Cortex · Privacy Policy

Privacy Policy

Last updated: June 2026

Cortex is a memory layer for Claude. It runs on your Mac, stores your memories locally, and by default makes no network calls. The core product is entirely on-device: no Cortex servers, no telemetry, no accounts required. If you choose to enable optional AI features (which run through your own Claude subscription, not Cortex), or the self-host Connector (which runs on your own Cloudflare account), those specific features make network calls — but only when you turn them on. This document explains exactly what we collect, what we don't, and what happens when you enable either of those optional paths.

Who We Are

Cortex is built by Acorn Designs, LLC, an independent studio based in the United States. "Cortex," "we," and "us" refer to the Cortex application and the operator who maintains it. Questions: [email protected].

What Information We Collect

Data that stays on your Mac (Free tier)

When you use Cortex locally, the following data is stored on your device and never leaves it:

This is true in Cortex's default state. Two optional, opt-in features can make network calls if you choose to enable them — see "Optional features and network calls" below.

All of this lives in a SQLite database at ~/.cortex/cortex.db. You can inspect it, export it, or delete it at any time using standard file tools or the in-app controls.

Optional features and network calls

Cortex has two optional features that, when enabled, initiate network calls from your Mac. Neither involves Cortex's own servers or API keys — the connections go to infrastructure you or Anthropic control.

If neither of these features is enabled, no data leaves your Mac.

Data you voluntarily provide

Two places you might share information with us:

Data on Cloud Sync (paid tier, coming soon)

If and when you opt in to the paid Cloud Sync tier, your memory database is replicated to Cloudflare infrastructure (Workers + D1) so it can follow you across Claude surfaces. Specifically:

(This is separate from the optional self-host Connector, which uses your own Cloudflare account — see "Optional features and network calls" above.)

What We Don't Collect

To be explicit about what we never do, even on the paid tier:

How Your Data Is Used

Local data is used solely to provide the Cortex experience: retrieving relevant memories, ranking them, consolidating patterns, and surfacing them to Claude through the MCP server. It is never transmitted off your Mac unless you enable the optional AI features, the self-host Connector, or cloud sync.

Email addresses on the waitlist are used only to send you product updates related to launch, and for no other purpose. One list, one sender, easy unsubscribe.

Storage and Security

Your local database uses SQLite's built-in durability. We recommend Mac users enable FileVault disk encryption for an additional layer of protection.

Cloud Sync (when enabled) uses Cloudflare's infrastructure, which provides TLS in transit, encryption at rest, and region-specific data residency where legally required.

Third-Party Services

In its default state, Cortex makes no third-party service calls. Depending on which optional features you enable:

Your Rights

Regardless of jurisdiction, you have the right to:

GDPR and CCPA

If you reside in the EEA, UK, or California, you have additional statutory rights under GDPR and the CCPA. Because the free tier of Cortex does not transmit or store your data on our servers, most of these rights apply trivially — your data is always under your control. For paid-tier users, we act as a data processor and honor all applicable access, correction, deletion, and portability requests within 30 days.

Children's Privacy

Cortex is not directed to anyone under 13. We do not knowingly collect data from children. If you believe a minor has shared data with us, please email and we will delete it promptly.

Changes to This Policy

We may update this policy as Cortex evolves. Material changes will be communicated via email to waitlist subscribers and paid-tier users, and the "Last updated" date at the top will change. Minor clarifications may be published silently.

Contact

Questions, deletion requests, or concerns: [email protected].

The Short Version