Privacy Policy

Effective date: September 14, 2026

Cortex ("we", "our", "the app") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use the Cortex iOS application.

1. Data We Collect

Cortex is designed with a privacy-first approach: your personal data stays on your device, and the only information that leaves it is the anonymized usage analytics described below.

• Screen Time Data: Cortex uses Apple's Screen Time API (FamilyControls framework) to detect when you open selected apps. This data is processed entirely on your device and is never transmitted to any server.
• Impulse & Score Data: Your impulse records, scores and streaks are stored locally on your device using SwiftData. The raw records never leave your device; only the anonymized events described under "Analytics" below are sent off it.
• Onboarding Preferences: Your app selections, usage habits, and goals are stored locally in UserDefaults on your device.
• Subscription Status: We use Apple's StoreKit 2 for subscriptions. Apple processes all payment information. We do not have access to your payment details.
• Crash Reports: We use Apple's MetricKit to collect anonymized crash and performance diagnostics. These are stored locally on your device.
• Analytics: We use Mixpanel to collect anonymized product-usage events (for example, that an intervention was shown or that a pause was completed, which app category you chose to monitor, your device locale and app version). These events never include the content of what you do inside other apps, your name, or your email. They are used only to understand how Cortex is used and to improve it.
• Subscriptions: Purchases are processed by Apple. We use RevenueCat to validate and manage your subscription status and Superwall to display and test purchase screens. Both receive an anonymous app-user identifier and your subscription status; neither receives your payment details, which stay with Apple.

2. Data We Do NOT Collect

• We do not collect personal identification information (name, email, phone number) unless you voluntarily provide it for account creation.
• We do not track your browsing history or specific app usage patterns beyond the impulse interception feature.
• We do not sell your data, and we do not share it for advertising. We use the service providers named in section 1 (Mixpanel, RevenueCat, Superwall) to operate and improve the app; they process data on our behalf, under their own privacy terms, not for their own purposes.
• We do not use advertising SDKs, and we do not share analytics data with advertisers or data brokers.
• We do not collect the content of your Screen Time activity — Apple's framework only gives us opaque app tokens.

3. Screen Time API Usage

Cortex uses Apple's FamilyControls, ManagedSettings, and DeviceActivity frameworks exclusively for self-monitoring purposes. Specifically:

• To detect when you open an app you've chosen to monitor
• To present a brief intervention (breathing exercise / reflection) before allowing you to proceed
• To track your impulse resistance for personal analytics

All app tokens provided by Apple's framework are opaque identifiers that cannot be used to determine which specific apps you use. We cannot and do not identify the actual apps on your device.

4. Data Storage & Security

Your personal data is stored locally on your device using Apple's secure frameworks (SwiftData, UserDefaults, Keychain). Data shared between the main app and extensions uses an encrypted App Group container. We do not run our own servers or databases for your personal data; the anonymized analytics described in section 1 are held by our processors (Mixpanel, RevenueCat, Superwall) on our behalf.

5. Data Retention & Deletion

Your impulse, score and streak data persists on your device as long as the app is installed. Deleting the app removes all locally stored data. There is no cloud backup of your Cortex data.

Anonymized analytics events are retained for 24 months. You can request deletion of all analytics data tied to your device by emailing vmarchesini@itba.edu.ar from the device; we will confirm within 30 days.

6. Children's Privacy

Cortex is not designed for or directed at children under 13. The Screen Time API is used for self-monitoring, not parental controls.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the effective date.

8. Contact Us

If you have questions about this Privacy Policy, contact us at: vmarchesini@itba.edu.ar