Privacy Policy

For processing whose purposes and means are determined in connection with the Android App, the Company is the data controller or equivalent responsible organization, subject to applicable law. You may contact us at privacy@ai-corso.com or the postal address above.

Contact details:

The data we process depends on what you do in the App. We limit App data collection to information reasonably needed to provide, secure, support and improve the Service and to comply with law.

• Account data, for example email address, account identifier, optional display name, password authentication information or secure authentication tokens supplied when you sign in or register; account or authentication provider information where used.
• Learning data, for example onboarding answers, courses opened or completed, lessons, reading/audio progress, quiz and exercise answers, lesson feedback, streaks, searches, AI Workbook entries, prompt selections, certificate name, course, completion/issue date and certificate identifier.
• AI Chat data, for example messages and earlier messages in the same conversation, chosen AI model, AI responses, generated content and any answer report with relevant conversation context. Collected when you submit or report content.
• Google Play purchase and access data, for example product identifiers, purchase tokens and order identifiers, subscription status, entitlements, renewal, expiry, cancellation, refund or revocation status, and country and currency information received from Google Play Billing. Google does not provide us with your full payment-card details.
• Identifiers, for example your account identifier, a random identifier created when the App is first opened, and an App-specific identifier used by our purchase-validation provider to link store purchases to your Account. The App does not collect the Android advertising ID.
• Technical, security and diagnostics, for example IP address and approximate country derived from it, device model, operating system, App version, language, service logs, security events, feature interaction and crash/performance records, including Sentry diagnostic information where applicable.
• Support and preferences, for example support requests, messages, feedback, safety reports, notification or email preferences, and the record of your AI Chat sharing permission.

The App does not request access to your camera, microphone, contacts, photos and files, or device location. Audio lessons are playback functionality, not microphone recording; the App uses a media-playback service only to keep a lesson playing when you leave the App. If you choose to share a certificate or AI-generated image, the App passes it to the destination you pick in Android’s share sheet. The App does not use advertising identifiers or track your activity across unrelated companies’ apps or websites for advertising, as currently configured.

Where EU or UK data-protection law applies, each processing purpose uses the following lawful basis, as appropriate. Other jurisdictions may apply different but comparable rules.

• To provide the App and Account. Account data, learning data, user-generated entries and entitlements: performance of a contract or steps requested before entering it.
• To process Google Play purchases. Google Play transaction and entitlement data, identifiers and limited Account identifiers: performance of a contract; compliance with accounting obligations where applicable.
• To provide AI Chat. Prompts and chat context: requested performance of the feature; a distinct explicit App permission is requested before third-party AI disclosure, and consent is relied on where legally required.
• For security and error handling. Technical logs, crash diagnostics, fraud/abuse indicators: legitimate interests in securing, supporting and maintaining the Service, subject to applicable balancing tests; legal obligations where relevant.
• To respond to requests. Support communications, deletion or privacy rights records: performance of a contract, legitimate interests and/or compliance with law.
• For product performance and improvements. Minimized App-use events and aggregated reporting: legitimate interests, or consent if a specific technology or jurisdiction requires it.
• For service messages. Account, security, legal and subscription-service messages: performance of a contract and/or legal obligations.
• For marketing, if offered. Email address and preferences: consent or another lawful basis where permitted, with an opt-out. No cross-app advertising tracking is performed in the App under this Policy.

When you choose to send a message in AI Chat, the text of that message and prior messages in the same conversation are sent to OpenRouter, Inc., which routes them to the company operating the selected AI model. The current model-provider list may include OpenAI, Anthropic, Google, xAI, DeepSeek and Perplexity; the actual destination depends on your selection and the currently available models. The Company does not intentionally send your account name or email address as part of the AI prompt payload. Nevertheless, chat text may itself contain information that identifies you or another person.

The App displays a separate disclosure identifying this external processing and requests your explicit permission before the first message is transmitted. You can withhold permission and continue to use eligible non-chat App features, or withdraw permission through Settings. Withdrawal disables future AI Chat transfers unless permission is given again, but does not undo processing already lawfully performed. The model companies may process the content under their applicable privacy terms and retain limited operational or abuse-prevention data. We configure our AI service integrations to prohibit the use of your AI Chat messages for model training or fine-tuning by the selected AI providers. We may allow providers to retain limited data for security, abuse prevention, or legal compliance where permitted under the applicable provider arrangements. Independent provider obligations may still apply. Avoid entering sensitive or confidential data.

We store your AI Chat conversations in your Account so that they can be displayed until you delete the conversation or the Account, subject to lawful residual retention. If you flag an answer, the report and related chat/message context are made available to our authorized team for review and investigation. We do not represent AI-generated answers as verified facts.

Google processes the payment for a Google Play Subscription or an in-app purchase, using the payment method in your Google Account, under Google Play’s own terms and Google’s privacy notice. We receive the transaction and entitlement information needed to recognize access, manage the Account and address support cases; we do not receive your full payment-card information.

We use Adapty, a purchase-management service, to validate Google Play purchases and keep subscription and add-on access up to date. Adapty receives the purchase data described above, your account identifier and an App-specific identifier, and processes them on our behalf.

• Google (Google Play and Google Play Billing): App distribution, payment processing, purchase validation, subscription management, refunds and revocations.
• Adapty: validation of Google Play purchases and management of subscription and add-on entitlements.
• OpenRouter, Inc. and the selected model provider: content necessary to respond to AI Chat messages, after the required in-App permission.
• Cloud hosting and infrastructure providers, such as Amazon Web Services and Google Cloud: secure storage, hosting and backend operation, depending on the production system in use.
• Sentry (Functional Software, Inc.): App crash and performance diagnostics.
• Mailgun and Reteno: sign-in/password-reset messages, service reminders and permitted marketing communications.
• Customer-support, security, fraud-prevention and infrastructure providers, as strictly needed to operate and protect the Service.
• Authorities, courts or professional advisers: where legally required or needed to establish, exercise or defend lawful rights; a successor in a legitimate corporate transaction, subject to lawful safeguards.
• Recipients chosen by you: when you voluntarily export, download or share certificates, prompts or other content.

We require processors acting on our instructions to use personal data only for authorized purposes and maintain appropriate confidentiality and security controls. Third parties that independently determine their own processing purposes are responsible for providing their applicable notices and honoring relevant law. We do not sell personal data collected through the App or share it for cross-context behavioral advertising under the current App configuration.

We require service providers and affiliated entities processing App personal data on our behalf to maintain privacy, confidentiality and security protections consistent with this Policy and applicable law. Where a recipient acts as an independent controller, its own lawful processing obligations also apply.

We retain personal data only as long as reasonably necessary for the stated purposes. The following reflects the retention practices described for the current App; legal records or incident investigations may require more limited exceptions:

• Account and learning progress: while your Account exists and as needed to provide the Service, unless you delete it or a shorter period applies.
• AI Chat: until the relevant chat or Account is deleted, subject to limited legal, security and backup retention; independent external model providers may have their own limited processing and retention terms.
• Account-linked analytics records: scheduled for deletion within 30 days after Account deletion under the current operational policy.
• Sentry crash reports: retained for up to 90 days under the currently described diagnostic configuration.
• Google Play purchase, finance, tax, refund, security and dispute records: retained as required or permitted by applicable law and legitimate reconciliation requirements, even after Account deletion.
• Backup copies: retained for up to 12 months under our documented backup and disaster-recovery procedures and are subsequently deleted or overwritten, unless further retention is legally required.

You can delete your Account in the App at Profile → Settings → Delete account, request deletion at https://ai-corso.com/delete-account, or send a request to privacy@ai-corso.com. You can also delete individual AI Chat conversations in the App without deleting your Account, or ask privacy@ai-corso.com to delete other specific data. After verification where needed, we delete or de-identify associated personal data unless a specific lawful retention basis applies, as listed above. We will not retain information merely because it may be useful in the future. Uninstalling the App or deleting the Account does not automatically cancel an active Google Play Subscription; it must be canceled in Google Play.

The Company is based in Hong Kong and uses technology providers that may process data in other countries, including the United States. Personal data may therefore be transferred outside your country of residence. Where the GDPR, UK GDPR or other transfer requirements apply, we use an appropriate lawful mechanism, such as approved standard contractual clauses and any necessary supplementary safeguards or applicable adequacy arrangements. We do not treat an overseas company’s location as itself removing those legal requirements.

Depending on your place of residence and applicable law, you may request access, correction, deletion, portability, restriction, or objection to certain processing, and may withdraw consent where processing relies on it. Some jurisdictions additionally provide rights to opt out of specified sale, sharing, targeted advertising or profiling. Under the current App configuration we do not engage in cross-app tracking or the sale/sharing of App data for targeted advertising.

To exercise your rights, contact privacy@ai-corso.com. We may reasonably verify your identity and, where required, respond within the applicable statutory period. You may also contact your local data-protection authority where applicable. To stop marketing email, use the unsubscribe link in the message. To withdraw AI Chat third-party sharing permission, use the relevant control in Settings. Device notifications and any future device permissions may be controlled in Android Settings.

If an EU/EEA or UK representative is legally required because of the Company’s establishment and the way the Service targets those residents, the Company will provide the appointed representative’s name and contact details in the published notice before the relevant offering.

The App is not directed to children under 16 and we do not knowingly collect their personal data through the App. If we learn that a person under 16 has provided personal data without a valid legal basis, we will take appropriate steps to remove it. If you are 16 or older but are still a minor under applicable law, any required parental or guardian authorization must be obtained before use. AI model providers may impose additional age limitations, which we will respect.

We maintain reasonable technical and organizational safeguards, including encryption of data in transit, appropriate access control, monitoring and restrictions on service providers. No method of transmission or storage guarantees absolute security. Please protect your sign-in credentials and contact support@ai-corso.com if you suspect unauthorized access.

We may update this Policy if the App, data flows, providers or applicable law change. We will update the date below and provide additional notice or obtain fresh permission for material new processing where legally required. If a new provider will receive AI Chat or other personal data in a materially different way, the in-App disclosure and consent flow will be updated before the transfer.

If you have any inquiries regarding this Policy or wish to exercise your rights under this Policy or applicable law, please feel free to contact us at: