Privacy Policy

Overview

Corixa ("we", "our", or "us") operates the Corixa macOS application and browser extensions for Safari and Chrome. This privacy policy explains how we handle information when you use our products.

Information We Don't Collect

Corixa is built on a principle of data minimization. We do not:

• Collect usage analytics or advertising data
• Track your browsing history or saved content
• Store your data on our servers
• Sell your information or share it for advertising
• Use cookies or tracking technologies
• Require account creation or registration

How Corixa Works

Local Storage

All your saved content, categories, notes, and settings are stored locally on your Mac using Apple's SwiftData framework. It stays on your Mac, apart from the links and transcripts sent for summaries (see AI Features below) and any files you choose to export or back up.

Browser Extensions

Our Safari and Chrome extensions:

• Only access webpage content when you actively click the extension button
• Send saved content directly to your local Corixa app
• Do not transmit data to any external servers
• Use native messaging to communicate with the Mac app

YouTube Integration

When you connect your YouTube account:

• You sign in on Google's own page; Corixa never sees your Google password
• Sign-in tokens are exchanged and refreshed through our proxy server, which holds Corixa's Google app credentials; some playlist requests also pass through it. The proxy does not store tokens or playlist data
• Tokens are stored in your Mac's Keychain
• We only access playlists you explicitly choose to sync

AI Features

When using AI summarization features:

• Content is processed through our secure proxy server
• Providers receive requests from our proxy, not directly from your Mac
• Our server keeps standard access logs (IP address, time, request path) but not the content you send
• API keys are managed securely and never exposed to the client
• New YouTube videos are analysed automatically when you save them: the video link goes to Supadata for the transcript and the transcript to Anthropic for the summary. Turn off automatic content analysis in Settings and summaries only run when you ask

Third-Party Services

Required Services

Corixa interacts with these services only when you use specific features:

• YouTube API: For playlist synchronization (only with your authorization)
• Supadata and Anthropic: Transcripts and summaries (see AI Features)
• Sentry: Crash and performance reports (EU data region) with technical details such as app and macOS version, device model and what the app was doing, so we can fix problems. They are not used for advertising or profiling
• Web Content Extraction: For fetching page metadata when saving URLs

Optional Services

• WishKit: If you choose to submit feedback through the app
• RevenueCat: Processes Corixa Pro purchases made through the Mac App Store

Data Security

Your data security is protected through:

• Local storage using Apple's secure SwiftData framework
• macOS Keychain for sensitive information like API tokens
• Backup files with checksums that detect damage
• Secure HTTPS connections for all network requests
• App sandboxing and macOS security features

Your Rights and Choices

You have complete control over your data:

• Export: Export all your data at any time through the app
• Delete: Remove individual items or entire categories
• Backup: Create backups of your entire library
• Disconnect: Revoke YouTube access at any time
• Uninstall: Removing the app removes all associated data

Children's Privacy

Corixa is not directed at children under 13. We do not knowingly collect information from children under 13. The app requires macOS 15.0 or later and is intended for general audiences.

Updates to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. Continued use of Corixa after changes constitutes acceptance of the updated policy.

Open Source Commitment

We believe in transparency. While Corixa's source code is proprietary, we're committed to clearly documenting our data handling practices and responding to any privacy concerns.