Privacy Policy

Introduction

This Privacy Policy explains how Cora, an application by Henry PL, LLC ("we," "our," or "us") handles your information. We are committed to protecting your privacy and ensuring transparency about our data practices.

Key Privacy Features

• All AI processing runs locally on your device using on-device models
• Your conversations are stored only on your device and are never transmitted to our servers
• No user accounts or registration required
• Core functionality works offline without an internet connection

Information We Collect

Analytics Data

We use PostHog to collect anonymous usage analytics to help improve the App. This includes:

• App usage patterns and feature interactions
• Error and crash reports
• Device type and operating system version

This data is anonymized and does not include your conversation content.

Subscription Data

If you subscribe to Cora Pro, we use RevenueCat to manage subscriptions. This includes purchase history and subscription status, processed through Apple App Store or Google Play Store.

Web Search Queries (Cora Pro)

If you use the web search feature in Cora Pro, your search queries are sent to our search provider (Tavily) to retrieve results. Your conversation history and context are not transmitted—only the specific search query.

Information We Don't Collect

• Your chat conversations or AI responses
• Personal identification information
• Location data
• Contacts or other personal data from your device

Local Storage

• All conversations are stored locally on your device using SQLite
• AI models are downloaded and run entirely on your device
• Your conversation data never leaves your device
• You maintain complete control over your local data

Third-Party Services

The App integrates with the following third-party services:

• PostHog - Analytics for app improvement
• RevenueCat - Subscription and purchase management
• Tavily - Web search functionality (Cora Pro only)
• Expo - App updates and over-the-air improvements
• Apple DeviceCheck / Google Play Integrity - Device verification for security

Data Security

• Conversation data remains secured on your local device
• API communications use secure HTTPS encryption
• Device integrity verification protects against unauthorized access
• We recommend enabling your device's security features (e.g., device password, biometric authentication)

Children's Privacy

The App is not directed to children under 16. We do not knowingly collect personal information from children under 16.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices. Users will be notified of any material changes through the App.

Your Rights and Control

You have control over your data:

• Delete conversations within the App at any time
• Remove the App and all local data from your device
• Manage subscriptions through your app store account settings
• Contact us to request deletion of any analytics data associated with your device

Contact Us

If you have questions about this Privacy Policy, please contact us at info@henrypl.com.