CortexPlus privacy & data

CortexPlus is operated by Thiago Magro, Brazil, who is the controller of your personal data under Brazil’s General Data Protection Law (LGPD).

Account: e-mail address, name (optional), password (stored only as a hash), language and timezone.

Location: only if you allow it, the place where a memory was created is saved with that memory.

Billing: if you buy a paid plan, payment is handled by Stripe. We receive the plan and payment status, never your full card number.

Devices and sessions: device name and platform, used to show and manage your signed-in devices, and a push-notification token if you enable notifications.

Technical data: request logs (such as IP address and time) kept for security, abuse prevention and troubleshooting.

Memories you save: text, titles, tags, comments, photos, videos, audio recordings, files and links, plus the transcriptions, descriptions and structured data (for example, finance entries) generated from them.

To store, organize and sync your memories across your devices.

To provide AI features: transcribing audio, describing images, extracting text and structured data, and answering searches.

To send the e-mails you request (sign-in codes, account notices) and the reminders and notifications you enable.

To process payments, prevent abuse and keep the service secure.

We keep your data while your account is active.

copies may remain in backups for a limited time until they are overwritten.

Records we must keep by law (such as payment records held by Stripe) are retained only as required.

Supabase: database hosting (São Paulo, Brazil).

Locaweb: application servers (São Paulo, Brazil).

We share data only with providers that help run CortexPlus

You can delete your account and all associated data at any time in Settings → Delete account, in the app or on the web; deletion is immediate and also cancels any paid subscription.

Under the LGPD and similar laws, you can request confirmation of processing, access, correction, portability, anonymization or deletion of your data, information about sharing, and withdrawal of consent.

We do not sell your data, do not show ads and do not use your memories to train AI models.