personal data unless a specific lawful retention basis applies. We will not retain information merely because it may be useful in the future. Deleting the App or Account does not automatically cancel an active App Store Subscription; it must be canceled through Apple.

The Company is based in Hong Kong and uses technology providers that may process data in other countries, including the United States. Personal data may therefore be transferred outside your country of residence. Where the GDPR, UK GDPR or other transfer requirements apply, we use an appropriate lawful mechanism, such as approved standard contractual clauses and any necessary supplementary safeguards or applicable adequacy arrangements. We do not treat an overseas company’s location as itself removing those legal requirements.

Depending on your place of residence and applicable law, you may request access, correction, deletion, portability, restriction, or objection to certain processing, and may withdraw consent where processing relies on it. Some jurisdictions additionally provide rights to opt out of specified sale, sharing, targeted advertising or profiling. Under the current App configuration we do not engage in cross-app tracking or the sale/sharing of App data for targeted advertising.

To exercise your rights, contact privacy@ai-corso.com. We may reasonably verify your identity and, where required, respond within the applicable statutory period. You may also contact your local data-protection authority where applicable. To stop marketing email, use the unsubscribe link in the message. To withdraw AI Chat third-party sharing permission, use the relevant control in Settings. Device notifications and any future device permissions may be controlled in iOS Settings.

If an EU/EEA or UK representative is legally required because of the Company’s establishment and the way the Service targets those residents, the Company will provide the appointed representative’s name and contact details in the published notice before the relevant offering.

The App is not directed to children under 16 and we do not knowingly collect their personal data through the App. If we learn that a person under 16 has provided personal data without a valid legal basis, we will take appropriate steps to remove it. If you are 16 or older but are still a minor under applicable law, any required parental or guardian authorization must be obtained before use. AI model providers may impose additional age limitations, which we will respect.

We maintain reasonable technical and organizational safeguards, including appropriate access control, transmission security, monitoring and restrictions on service providers. No method of transmission or storage guarantees absolute security. Please protect your sign-in credentials and contact support@ai-corso.com if you suspect unauthorized access.

We may update this Policy if the App, data flows, providers or applicable law change. We will update the date below and provide additional notice or obtain fresh permission for material new processing where legally required. If a new provider will receive AI Chat or other personal data in a materially different way, the in-App disclosure and consent flow will be updated before the transfer.

If you have any inquiries regarding this Policy or wish to exercise your rights under this Policy or applicable law, please feel free to contact us at: