Privacy Policy
Last updated: 20 September 2026
Amicortex is an AI companion and assistant app. This policy explains, in plain language, what we collect, why we collect it, who we share it with, and how you can get it deleted.
Amicortex is operated by an individual developer based in Haryana, India (not a registered company). In this policy, "we", "us" and "Amicortex" mean that developer. You can reach us at support@amicortex.app.
The short version. We collect your name and email so you can log in, and we store your conversations so the app can remember you. We send your messages to AI providers to generate replies. If you buy a paid plan, the payment itself is handled by our payment provider — we never see your card or bank details. We do not sell your data, and we do not show ads. You can delete your account and everything in it from inside the app at any time.
YouTube API Services
Amicortex uses YouTube API Services. The music feature finds and plays songs through the YouTube Data API and YouTube’s own embedded player. By using Amicortex, you are agreeing to be bound by the YouTube Terms of Service, available at https://www.youtube.com/t/terms. Section 3 sets out exactly what YouTube receives, what we keep, and for how long.
Google Privacy Policy. Information collected and handled by Google through YouTube API Services is governed by the Google Privacy Policy, available at http://www.google.com/policies/privacy.
Information stored on, accessed on, or collected from your device. Amicortex, and third parties acting through Amicortex, store, access and collect information directly or indirectly on or from your device, including by placing, accessing or recognising cookies or similar technologies on your device or browser. Section 1g lists exactly what is stored and by whom.
Revoking access. You can revoke Amicortex’s access to your data at any time through the Google security settings page at https://security.google.com/settings/security/permissions, or at https://myaccount.google.com/permissions.
1. Information we collect
a. Account information
- Your name, email address, and a password (stored in an encrypted, hashed form that we cannot read).
- If you sign in with Google, we receive your name, email address, and profile picture from Google. We never receive your Google password.
- A one-time verification code sent to your email when you sign up or reset your password.
b. Your conversations
- The messages you send and the replies Amicortex generates.
- A short written summary of what Amicortex has learned about you, plus individual remembered facts. This is what lets the app continue a conversation days later.
- Images you generate, and images you upload for Amicortex to look at.
c. Voice
When you use voice mode or dictation, your speech is converted to text by your phone's own speech-recognition service (on most Android phones this is Google's speech service). Replies are read aloud using a text-to-speech provider. We do not store recordings of your voice. Only the resulting text is saved, in the same way a typed message would be.
d. Safety features (only if you use them)
- Emergency contacts you add: their name, phone number, email and relationship to you.
- Location: when — and only when — you start an SOS, a Walk With Me session, or a reach-home timer, we collect your device's location repeatedly and store it so the people you chose can follow you on a live tracking link. While a session is running, a notification stays visible on your phone, and location may continue to be collected with the app in the background until the session ends. Location is never collected at any other time.
- A private code word you set, if you choose to set one.
A tracking link is unlisted and unguessable, and it stops updating when the session ends. Anyone who has the link can see that session's location history, so only share it with people you trust.
e. Email sending (only if you use it)
If you ask Amicortex to send an email, we store the recipient's address and the time of sending, so we can enforce a daily limit and prevent abuse. If you connect your own Gmail account, we store a Google access token so we can send on your behalf. We request only permission to send mail — Amicortex cannot read, search, or delete anything in your inbox. You can disconnect a Gmail account at any time from inside the app, or at myaccount.google.com/permissions.
f. Payment and subscription information (only if you buy a paid plan)
Paid plans are processed by Razorpay Software Private Limited, an RBI-authorised payment aggregator. When you pay, you are handed to Razorpay's own secure checkout.
- We never see, receive or store your card number, CVV, UPI PIN, net-banking password or bank account details. Those go directly to Razorpay and are handled under their own privacy policy and PCI-DSS standards.
- What we store is limited to a record of the transaction: an order ID and payment ID issued by Razorpay, the amount, the currency, the plan you bought, whether the payment succeeded or failed, and the date. We also store which plan your account is on and when it expires.
- Razorpay may share a masked identifier with us, such as the last four digits of a card or the payment method used, so that we can show you a receipt and answer billing questions.
- To complete a payment, Razorpay receives your name, email address and the amount from us, and may collect further details from you directly as required by Indian law and by their own KYC and fraud-prevention obligations.
Razorpay's handling of your payment data is governed by their privacy policy at razorpay.com/privacy.
g. Technical information, and what is stored on your device
Our hosting and backend providers automatically record standard technical data such as IP address, browser type, and timestamps, in order to run the service and protect it from abuse. We do not use advertising trackers or third-party analytics cookies.
What Amicortex stores on, accesses on, or collects from your own device. Amicortex stores, accesses and collects information directly or indirectly on or from the device or browser you are using, including by placing, accessing or recognising cookies or similar technologies on your device or browser. This is what it holds:
- your login token, so you are not signed out every time you open the app;
- your settings — theme, accent colour, app language, chosen voice, whether web search is on, and your notification choices;
- which chat you had open, which chats you pinned, and any message that failed to send so it can be tried again;
- the IDs of songs you reported, so those songs are not shown to you again.
Amicortex also allows third parties to store, access and collect information on or from your device. The YouTube player embedded in the music feature, and Google Sign-In, place, access and recognise cookies and similar identifiers on your device or browser under Google’s own control. That information is governed by the Google Privacy Policy at http://www.google.com/policies/privacy, not by this one. Razorpay does the same during checkout. Clearing your browser or app storage removes what Amicortex has stored; you can also control cookies through your own browser settings.
2. Why we use it
| Purpose | What it uses |
|---|---|
| Let you log in and keep your account secure | Name, email, password, verification codes |
| Generate replies | Your messages and remembered context |
| Remember you between conversations | Conversation summary and saved facts |
| Show you your chat history and image library | Messages and generated images |
| Alert the people you chose in an emergency | Emergency contacts and location |
| Send email on your request | Recipient address, Gmail token if connected |
| Take payment and give you the plan you bought | Name, email, order and payment IDs, amount, plan |
| Show receipts, handle billing questions and prevent payment fraud | Transaction records, masked payment identifier |
| Prevent abuse and control costs | Usage counts, technical logs |
We do not use your conversations to train our own AI models.
3. Who we share it with
We do not sell your personal information, and we do not share it for advertising.
How your information is used and shared, internally and externally. Internally, your information is used only to run Amicortex for you: to sign you in, to generate replies and images, to let the app remember your context between sessions, to count your usage against your plan, and to operate the safety features you switch on. Amicortex is run by one developer, and only that developer can access the systems below, for support and for keeping the service working. Externally, information is passed to the service providers listed here, each of which receives only what its part of the job needs, and each of which handles it under its own privacy policy. We do not pass your information to anyone else, we do not share it with data brokers or advertisers, and we do not use it to train our own AI models.
We share only what is needed with the service providers that make the app work:
| Provider | What it receives |
|---|---|
| OpenAI | Your message, remembered context, and images you upload, in order to generate a reply or an image |
| Dify | Routes your message to the AI model |
| Supabase | Database and sign-in — stores your account, chats, and settings |
| Cloudflare | Hosting, request routing, and storage of generated images |
| ElevenLabs | The text of a reply, in order to read it aloud |
| Simli | The audio of a reply during a video call, in order to animate the avatar's face. Your camera picture is never sent |
| Google Firebase (Crashlytics) | Technical crash reports from the Android app — device model, Android version and the error. No chats, messages or photos |
| Resend | Verification codes and emails you ask us to send |
| Sign-in; Gmail sending if you connect it; search for songs if you use the music feature | |
| Razorpay | Your name, email and the amount, in order to take payment for a paid plan. Card, UPI and bank details are collected by Razorpay directly and never reach us |
| Tavily | A search query, when a question needs current information from the web |
These providers may process and store data outside India, including in the United States and the European Union. We may also disclose information if we are legally required to, or where it is necessary to protect someone's safety.
Google Workspace data — Limited Use
The use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Amicortex uses AI/ML models provided by third parties (such as OpenAI, accessed through Dify) to draft the text of an email at your request. We affirm that Google user data — whether raw, aggregated or derived — is never used, transferred or sold to create, train, fine-tune or improve any foundational or generalised artificial intelligence or machine learning model, and is never used to develop, improve or train any non-personalised model of ours or of any third party.
Data obtained through Google Workspace APIs is used solely to provide the user-facing feature the user explicitly requested, and is not used for advertising, profiling, or human review other than where required for security, to comply with applicable law, or with your explicit consent.
YouTube API Services
The music feature in Amicortex uses YouTube API Services. When you ask Amicortex to play a song, we send your song request to the YouTube Data API in order to find a matching video, and the video is then played inside the app using YouTube's own official player.
What YouTube receives. The search text for the song (for example “Kesariya”), and the standard technical information that YouTube's player collects when it loads and plays a video. We do not send YouTube your name, your email, or anything you have said to Amicortex in chat.
What we keep. We store the video ID and title of songs you have played, so that the song card still appears when you reopen an old chat, and so that a song you report is not shown to you again. We do not download, copy or store any audio or video from YouTube.
By using the music feature you are also bound by the YouTube Terms of Service. Information handled by YouTube and Google is governed by the Google Privacy Policy.
Revoking access. You can review and remove Amicortex's access to your data at any time from the Google security settings page.
4. How long we keep it
- Account details, chats, memory and images: until you delete them or delete your account.
- Location points from a safety session: kept with that session's record so you and your contacts can review it afterwards; deleted with your account.
- Payment and subscription records: retained even after you delete your account, because Indian tax and accounting law requires transaction records to be kept for up to eight years. These records contain the order details only — never your card or bank information.
- Email verification codes: a few minutes.
- YouTube API data: 30 days. Search results and the song catalogue are cached to reduce the number of calls made to the YouTube Data API. Every cached entry expires automatically 30 days after it is written and is then refreshed from the API or deleted. We store only video IDs and titles — never audio, video, thumbnails or any other content, and never any YouTube user data. A song ID kept inside one of your own saved chat messages, or in your reported-songs list, is deleted when you delete that chat or your account.
- Technical logs held by our providers: typically a short retention period set by each provider.
5. Your choices and rights
- Delete your account. Open Amicortex → your profile → App → Data controls → Delete account. This removes your account, chats, memory and images. It cannot be undone.
- Delete individual items. You can delete any chat, and any image in your Library, at any time.
- Disconnect Gmail from the Gmail screen in the app.
- Turn off location at any time in your phone's settings. Safety features that need location will then stop working.
- Cancel a paid plan at any time from inside the app. Your plan stays active until the end of the period you have already paid for, and is not renewed after that. Please see our Refund and Cancellation Policy for what is and is not refundable.
- Get a copy of your data, or ask us to correct it — email support@amicortex.app and we will respond within 30 days.
Under India's Digital Personal Data Protection Act, 2023 and comparable laws elsewhere, you may have the right to access, correct, and erase your personal data, and to withdraw consent. The steps above are how you exercise those rights; email us if anything is unclear.
6. Security
Traffic is encrypted in transit (HTTPS). Passwords are hashed. API keys are held on the server, not in the app. Access to your data requires your login token. Payments are handled entirely on Razorpay's PCI-DSS compliant systems, so no card or bank details ever exist on ours. No system is perfectly secure, and we cannot guarantee absolute security — please use a strong, unique password.
7. Children
Amicortex is not intended for anyone under 13. If you are under 18, please use it only with a parent or guardian's permission. If we learn that we have collected data from a child under 13, we will delete it. If you believe a child has an account, email support@amicortex.app.
8. Changes to this policy
If we make a significant change, we will update the date at the top of this page and, where the change materially affects you, tell you inside the app.
9. Contact
Questions, requests, or complaints about privacy: support@amicortex.app. We aim to reply within 7 days and to resolve requests within 30 days.