Privacy policy.

Cortexa Consulting (“Cortexa,” “we,” “us”) is the technical intelligence partner behind agencies serving the technology sector. This policy covers the information we handle through this website and through the Cortexa app for iPhone, iPad, and Android.

The app is where course participants read their training material, read and listen to Ground Truth articles offline, ask a course Teaching Aide about what they learned, and play Cortexa Learn, a short daily lesson on working with AI. Courses are by invitation: we add you to a course, and you cannot enrol yourself. Cortexa Learn is open to anyone: you can play it as a guest with no account at all, and create a free account whenever you want your progress saved.

Free accounts you create yourself. If you sign up for Cortexa Learn, we store your email address, your name if you choose to give one, and your Learn progress: where you are in the course, your streak and points, and which ideas you have found easy or hard, so the lessons can adapt. When you explain an idea back in your own words, that answer is sent to Anthropic's API to be graded; it is not stored with your account. A free account has no course access unless we grant it. You can delete the account yourself at any time, in the app under Settings, exactly as described below, and we can also remove an account for you on request.

Playing as a guest. You can play Cortexa Learn without an account. When you do, we create a random identifier for that phone and store your Learn progress against it. We do not ask for or hold your email address, your name, or anything else that identifies you, and a guest identity is not linked to any other one. Explaining an idea back in your own words works the same way as it does for an account: the answer goes to Anthropic's API to be graded and is not stored. Guest progress lives only on that phone until you save it, so deleting the app or resetting the phone ends it, and we cannot recover it. Guest identities that are not used for 60 days are deleted with their progress, on the same schedule as free accounts. You can delete yours at any time in the app under Settings. If you later create an account, the progress moves across and this policy applies to it as an account from then on; if that email already had Learn progress, we keep the account's and set the guest progress aside.

Your account. We store your email address, your name if we were given one, and which courses you have access to, including whether you are a participant or the instructor on each. Signing in uses a one-time code emailed to you instead of a password. Your device then keeps a renewable sign-in credential in the operating system's secure storage (Keychain on iOS, Keystore on Android); it is used only to refresh your session with us, and signing out deletes it.

Your progress. As you work through a course, we record which sections you have viewed, where you left off, and when you finished. That is what lets the app return you to your place. It is also what the instructor of that course sees on their roster: your name and email, whether you have started, and when you were last active. An instructor sees this only for courses they teach, and other participants never see it.

Certificates. If you complete a course and we issue a certificate, we store your name, the course, and the issue date alongside a random verification code. Anyone you choose to give that code to can confirm exactly those three facts on our verification page. Nothing else about you appears there, and the codes cannot be guessed or listed.

The Teaching Aide. Each course has an assistant that answers questions about that course's material. Your questions and its answers are stored on our servers so a conversation continues across your devices, and they are deleted after about six months without use. To produce an answer, your recent messages in that conversation and the relevant passages of course material are sent to Anthropic's API. Every answer carries a report button, so you can flag anything wrong or inappropriate for us to review.

Notifications. If you turn notifications on, we store the notification token your device gives us, which topics you have chosen, and — for signed-in devices — an optional device model label (like “iPhone 15 Pro”) that helps us administer sign-ins and troubleshoot delivery. Today we send one kind of notification: a new Ground Truth article. It begins on when you grant permission, and you can turn notifications off in Settings at any time. We do not send marketing notifications.

Notifications without an account. You can ask to hear about new Ground Truth articles without signing in. In that case we store only the notification token and device platform, connected to no name, email, or account — we could not tell you whose device a token belongs to. Turning the setting off removes the token, and a token that stops accepting deliveries is removed automatically.

Crash reports. When the app crashes, a technical report goes to Sentry so we can fix the fault. These reports cover the crash only and are not linked to your account or identity.

Stored on your device. Articles are cached so they work offline, downloaded audio stays until you remove it, and small preferences (such as the size you set the chat window to) are saved locally. None of that is sent to us, and deleting the app removes all of it.

Deleting your account. You can delete your account inside the app under Settings, or on the web at cortexa-consulting.ai/account. We email you a fresh confirmation code first, so no one else can delete your account. Deleting removes your profile, course access, progress, Cortexa Learn progress, certificates, Teaching Aide conversations, notification registrations, and saved preferences from our systems. The same deletion runs when we remove an account at your request.

One thing it does not reach: if you contacted us or asked about a course, your name, email — and, if you sent one, your message — are also in HubSpot, our CRM. That is a separate service, and account deletion does not touch it. Email hello@cortexa-consulting.ai and we will clear it.

Information you give us. When you use our contact form, we collect the name, email address, optional company, and message you submit, so we can read your inquiry and reply.

Information collected automatically. We use privacy-friendly, aggregate analytics (page views and performance metrics) that do not use advertising or cross-site tracking cookies and do not identify you personally. Our servers also process limited technical data (such as your IP address) transiently to deliver the site and guard against abuse of the contact form.

On your device. We store your light/dark theme choice locally in your browser. It never leaves your device and isn't used to track you.

We keep this to a minimum. We don't use advertising or cross-site tracking cookies, and nothing here follows you around the web.

• Staying signed in. If you sign in to reach your courses, two strictly-necessary cookies keep you signed in: a short-lived session cookie and one that renews it. Both are HttpOnly, so no script on the page can read them, and signing out clears them.
• The on-site assistant. If you use our chat assistant, we set a short-lived session token so we can keep your messages in one conversation and protect the assistant from automated abuse. Your messages are sent to Anthropic to generate the replies — see “Who we share it with” below. Your conversation is also saved in your own browser so you can pick it back up: for the rest of that tab's session, and for up to 7 days if you come back. We strip email addresses out of what gets saved. You can clear it any time by clearing site data for this site — worth knowing if you're on a shared or public computer. We may also use Cloudflare Turnstile — a privacy-preserving alternative to traditional CAPTCHAs — to confirm you're a person; it doesn't profile you or track you across other sites.
• Analytics & performance. Our analytics and performance monitoring (Vercel Analytics and Speed Insights) are aggregate and don't set cookies that identify you.
• Preferences saved in your browser. A handful of small settings are stored locally in your browser so the site behaves the way you left it: your light/dark theme choice, whether the assistant panel is open or dismissed, its size, whether voice is on or muted, and — in our training kits — whether you're viewing the virtual or in-person version. None of these are tracking cookies, none are sent to us as a profile, and all of them go away if you clear site data for this site.

To respond to your inquiry, to operate, secure, and improve the site, and to keep a record of our correspondence with you. That is the extent of it.

We don't sell or rent your information, and we don't use it to pitch you something you didn't ask about.

Only the service providers that help us run the site, and only so they can perform that service for us:

• Resend — delivers contact-form messages and sign-in codes to their recipients, and sends the Ground Truth newsletter if you subscribe.
• Vercel — hosts the site and the app's API, and provides the aggregate analytics.
• HubSpot — our CRM, where we record a request so we can follow up on it. What reaches it depends on how you got in touch. From the contact form, the alpha-access form, the chat, or the Prompt Generator, that is your name, email, and everything you submitted with them — your message and company details, and for the Prompt Generator the answers you gave in the wizard and whether you asked for Ground Truth. Your own words included. From “Ask about access” in the mobile app, it is only your name, email, and a one-line note we write ourselves naming the course; nothing about your course content or progress, and nothing you typed, because that screen has no message field. A CRM record is not removed by deleting your account. Deleting your account erases everything we hold about you in our own systems; HubSpot is a separate service, and we clear your record there on request — email hello@cortexa-consulting.ai and we will.
• Upstash — stores the account data behind the app: your profile, course access, progress, certificates, and Teaching Aide conversations.
• Sentry — receives the app's crash reports, which are not linked to your identity.
• Expo, Apple, and Google — deliver notifications to your device. A notification's headline and one line of text pass through Expo's push service and then Apple's or Google's notification network. We keep those messages plain and never put anything sensitive in them.
• Anthropic — powers the on-site assistant and the app's course Teaching Aide. When you send either one a message, that message and the conversation so far are sent to Anthropic's API to generate the reply.
• ElevenLabs — speaks the assistant's replies aloud, and only if you turn voice on. When voice is on, the text of the assistant's own lines is sent to ElevenLabs to be turned into audio. We don't send them anything you typed.

If you'd rather not have a conversation leave your browser, you don't have to use the assistant — everything else on the site works without it.

We may also disclose information if required by law. These providers process data in the United States.

We keep contact inquiries for as long as needed to respond and to maintain a reasonable business record, then delete them. You can ask us to delete yours sooner at any time.

For app accounts: your profile, course access, progress, and certificates stay while your account is open. Teaching Aide conversations are deleted after about six months without use, and a notification token is removed as soon as a device stops accepting notifications. Everything tied to your account is deleted when you delete the account.

A free Cortexa Learn account that is not used for 60 days is deleted automatically, with its Learn progress, by the same deletion that runs when you delete it yourself. Guest identities are deleted on the same schedule and by the same sweep. Opening the app or finishing a lesson counts as use. Accounts placed on a course by invitation are not deleted for inactivity.

You can ask us to access, correct, or delete the personal information you've shared with us. Just reach out via our contact page or email privacy@cortexa-consulting.ai. We'll honor reasonable requests and won't make you jump through hoops.

If you have an app account, you don't need to ask us at all: you can delete it yourself in the app under Settings, or on the web at cortexa-consulting.ai/account, and you can turn notifications off in the app's settings.

If you're a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, to access or delete it, to correct it, and to not be discriminated against for exercising those rights. We've described what we collect and why above.

We do not sell or share your personal information (as those terms are defined under California law), and we don't use it for cross-context behavioral advertising. To make a request, contact us at privacy@cortexa-consulting.ai.

We validate and sanitize what the contact form receives, serve the site over encrypted connections, and apply sensible safeguards. No method of transmission or storage is ever 100% secure, but we treat your information with care.

This site is meant for business audiences and isn't directed to children under 16, and we don't knowingly collect their information.

The app is for adults and is not offered to anyone under 18. Course accounts are created one at a time for the professionals enrolled in a course. A free Cortexa Learn account can be created by anyone with an email address, and creating one is an agreement that you are 18 or older. Playing as a guest is offered on the same terms. If we learn that an account belongs to a child, we delete it; a parent or guardian can ask us to at the address below.

If we update this policy, we'll revise the “last updated” date above. Material changes will be made clear on this page.

Questions about privacy? Reach us through the contact page or at privacy@cortexa-consulting.ai.