Last updated: August 1, 2026
Cortalius ("the app," "we," "our") is developed by Arlig LLC, doing business as Techtraption ("Techtraption"). This policy explains what data the app handles, why, and what happens to it.
Every mind map you create is stored as a file on your own device, in a location you choose. We have no account system and no way to see your maps — we couldn't share them or lose them in a breach, because we never receive them. The one narrow exception is described below under "Report a Bug": if you explicitly opt in, the text of your nodes and notes for that one report is sent to us for that one purpose.
The app does not measure how you use it for advertising purposes, does not share data with ad networks or data brokers, and does not track you across other companies' apps or websites.
When you buy a Pro or Premium subscription, a lifetime unlock, or a Supporter subscription, that transaction goes through Apple's App Store and StoreKit — we never see your payment card details or purchase history. See Apple's own privacy policy for how Apple itself handles that transaction.
Tapping "Give Feedback" in Settings opens our public feedback board, feedback.cortalius.com — a website we operate ourselves — in your browser (or an in-app browser sheet on iPhone/iPad). The link includes a small signed token containing your subscription tier, whether you're a Supporter, and a one-way hashed device identifier (see "Identifiers" below), so the board can recognize your tier and vote weight without asking you to sign in separately. Nothing is sent until you tap this button.
Tapping "Report a Bug" opens a form, followed by a preview screen that itemizes exactly what will be sent before you can submit anything. If you submit, we receive: the title, description, steps-to-reproduce, and severity you typed; your platform and app version; non-personal counts of nodes, connectors, groups, custom fields, and attachments (counts only, never their content); and short, generic labels for your last ~20 actions (e.g. "Added child node," "Moved node"). If — and only if — you check "Also include the text inside my nodes and notes," we also receive that text.
Attachments (images and files) are never included, under any circumstances, regardless of that toggle. Submitted bug reports (title, description, steps, severity, and the non-personal counts/labels above) become part of our public feedback board, visible to anyone — the same as a bug reported directly on our website. Any node/note text you choose to include is not published to that public board; it's used only in an internal notification email and a copy kept in our own password-protected internal tracker, so a person can actually review and fix the bug.
To prevent abuse (like farming unlimited free accounts for extra feedback-board votes) and to let a bug report be linked to your existing feedback-board account if you have one, the app generates a single random identifier the first time you use "Give Feedback" or "Report a Bug," stores it in your device's Keychain (synced privately across your own devices via iCloud Keychain — not shared with us or anyone else), and only ever sends us a one-way cryptographic hash of it. We never receive the identifier itself, your Apple ID, or any Apple device identifier. This hash cannot be reversed to identify you personally, is never combined with data from any other company, and is never used for advertising.
ATT governs sharing a user or device identifier with other companies for cross-app advertising, or with data brokers. Cortalius does neither: every network request the app makes goes only to Apple (StoreKit) or to servers we operate ourselves, for the specific, user-initiated purposes described above.
Your location, camera or microphone data, contacts, or photo-library contents (the app never requests any of these permissions); your browsing history; or any data we sell or provide to third parties.
Your map data never reaches us, so there's nothing on our end to retain or delete for it. For anything you've sent us via "Give Feedback" or "Report a Bug": email [email protected] and we'll remove your submission from the public feedback board and our internal tracker on request. We don't currently offer in-app self-service deletion for a submitted report — if that changes, this policy will be updated to describe it.
These features are on our roadmap but not built yet. This policy will be updated with a full description of what's synced/shared/sent, and to whom, before any of them ship.
Cortalius is not directed at children under 13. We do not knowingly collect data from anyone under 13 — "Give Feedback" and "Report a Bug" are general-audience features a user has to deliberately choose to use, not something the app does automatically or in the background.
If what the app does ever changes in a way that affects this policy, we'll update this page and the "Last updated" date above.
Email [email protected] — we read and respond to every message.