Privacy Policy
Last updated: 11 October 2026
Introduction
This Privacy Policy applies to the websites, apps and services offered by Codex Leo AS ("Codex Leo", "we"). We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This policy outlines how we collect, use, and safeguard your information when you use our services.Who Is Responsible
The data controller is Codex Leo AS, organisation number 925 975 931, Feierbakken 5, 3040 Drammen, Norway. You can reach us at support@codexleo.com.Information We Collect
When you use our services, we may collect the following types of information:- Account Information: Your name and email address. If you sign in with Google, we receive your name, email address and Google account identifier from Google. We never receive your Google password.
- Content You Create: The ideas, instructions, outlines and texts you enter or generate in our services.
- Purchase Information: What you bought and when. Card and payment details are handled by the payment provider or app store and never reach us.
- Usage Data: Information about your interactions with our services, including the frequency of usage and any feedback you provide.
- Technical Data: Your IP address, browser type, operating system, device information, and other technical information collected through cookies and similar technologies. Our mobile apps also send crash reports and error diagnostics, which contain the app version, device model, operating system version and an anonymous installation identifier.
How We Use Your Information
We use the information we collect to:- Provide and Improve Services: To deliver the service you signed up for, personalize your experience, and improve the quality of our services.
- Process Transactions: To handle payments, manage orders, and communicate with you about your purchases.
- Communicate with You: To send you updates, newsletters, and other information that may be of interest to you, if your consent is granted.
- Ensure Security: To protect against fraud and abuse, ensure the security of our services, and comply with legal obligations.
Where the GDPR applies, we process your information to perform our contract with you, on the basis of your consent (which you can withdraw at any time), to comply with legal obligations such as bookkeeping rules, and on the basis of our legitimate interest in keeping our services secure and improving them.
Sharing Your Information
We do not sell or rent your personal information to third parties. However, we may share your information with:- AI Providers: To generate content, the text you submit is sent to OpenAI and Google (Gemini). We send the text needed for the request, not your name or email address.
- Payment Providers and App Stores: Stripe, Google Play and the Apple App Store process purchases.
- Hosting: Our services run on Amazon Web Services.
- Analytics and Diagnostics: Our website uses Google Analytics to measure usage. Our mobile apps send crash reports to Sentry (Functional Software, Inc.).
- Legal Requirements: When required by law or in response to legal processes, to protect our rights, or to ensure the safety of our users and the public.
These providers act under agreements that require them to protect your information. Some of them process data outside the European Economic Area, including in the United States. Where they do, the transfer relies on safeguards provided for by the GDPR, such as the EU-U.S. Data Privacy Framework or standard contractual clauses.
How Long We Keep Your Information
We keep your account information and your content for as long as you have an account with us. When you ask us to delete your account, we delete your account information and content, except records we are required by law to keep, such as accounting records of purchases.Data Security
We implement robust security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include encryption, firewalls, and secure socket layer (SSL) technology.Your Rights
You have the right to:- Access Your Information: Request a copy of the personal information we hold about you.
- Correct Your Information: Request corrections to any inaccurate or incomplete personal information.
- Delete Your Information: Request the deletion of your account and personal information, subject to certain legal obligations.
- Object to Processing: Object to the processing of your personal information for specific purposes.
To use any of these rights, email support@codexleo.com from the address your account is registered with. We answer within one month. You may also complain to your data protection authority; in Norway that is Datatilsynet (https://www.datatilsynet.no).
Children
Our services are not directed at children under 13, and we do not knowingly collect personal data from children.Unsubscribe from Communications
If you wish to unsubscribe from email communications or marketing materials, you can do so at any time by clicking the "Unsubscribe" link at the bottom of our emails or by contacting our support team at support@codexleo.com.If you experience any issues with unsubscribing, please email us directly, and we will process your request promptly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and we will notify you of significant changes through email or a prominent notice in our services.Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:support@codexleo.com
By using our services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described.