Effective: September 1, 2026
This Notice describes how Rohan Oruganti, operating CortexLoops as an individual ("we", "us"), handles personal data collected through the CortexLoops website and product. It applies to visitors of this site and to anyone who creates a CortexLoops account.
When you create an account: your email address, a securely hashed version of your password (we never store the password itself), your display name, and your chosen avatar color. As you use CortexLoops: evidence-backed skill states, diagnostic answers and results, and the full content of lesson conversations with the tutor, so the system can check understanding and adjust what it teaches next. We also set one session cookie to keep you signed in; see the Cookie Policy for detail.
To run your account (sign-in, keeping your progress synced across visits), to generate diagnostics and lessons tailored to what you already know, to check whether a lesson actually landed, and to keep the skill map and study plan up to date as you learn. We do not use your data for advertising, and we do not sell it.
CortexLoops' diagnostics and lessons are generated by sending the relevant conversation (your answers and the tutor's questions) to a third-party AI inference provider (currently Groq) to produce the next question or explanation. That provider processes this content to return a response but is not authorized by us to use it to train their own models. Do not paste anything into a lesson you would not want processed by that provider.
CortexLoops sets one cookie: a session cookie used only to keep you signed in. It is not used for tracking or advertising. See the Cookie Policy for the full detail. The site sets no analytics or third-party tracking cookies.
We use a cloud hosting provider to run the CortexLoops servers and database, and the AI provider described above to generate lesson content. Neither is permitted to use your data for their own purposes beyond providing that service to us.
We keep your account and learning data for as long as your account is active. When you delete your account from your profile, the application deletes its associated account and learning records. Backups may retain data for a limited period where technically necessary or legally required.
Passwords are hashed (never stored in plain text) and session cookies are set HttpOnly and, in production, Secure, so they cannot be read by page scripts or sent over an unencrypted connection. No system is perfectly secure, and we cannot guarantee against every possible breach, but we do not claim a certification or standard (e.g. SOC 2) we do not actually hold.
CortexLoops is not intended for anyone under 13. We do not knowingly collect personal data from children under 13, and if we learn that we have, we will delete it. If you believe a child under 13 has created an account, contact us using the details below.
You can access, correct, export, or delete your personal data at any time from your profile page, or by emailing us using the contact details below. If you are in a jurisdiction that grants you additional statutory rights over your data (for example under GDPR or a US state privacy law), we will honor those to the extent they apply, and you can reach us at the contact below to exercise them.
We may update this Notice as CortexLoops changes. If a change is material, we will post a notice on the site and update the effective date above.
Questions about this Notice, or to exercise a data right: hello@cortexloops.com.