Privacy, by design.

At ConX: Study, Research, AI, we take your privacy seriously. This Privacy Policy describes how ConX handles information when you use our mobile applications, desktop applications, and web services (collectively, the “Services”).

The Services are provided by Kaleb Belay, the business owner. Eyasu Belay develops ConX and manages its day-to-day operations, technical support, and privacy requests. For privacy questions or data requests, contact info@devos.co.il.

1. Information we collect

To provide the ConX workspace, we may collect the following categories of information:

• Account information: Your account identifier, email address, authentication details, and any profile name or profile image you choose to provide.
• User content: Notes, block databases, uploaded documents, source links, and audio recordings submitted for transcription or study synthesis.
• AI interactions: Questions and chat prompts sent to the assistant, along with generated responses.
• Purchase and subscription information: In-app purchase records and subscription entitlements processed through RevenueCat, Apple, and Google. ConX does not store raw card numbers.
• Technical information: Application crash logs, performance signals, and device or operating-system information used to maintain reliability.

2. How we use your information

We use information to provide and protect the Services, including:

• Providing note synchronization, source search, audio transcription, and study tools.
• Processing documents, text, and audio through secure service providers to return requested AI results.
• Verifying subscription status and reconciling purchases through the relevant billing systems.
• Protecting accounts, detecting unauthorized activity, and maintaining the health of the service.

3. Artificial intelligence and third-party processing

ConX does not itself train or fine-tune AI models on your content. We use third-party AI services to provide ConX's features. Some provider terms may permit model improvement using recordings, as explained below.

ConX uses artificial intelligence and machine-learning services for transcription, document analysis, retrieval, and study assistance.

Before optional AI processing, ConX asks for your permission to share the relevant content with the identified AI services. Your choice belongs to your account and applies across your signed-in devices. You can withdraw or give this permission in the app's account settings. You can continue using ordinary notes and accessing saved content without this permission.

Withdrawal stops new AI processing once the server confirms your change. Requests already in flight may finish; withdrawal cannot recall information already received by a provider. Withdrawal does not itself delete your saved content or cancel an App Store or Google Play subscription. Content and account deletion are separate options described below. When you share a notebook, authorized collaborators may request AI processing of content they can access; your account's permission controls the requests you initiate and does not change other members' notebook access rights.

• Uploaded material and questions are sent through encrypted service calls to provide the requested result.
• AI document analysis, study generation, chat, and search use Alibaba Cloud (Qwen). Audio transcription uses Modulate. Cloud storage and document conversion use Google Cloud, and application infrastructure uses Oracle Cloud. The ConX website and account pages are hosted on our Oracle Cloud infrastructure.
• Document pages, images, audio parts, selected source passages, and questions are shared only as needed for the requested processing. Providers may process information outside your country.
• Alibaba Cloud states that it does not use customer data for model training. See its Model Studio privacy notice.
• Audio transcription is processed by Modulate. Under its published self-service terms, section IV.B, recordings may also be used to train and improve Modulate's models. ConX's own no-training statement does not extend to this provider use. See also Modulate's privacy policy and Velma Services Privacy Addendum.
• Provider data retention is separate from model training. Information may be retained under the applicable service terms and our service arrangements; we do not promise zero-retention processing.

Apple or Google processes store payments. RevenueCat receives store transaction and subscription information associated with an app account identifier to verify access, renewals, cancellations, and refunds. Where crash reporting is enabled, Sentry receives diagnostic events; the client is configured to disable default personal information and screenshot collection.

We use Brevo to deliver account verification, password recovery, collaboration invitations, and other service emails. Brevo processes recipient email addresses and message content for delivery. Emails also use open and link-click tracking, which may record engagement events and associated technical information. See Brevo's explanation of email tracking. These email events are separate from the permission you give ConX to send content for AI processing.

4. Storage and retention

Synced notes, extracted source content, transcripts, generated study materials, and account information are retained to provide your workspace. Original files and recordings may also remain on your device. Successful source processing schedules cleanup of temporary cloud upload and processing artifacts; this does not remove the extracted content saved in your workspace.

We keep account and workspace data while it is needed to provide the Services, until you delete the content or request account deletion, subject to the exceptions below. Deletion requests are processed through the applicable account-verification and deletion process.

Limited billing, transaction-deduplication, and provider-cost records may remain where needed to account for charges, prevent duplicate financial effects, resolve payment disputes or comply with legal recordkeeping obligations. Their retention depends on the applicable obligation and whether the payment or dispute remains unresolved. Our deletion policy separates this financial evidence from your workspace content.

Operational backup copies may remain after primary data is removed until the relevant backup is replaced or expires. Deletion does not erase exported copies or recordings on your own devices. Provider retention follows the relevant provider's terms and our service arrangement. We do not promise instant deletion from every backup or zero-retention provider processing.

Modulate distinguishes ordinary API processing from features that store audio and outputs; where storage applies, its published default is 35 days. Usage logs are retained separately. Its privacy policy permits de-identified training data to be retained for up to 10 years and aggregated data indefinitely. These are provider policies, not a promise that every uploaded recording is stored for those periods. See Modulate's retention and Velma-specific provisions.

5. Account and data deletion rights

You can delete individual content or request deletion of your full account:

• In-app deletion: Use the account and security controls inside ConX.
• Email request: Use the Account and Data Deletion page to prepare an email, then review and send it. Preparing the email alone does not submit a deletion request.

A request may require verification that you control the account. Deleting an account does not itself cancel an Apple or Google subscription: cancel through the store if you want to stop renewal. Removing cloud data does not automatically erase copies you exported or stored on your devices.

You may contact us to request access to, correction of, or deletion of your information, and to exercise other rights available under applicable law. We assess requests according to the law and the information needed to verify ownership.

6. Children’s privacy

ConX is intended for users aged 16 or older. Users aged 16 or 17 must have permission from a parent or legal guardian. We do not knowingly collect personal information from users under 16. If you believe someone under 16 has provided personal information, contact info@devos.co.il so we can review and remove it where appropriate.

7. Changes to this policy

We may update this policy as the Services change. The current version and its effective date will always be posted on this page.

8. Contact us