01 Start with where the information is handled
Core Security products include device-management, scanning, recording, colour-vision, text-assistance and network utility functions. Most working content remains on the device. A product does not upload a file merely because access permission was granted.
- Voice recordings created by the voice-memo function are saved locally on the iPhone.
- Colour-vision test responses and results are evaluated and retained locally; the feature is an informational screening aid, not a medical diagnosis.
- Storage review, selected documents, QR content and local network results are processed on the device when the requested operation can be completed there.
02 Text assistance through OpenRouter
When a user actively asks the teleprompter feature to refine text, the text entered for that request is transmitted to OpenRouter so that a revised result can be returned. Do not include confidential or unnecessary sensitive information in a prompt.
This text workflow is separate from photos, voice recordings, colour-vision results and ordinary documents. Those items are not sent to OpenRouter as part of text refinement.
If prompt text or its generated result is stored in connection with processing, it is deleted no later than two weeks after the last related processing activity. OpenRouter also handles information under its own service and privacy terms.
03 Permissions and connection data
A feature may request Camera, Photos, Files, Local Network or Location access only when that access is needed for the action being used. Location is processed only with permission and when a relevant function requires it. An IP address may be processed when a product connects to an online service.
You may refuse or revoke a permission in iOS settings. The affected function may then be unavailable, but unrelated functions should remain unaffected.
04 Records Core Security may receive
We may receive limited support correspondence, transaction or entitlement status supplied by an app marketplace, and technical connection or security records needed to operate an online request. Apple or the relevant marketplace processes complete payment credentials; we do not receive complete card details.
We use these records to deliver requested functions, answer support questions, maintain reliability and security, verify applicable purchase access, and meet legal obligations.
05 Disclosure and retention
Information may be disclosed to OpenRouter for a user-requested text operation, to an app marketplace for purchase administration, to a destination selected by the user, or when legally required or reasonably necessary to protect rights and security. We do not sell user recordings, files, test results or prompts for monetary payment.
Local content remains subject to device settings, backups and the user’s deletion choices. Support, security and transaction records are kept only as long as reasonably necessary for their purpose or a legal obligation. The two-week limit applies only when content is actually stored for an OpenRouter processing workflow; it is not a general retention period for local files or marketplace records.
06 Your controls and privacy requests
You can manage permissions, delete local recordings and files, clear product data, avoid an optional online feature, or uninstall a product. Depending on applicable law, you may also request access, correction, deletion, restriction, objection, portability or withdrawal of consent for eligible information that Core Security controls.
We may verify a request against the relevant installation, transaction or support record. We cannot retrieve or erase content held only on your device or independently controlled by an app marketplace or another provider. See the data deletion guide for practical steps.
07 Safeguards, international processing and age
We use reasonable technical and organisational safeguards, but no transmission or storage system is completely secure. Service providers may process information outside the user’s country or region, with appropriate safeguards where required; this policy does not designate a particular server country.
The covered products are intended for users aged 17 and above. A higher age or additional authorisation required by local law continues to apply.
08 Updates and contact
We may update this policy when products, processing practices or legal requirements change. A revised version will be published with a new effective date, and additional notice or consent will be provided where required.
Core Security Limited
Email: [email protected]
Website: www.coresecuritylimited.com