CognitoCard — Privacy Policy

Last updated: August 2026

This Privacy Policy applies to the CognitoCard app developed by Aeiphos Ltd. Learn more about the CognitoCard app.

Data Storage

By default, CognitoCard stores all of your flashcards and study data exclusively on your device, and we have no access to it. If you enable iCloud Sync, your data is additionally synced as described below.

iCloud Sync

When enabled, CognitoCard uses iCloud Drive to sync your decks and study data across your devices. This sync takes place entirely within your own iCloud account; Aeiphos has no access to this data at any point.

AI Card Generation

By default, CognitoCard generates flashcards using Apple Intelligence, which runs on-device and does not send your data anywhere. CognitoCard Plus additionally offers card generation using Claude. When you use this option, the text you provide is sent to our server, which forwards it to Anthropic's API solely to generate your flashcards. Neither we nor Anthropic store this text or use it for any other purpose. Please refer to Anthropic's own privacy policy for details on how they handle data processed through their API.

Subscription Verification

To confirm your CognitoCard Plus subscription, the app sends Apple's signed transaction receipt to our server for verification. This receipt contains an anonymous transaction ID only — no name, email, or other personal information.

Data We Collect

We collect no personal data such as your name, email address, or contact details. To operate CognitoCard Plus, our server keeps an anonymized monthly count of AI generation requests, tied to your anonymous transaction ID, used only to enforce usage limits. No analytics, tracking, advertising identifiers, or crash reporting services are used.

Third Party Services

CognitoCard uses Apple's iCloud and App Store services for sync and subscription verification, and Anthropic's API for CognitoCard Plus card generation, as described above. Beyond this, CognitoCard uses no third party services, SDKs, or frameworks that collect data.

Children's Privacy

We do not knowingly collect data from anyone, including children under the age of 13.

Changes

Any updates will be posted at this URL.

Contact

Questions can be directed to privacy@aeiphos.com.