Privacy policy
Last updated 1 November 2026. Applies to the Corpus iPhone app and its AI service.
- Your records, Apple Health data and conversations are stored encrypted on your iPhone. There's no cloud copy.
- Cloud AI is optional. It's used only after you turn it on, and only for the document, photo, recording or question you act on.
- Our service doesn't keep what you send it. We don't show ads, run health-content analytics or sell health data.
- You can delete everything in the app at any time.
Who we are
Corpus ("we", "us") makes the Corpus app. Questions about this policy or your data: support@downloadcorpus.com.
What stays on your iPhone
Everything you add to Corpus is stored in an encrypted vault on your device:
- the original files you add (PDFs, photos, screenshots, text files), and what Corpus reads from them;
- data you allow Corpus to read from Apple Health, including clinical records you choose to share;
- meals you log, notes about yourself, appointments, reminders and visit recordings;
- your conversations and daily briefs;
- the spaces you create for family members.
During the beta the vault is excluded from iCloud and device backups, so deleting the app can delete your records. Keep your originals. There's no Corpus cloud sync.
Apple Health
Corpus reads only the Apple Health categories you grant, and never writes to Apple Health. Apple Health data is used only to show you your own health picture and answer your questions. It's never used for advertising or marketing, never sold, and never shared with anyone except the AI processors below, and only when you use an AI feature. You can change Corpus's access at any time in the Health app or Settings.
When data leaves your phone
Cloud AI is off until you turn it on in Corpus and sign in with Apple. Once it's on, the following is sent through our AI service, only when you act:
| When you… | What's sent | Processed by |
|---|---|---|
| Add a document or photo of a report | The text read from that document, or the image | OpenAI; Cloudflare Workers AI double-checks the values read from it |
| Add a photo | A small copy of the photo, to tell a meal from a document | Cloudflare Workers AI |
| Ask a question | Your question, recent conversation, and the records and measurements relevant to it | OpenAI |
| Open Corpus in the morning | The day's figures (for example sleep and steps against your usual) and the last 14 days' brief summaries | OpenAI |
| Log a meal from a photo | The meal photo and any note you add | OpenAI |
| Transcribe a recording | The audio segments you choose to transcribe | OpenAI |
OpenAI requests are made with response storage turned off, though OpenAI's own data policies still apply, so we can't promise zero retention by OpenAI. Cloudflare states that Workers AI doesn't keep inputs or outputs after a request or use them for training. Neither uses your data to train models through our service.
Our AI service doesn't store document contents, questions or answers, and doesn't log request bodies. It keeps only a pseudonymous account identifier derived from Sign in with Apple, sign-in sessions and usage counters, to control access and daily limits.
Dictation in the message bar uses Apple's speech recognition, on your iPhone where supported.
Genetic data
If you add a raw DNA file (for example from 23andMe or AncestryDNA), Corpus asks for your agreement first. It stores the file encrypted on your iPhone and reads a short list of markers from it there, to show you what your file says at markers linked to medicines, iron, Lp(a), alcohol and lactose. Your DNA file never leaves your iPhone, and nothing read from it does either unless you turn on Use my DNA in answers (below). Genetic data is never sold or shared, and never used for advertising, insurance, employment or research. If Corpus is ever sold or closes, we will delete genetic data rather than transfer it. Deleting the file in the app deletes everything read from it.
If you separately turn on Use my DNA in answers in Settings, then when you ask about something one of your markers relates to (such as a statin, warfarin, Lp(a), iron, alcohol or dairy), Corpus sends that marker's fixed sentence with your question to OpenAI, and the answer is checked by Cloudflare Workers AI before you see it. To decide whether a question relates to a marker, only your question is checked (by Cloudflare Workers AI), never anything from your DNA file. The morning brief may mention a marker's fixed sentence when something new makes it relevant, such as drinks you logged. Turn this off at any time.
Crash reports
When the app or our service crashes or hits an error, a report goes to Sentry, our error-tracking provider, so we can fix it. Reports contain device and app details (model, iOS version, app version) and where in the code the problem happened. They never include health information, screenshots, text from your records, your name or contact details, and error messages are reduced to their type before sending. Our provider is configured not to store IP addresses.
What we don't do
- No advertising, ad tracking or data brokers.
- No analytics on your health content.
- No sale or rental of personal or health data.
- No location tracking.
Family members and children
You can keep records for someone you care for, such as a child or a parent, in a separate space on your iPhone. You're responsible for having the right to manage their information. Corpus isn't designed for children under 13 to use on their own.
Keeping and deleting your data
- Delete any record, conversation, meal or person in the app; it's removed from your device.
- Turning AI off stops future AI requests. It can't recall processing that already happened.
- Deleting your AI account in Settings removes your sign-in sessions and usage counters from our service.
- Deleting the app deletes the vault on your device.
Because your records are on your device rather than with us, we can't see, export or recover them for you. To ask about anything we do hold, email support@downloadcorpus.com.
Security
The vault is encrypted on your device with keys kept in the iPhone Keychain. Traffic to our service is encrypted in transit, and every AI request requires a signed-in session.
Your rights
Depending on where you live, you may have rights to access, correct, delete or restrict the use of your personal data, and to complain to a regulator. Most of your data is on your device, under your control. For anything else, contact us and we'll respond within 30 days.
Changes
If we change how Corpus handles your data, we'll update this page and the date at the top, and tell you in the app before any change that sends more data anywhere.