Privacy Policy

Last updated: Oct 6, 2026

This Privacy Policy is incorporated by reference in the Terms and Conditions of Corso ("Corso", or "us") and is part of the agreement between you, user of the Website and the Corso AI app ("Website", "App" or "Service"), and Corso Group.

Important Privacy Information

To use the service on the Website or in the App, we may ask you to enter information about your age, gender, email address, name, current financial situation and ask other onboarding questions. We also automatically collect from your device: language settings, IP address, time zone, type and model of a device, device settings, operating system. We need this data to provide our services, analyze how our customers use the service and to measure ads.
For improving our service and serving ads, we use third-party solutions. As a result, we may process data using solutions developed by Amazon Web Services, Meta, Google, TikTok, Hotjar, Amplitude, Apple, PayPal, FreshDesk, Solidgate, ActiveCampaign. Therefore, some of the data is stored and processed on servers of such third parties. This enables us to: (1) analyze different interactions; (2) serve ads. Consequently, we better understand in what features and content you see the most value and are able to focus on them to enhance your experience. To provide AI Chat, we send the messages you write in it to OpenRouter and the company behind the AI model you choose (Section 12).
Please read our Privacy Policy below to know more about what we do with data (Section 3), what data privacy rights are available to you (Section 5) and who will be the data controller (Section 1).
If any questions remain unanswered, please contact us through privacy@ai-corso.com.
This Privacy Policy explains what personal data is collected when you use the Corso Website, the Corso AI app for iOS and Android (the "App"), and the services and Digital products provided through them (the "Service"), how such personal data will be processed.
BY USING THE SERVICE, YOU PROMISE US THAT (I) YOU HAVE READ, UNDERSTAND AND AGREE TO THIS PRIVACY POLICY, AND (II) YOU ARE OVER 16 YEARS OF AGE (OR HAVE HAD YOUR PARENT OR GUARDIAN READ AND AGREE TO THIS PRIVACY POLICY FOR YOU). If you do not agree, or are unable to make this promise, you must not use the Service. In such case, you must (a) contact us and request deletion of your data; (b) cancel any subscriptions using the functionality provided by instructions on the Website; and (c) leave the Website and the App and not access or use them.
"GDPR" means the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
"EEA" includes all current member states to the European Union and the European Economic Area. For the purpose of this policy EEA shall include the United Kingdom of Great Britain and Northern Ireland.
"Personal data" means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Article 4(1) of the GDPR).
"Process", in respect of personal data, includes to collect, store, and disclose to others.

1. Personal Data Controller

The Corso controlling entity responsible for your information will depend on your location.
For users in the US, the controlling entity is Devellux Inc., a company registered at 800 Atlanta Road #1003, Seaford, DE 19973, USA
For all other users, including users in the EEA, UK, and Switzerland, the controlling entity is SKILLHUB FZCO, a company registered at IFZA Business Park, DDP, PO Box 342001, Dubai, UAE, will be the controller of your personal data.

2. Categories of Personal Data We Collect

We process data: (i) you give us (for example, when you enter your gender, financial status or email), and (ii) automatically when you use our Service (for example, your IP address via cookies or SDK technologies).
Data you give us — 1. Identifiers and onboarding data. You provide us information about yourself when you register for and/or use the Service. For example: email address and password.
2. Billing information. When you make payments through the Service, you need to provide financial account data, such as your credit card number, to our third-party service providers. We do not collect or store, or have access to full credit card number data, though we may receive some limited information including credit card-related data (including a secure token reflecting your payment method), data about products or services purchased, date, time and amount of the purchase, the type of payment method used, and limited digits of your card number.
3. Comments you provide with your requests. You may also provide us with some personal information using our "Contact us" forms or by sending emails to our email addresses. This information may include any comments you log when you send your inquiry.
4. Learning data. Your lesson progress, answers to exercises and quizzes, skills, streak goals and certificates.
5. AI Chat. The messages you send in AI Chat, the images you ask it to create and its replies (see Section 12).
Data we collect automatically — 2.1. Data about how you found us. We collect data about your referring URL (that is, the place on the Web where you were when you tapped on our ad).
2.2. Device and Location data. We collect data from your device. Examples of such data include: language settings, IP address, time zone, type and model of a device, device settings, operating system and its version.
2.3. Usage data. We record how you interact with our Service. For example, we log your taps/clicks on certain areas of the interface, the features and content you interact with, how often you use the Service, how long you are in the Service, and your subscription orders.
2.4. Transaction data. When you make payments through the Service, you need to provide financial account data to our third-party service providers. We do not collect or store full credit card number data, though we may receive credit card-related data and data about the transaction, including date, time and amount of the transaction, and the type of payment method used.
2.5. Cookies and similar tracking technologies. Our products employ technologies (cookies, SDKs, etc.) to process your data to enhance your user experience, optimize ads, and analyze traffic. These technologies are activated when you interact with our services or visit our website. Disabling these technologies may affect the functionality of certain features, although our products will remain usable.
A cookie is a small text file stored on a user's computer for record-keeping purposes. Cookies can be either session cookies (expire when you close your browser) or persistent cookies (remain on your hard drive for an extended period of time). We also use tracking pixels that set cookies to assist with delivering online advertising.
Cookies are classified by origin: first party cookies are set by our websites under our domain and sub-domains; third party cookies are set by other organizations and help us protect our site and provide extra services.
We respect your right to privacy and provide you with the option not to allow data processing that is not required for providing the services you request.
2.6. App diagnostics. The App sends crash reports and performance data, linked to your account ID (see Section 12).

3. For What Purposes We Process Your Personal Data and Legal Bases

To provide our Service & exercise contractual rights and responsibilities. This includes enabling you to use the Service in a seamless manner and preventing or addressing Service errors or technical issues. To host personal data and enable our Website to operate, we use Amazon Web Services. Lawful basis: Performance of contract with you and our legitimate interest — including securing our rights post-service.
To provide AI Chat. When you use AI Chat, we send your messages to OpenRouter, Inc. and the company behind the AI model you choose, which generates the reply (see Section 12). Lawful basis: Performance of contract with you and, in the App, your consent, which the App asks for before your first message is sent.
To keep the Service working. We use Sentry to receive crash reports and performance data from the App, so that we can find and fix errors. Lawful basis: Our legitimate interest — a working, secure Service.
To communicate with you regarding your use of our Service. We communicate with you, for example, by emails, using the details you provide. These may include information about the Service, critical changes, and special offers. Sign-in and password reset emails are sent through Mailgun. To opt-out of receiving emails, click the unsubscribe link in the footer of our email. Lawful basis: Our legitimate interest (customer engagement) or your explicit consent.
To personalize our ads. We and our partners, including Meta and Google, use your personal data to tailor ads and possibly show them to you at the relevant time. Lawful basis: Consent or Legitimate interest (unless it requires consent under certain e-Privacy regulations).
To manage your account and provide you with customer support. We process your personal data to respond to your requests for technical support, service information or any other communication you initiate. FreshDesk provides us with message and customer service tools, which enable us to communicate with you within the Service. Lawful basis: Performance of contract with you and our legitimate interest — ensuring effective customer support and satisfaction.
To research and analyze your use of the Service. This helps us to better understand our business, analyze our operations, maintain, improve, innovate, plan, design, and develop the Service and new products. We also use such data for statistical analysis purposes, to test and improve our offers. We keep usage events from the Website and the App in Google Cloud (BigQuery). Lawful basis: Legitimate interest — enhancing platform performance and safety.
To analyze how visitors use our Service and to measure effectiveness of ads. We use Google Analytics, which places cookies on your device, to provide aggregated analytics. We also use Amplitude, an analytics service by Amplitude Inc., to understand how customers use our Service and to decide what features to focus on. Lawful basis: Legitimate interest (unless it requires consent under certain e-Privacy regulations).
To send you marketing communications. We process your personal data for our marketing campaigns. We may add your email address to our marketing list when we receive consent or otherwise establish a legal basis. To unsubscribe, follow instructions in the footer of marketing emails. We use ActiveCampaign and Reteno for communications. Lawful basis: Our legitimate interest (customer engagement) or your explicit consent.
To process your payments. We use third-party services for payment processing. We will not store or collect your payment card details ourselves. We use third-party payment providers to process your payments on the Website. Lawful basis: Performance of contract with you.
To enforce our Terms and Conditions and to prevent and combat fraud. We use personal data to enforce our agreements and contractual commitments, to detect, prevent, and combat fraud. As a result of such processing, we may share your information with others, including law enforcement agencies. Lawful basis: Performance of contract with you and our legitimate interest.
To comply with legal obligations. We may process, use, or share your data when the law requires it, in particular, if a law enforcement agency requests your data by available legal means. Lawful basis: Complying with legal obligations.

4. With Whom We Share Your Personal Data

We share information with third parties that help us operate, provide, improve, integrate, customize, support, and market our Service.
Service Providers. We share personal data with third parties that we hire to provide services or perform business functions on our behalf, based on our instructions. We share your personal information with the following types of service providers: Cloud storage and hosting providers (Amazon Web Services, Google Cloud); Data analytics providers (Meta, Google, Amplitude); AI model providers for AI Chat (OpenRouter, Inc. and, through it, OpenAI, Anthropic, Google, xAI, DeepSeek and Perplexity); Error monitoring (Sentry); Marketing partners (social media networks, marketing agencies, email delivery services: Meta, Google, ActiveCampaign, Reteno); Account email delivery (Mailgun); Subscription management and payment processing providers (FunnelFox, Solidgate, PayPal); Communication services providers (FreshDesk).
Law Enforcement Agencies and Other Public Authorities. We may use and disclose personal data to enforce our Terms and Conditions, to protect our rights, privacy, safety, or property, and/or that of our affiliates, you or others, and to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, or in other cases provided for by law.
Third Parties as Part of a Merger or Acquisition. As we develop our business, we may buy or sell assets or business offerings. Customers' information is generally one of the transferred business assets in these types of transactions. We may also share such information with any affiliated entity and may transfer such information in the course of a corporate transaction, such as the sale of our business, a divestiture, merger, consolidation, or asset sale.

5. How You Can Exercise Your Privacy Rights

To be in control of your personal data, you have the following rights:
Accessing / reviewing / updating / correcting your personal data. You may request a copy of your personal data and request us to update/correct your personal data collected during your use of the Service through privacy@ai-corso.com.
Deleting your personal data. You can request erasure of your personal data by sending us an email through privacy@ai-corso.com. When you request deletion of your personal data, we will use reasonable efforts to honor your request. In some cases we may be legally required to keep some of the data for a certain time; in such event, we will fulfill your request after we have complied with our obligations. You can also delete your account yourself in the App: Profile → Settings → Delete account. https://ai-corso.com/delete-account explains what is deleted and what we keep. You can delete single AI Chat conversations at any time.
Objecting to or restricting the use of your personal data. You can ask us to stop using your personal data or limit our use. For example: for email marketing, you can unsubscribe via the link in every email or by contacting our support team. We also provide e-privacy settings to allow you to influence tracking on a granular per-purpose level. In the App, you can withdraw your permission to send AI Chat messages to the AI providers in Settings.
If you are based in the EEA, you have the right to lodge a complaint with a supervisory authority. We would love you to contact us directly, so we could address your concerns. Nevertheless, you have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the EU Member State where you reside, work or where the alleged infringement has taken place.
How to opt out or influence personalized advertising — macOS: Go to System Preferences > Security & Privacy > Privacy, select Apple Advertising, and deselect Personalized Ads. Windows: Select Start > Settings > Privacy and then turn off "Let apps use advertising ID to make ads more interesting to you based on your app activity."
Additional opt-out resources: Network Advertising Initiative – http://optout.networkadvertising.org/; Digital Advertising Alliance – http://optout.aboutads.info/; Digital Advertising Alliance (Canada) – http://youradchoices.ca/choices; Digital Advertising Alliance (EU) – http://www.youronlinechoices.com/
We use Meta pixel on the Service to track conversions from Meta Ads, build targeted audiences, and remarket to people who have taken actions on the Service. We also use Meta Ads Manager together with Meta Custom Audience to choose audiences that will see our ads.
We use Google Ads to deliver ads to users and allow us to tailor ads to users who have conducted certain actions with our Service.
The TikTok pixel is a piece of JavaScript code that helps measure the cross-device impact of campaigns and allows us to see how many TikTokers take action on our Website after seeing our ads.
The right to data portability. If you wish to receive your personal data in a machine-readable format, you can send a respective request through privacy@ai-corso.com.
To exercise any of the available privacy rights, please send a request through privacy@ai-corso.com.

6. Age Limitation

We do not knowingly process personal data from persons under 16 years of age. If you learn that anyone younger than 16 has provided us with personal data, please contact us through privacy@ai-corso.com.

7. International Data Transfers

We may transfer personal data to countries other than the country in which the data was originally collected in order to provide the Service set forth in the Terms and Conditions and for purposes indicated in this Privacy Policy. If these countries do not have the same data protection laws as the country in which you initially provided the information, we deploy special safeguards.
In particular, if we transfer personal data originating from the EEA to countries with not adequate level of data protection, we use one of the following legal bases: (i) Standard Contractual Clauses approved by the European Commission, or (ii) the European Commission adequacy decisions about certain countries.

8. Changes to This Privacy Policy

We may modify this Privacy Policy from time to time. If we decide to make material changes to this Privacy Policy, you will be notified through our Service or by other available means and will have an opportunity to review the revised Privacy Policy. By continuing to access or use the Service after those changes become effective, you agree to be bound by the revised Privacy Policy.

9. California Privacy Rights

This section provides additional details about how we process personal data of California consumers and the rights available to them under the California Consumer Privacy Act ("CCPA") and California's Shine the Light law. This section applies only to residents of California, United States.
Under Shine the Light law, California residents may ask companies once a year what personal information they share with third parties for those third parties' direct marketing purposes. To obtain this information from us, please send an email to privacy@ai-corso.com with 'Request for California Shine the Light Privacy Information' in the subject line and your state of residence and email address in the body of the message.
In addition, CCPA provides you with the Right to Opt Out of Sale or Sharing and limit Use of Personal Information. We may share certain information about you with our partners for purposes of targeted advertising or data analytics, which could in certain circumstances be characterized as "selling," "sharing," or "targeted advertising" under California laws. You have the right to opt-out of such sale/sharing of your personal information. We will strive to provide a prominently displayed "Your Privacy Choices" link to allow you to exercise this right.

10. Data Retention

We will store your personal data for as long as it is reasonably necessary for achieving the purposes set forth in this Privacy Policy (including providing the Service to you), which includes (but is not limited to) the period during which you have an account with us. We will also retain and use your personal data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. For example, under certain accounting and tax laws we are required to store Commercial Information for long periods of time. Therefore, even if you submit a data deletion request, a small portion of the data that relates to our compliance obligations will be stored even after the request is satisfied. AI Chat conversations are kept until you delete them or your account. When you delete your account, we delete the analytics records linked to it within 30 days, and crash reports expire in Sentry within 90 days.

11. How "Do Not Track" Requests Are Handled

Except as otherwise stipulated in this Privacy Policy, this Service does not support "Do Not Track" requests. To determine whether any of the third-party services it uses honor the "Do Not Track" requests, please read their privacy policies.

12. The Corso AI App and AI Chat

The App. The Corso AI app for iOS and Android is part of the Service, and this Privacy Policy applies to it. In the App we process your email address and password (to sign you in), the name you enter, your learning data, how you use the App (screens, lesson answers, searches, feedback), your device model and operating system, and crash reports. Our server records your IP address and the country it belongs to. The App does not ask for access to your camera, microphone, contacts, photos or location.
No tracking in the App. The App does not use advertising identifiers and does not track you across apps or websites owned by other companies. The advertising and analytics tools named in Sections 2–5 are not part of the App.
AI Chat. When you send a message in AI Chat, its text and the earlier messages of the same conversation are sent to OpenRouter, Inc., which passes them to the company that provides the AI model you chose (OpenAI, Anthropic, Google, xAI, DeepSeek or Perplexity) to generate the reply. We do not send your name or email address with them. OpenRouter and the model providers may keep the messages for a limited time under their own policies, for example to detect abuse; we do not let them use your messages to train their models. The App asks for your permission before your first message is sent, and you can withdraw it in Settings at any time. Your chats are stored in your account until you delete them or your account. If you report an answer, we receive the report together with the chat and message it belongs to, so that we can review it. Please do not share sensitive personal information in AI Chat.
Crash reporting. We use Sentry (Functional Software, Inc.) to receive crash reports and performance data from the App, linked to your account ID. Sentry keeps them for up to 90 days.
Email. Sign-in and password reset emails are sent through Mailgun; renewal reminders and marketing emails through Reteno. You can turn renewal reminders off in the App and unsubscribe from marketing emails using the link in each email.
Deleting your account. You can delete your account in the App (Profile → Settings → Delete account) or by writing to privacy@ai-corso.com. https://ai-corso.com/delete-account explains what is deleted and what we keep.

Contact Us

Email: privacy@ai-corso.com