Cornelius privacy policy

Last updated: 4 November 2026

Cornelius is a chat assistant for iPhone made by Sofaverse Studios LTDA. (CNPJ 65.463.254/0001-91). It has no account system and no server of its own. This page explains what the app does with your data.

What the app sends, and where

• Your messages, attached photos, your memories, and what the assistant reads are sent to the AI provider you chose in Settings (for example Anthropic, OpenAI, OpenRouter, DeepInfra, DeepSeek, RunPod, or a server you run yourself). What the assistant reads includes files, web pages, terminal output and files copied from your SSH computers. All of it goes straight from your iPhone to that provider using your own API key. The provider's privacy policy governs what happens there.
• Free mode uses Apple's model on the iPhone, so your messages are not sent to an AI provider.
• Web searches are sent to DuckDuckGo, and pages the assistant reads are fetched from the sites that host them. Those sites see the request like any browser visit.
• Financial analysis sends the stock symbols you ask about to Yahoo Finance, and reads public data from sources such as the US Treasury and the SEC.
• Pictures you ask for are made by the image service you chose (for example OpenAI, OpenRouter, DeepInfra, or a RunPod server you run). Your request, and any photo you ask it to edit, go to that service.
• Talk mode and dictation use the microphone only while listening. What you say is turned into text either by the iPhone's speech recognizer (on the iPhone when your language supports it, otherwise by Apple) or by the speech service you chose in Settings. Spoken replies and answers read aloud are made by the iPhone or by the voice service you chose (for example DeepInfra, ElevenLabs, OpenAI, or a RunPod server you run). A voice sample you upload to make a custom voice goes to that service.
• The SSH terminal connects only to the computers you add, straight from your iPhone.
• Nothing is sent to Sofaverse Studios. The app has no analytics, no crash reporting, no advertising identifiers, and no tracking. If you chose in the iPhone's settings to share analytics with app developers, Apple may give us anonymous crash reports and usage totals.

What stays on your iPhone

• Your API keys and SSH passwords, stored in the iOS keychain. The list of SSH computers (address and user name) is kept in the app's settings.
• Your conversations, memories, settings, and the files the assistant writes, stored in the app's own folders. The files are visible in the Files app under "Cornelius" so you can share or delete them. They can be part of your iPhone backups.
• Deleting the app deletes your conversations, memories, settings and files. Conversations and memories can also be deleted inside the app. iOS can keep keychain items after an app is deleted, so remove your keys and passwords in the app first if you want them gone too.

Email and this website

If you email us, we keep your message and your address so we can answer you. Email to us passes through Cloudflare and Google.

This website sets no cookies and has no analytics. It is hosted by Cloudflare, which handles the requests for its pages.

Your rights

Under Brazil's data protection law (LGPD) and similar laws, you can ask us what data we hold about you and ask us to correct or delete it. We only hold the emails you send us. For anything the app sent to an AI provider or another service, contact that service, because we have no access to it.

Children

Cornelius is not directed at children under 13 and is rated for adults because it can search the open web.

Changes

When this policy changes, the date at the top changes with it.

Contact

Sofaverse Studios LTDA., CNPJ 65.463.254/0001-91, Alameda Dourado, 535, Alphaville, Santana de Parnaíba, SP, 06540-285, Brazil.

Questions or deletion requests: contato@sofaversestudios.com