Privacy Policy

Effective Date: August 29, 2026 · Last Updated: September 12, 2026

Unwrapped Solutions Inc. ("Cognik," "Cognik AI," "we," "us," or "our") provides cognik.ai and app.cognik.ai, a creator intelligence platform for building, operating, and interacting with authorized AI-powered Digital Minds trained on a Creator's own content (collectively, the "Services").

Your privacy matters to us and we take it seriously. This Privacy Policy explains what information we collect, why we collect it, how we use and share it, how long we keep it, and what choices you have. It applies to everyone who uses Cognik, including Creators who build Digital Minds on our platform and Subscribers who interact with those Digital Minds.

Capitalized terms not defined here have the meanings given in the Cognik Terms of Service.

1. Introduction and Key Terms

Scope. This Policy applies to personal information Cognik processes through our website, dashboard, applications, voice features, billing features, support channels, and related services. It should be read together with the Cognik Terms of Service.

Key Terms. A "Digital Mind" is an AI-powered knowledge or voice experience operated through the Cognik platform and trained on a Creator's content. A "Creator" is the coach, consultant, author, expert, business, or organization that a Digital Mind represents and whose content forms its knowledge base. A "Source Individual" is the person whose data, likeness, or voice is used to create or configure a Digital Mind. A "Subscriber" is a person who accesses or interacts with a Digital Mind.

Changes. We will notify you of material changes by posting an update on our website or emailing you. Continuing to use the Services after a change means you accept the updated Policy. We will not materially expand our use of previously collected personal information without appropriate notice and, where required, consent.

2. Information We Collect

Account and Profile Information. Name, email address, username, phone number, login credentials or authentication identifiers, account settings, role, permissions, profile information, and preferences. We use this to manage your account, communicate with you, and deliver the Services.

Identity Verification (Creators). A government-issued ID such as a driver's license, together with authorization or consent records. We use this only to verify identity and authority as part of setting up a Creator account and approving a Digital Mind.

Digital Mind Configuration Information (Creators). Digital Mind name, description, persona, instructions, Source Individual information, authorization status, knowledge sources, restricted topics, access and invitation settings, voice settings, branding, plan configuration, and related settings.

Creator Content and Source Materials (Creators). Videos, podcasts, courses, coaching calls, webinars, books, newsletters, transcripts, frameworks, written materials, images, logos, and other content you provide so we can build and operate your Digital Mind. Creators typically deliver this to us through a shared cloud folder such as Google Drive or Dropbox, or by direct upload.

Subscriber Interaction Data. Questions, prompts, messages, conversation history, voice interactions, notes, saved items, workspace content, feedback, progress and engagement activity, session information, and usage information generated when you interact with a Digital Mind.

Digital Mind Output. The responses, summaries, audio, and other material generated by a Digital Mind, together with associated metadata.

Voice, Audio, Transcript, and Biometric Information. Where voice features are enabled, we may process voice recordings, audio samples, call metadata, transcripts, voice settings, voice-model configuration, voice models, and generated audio. Some of this information may constitute biometric information or a biometric identifier under laws such as the Illinois Biometric Information Privacy Act and comparable Texas and Washington statutes. See Section 7.

Billing Information. Subscription plan, invoice information, payment status, billing contact, customer and subscription identifiers, card type, last four digits, billing address, usage, taxes, entitlements, and transaction metadata. Payment card information is processed by Whop Payment Processing, Inc. and is not stored in full by Cognik.

Device and Technical Data. IP address, device identifiers, device type, browser, operating system, app version, and diagnostics. We use this to keep the platform secure and running smoothly.

Usage, Cookies, Logs, and Analytics. Pages viewed, features used, referral sources, session identifiers, cookies, local storage, performance data, error logs, event metadata, and analytics events.

Location Data. General location derived from your IP address, used for regional customization, security, and analytics. We do not collect precise GPS location.

Support and Communications. Information you provide through support requests, email, forms, troubleshooting sessions, feedback, surveys, incident reports, or privacy requests.

3. How We Collect Information

We collect information:

  • directly from you;
  • from a Creator, organization, administrator, or authorized representative;
  • from a Source Individual or a person acting on their behalf;
  • from Subscriber interactions with a Digital Mind;
  • from files, recordings, and knowledge sources you upload, import, or share with us;
  • from payment, hosting, database, AI, voice, analytics, security, support, and infrastructure providers; and
  • from automated logs and product usage events.

4. How We Use Your Information

We use information to:

  • provide, operate, maintain, and secure the Services;
  • create and manage your account;
  • build, configure, personalize, and operate Digital Minds;
  • process questions, messages, files, recordings, notes, knowledge sources, and transcripts;
  • deliver AI responses, retrieval, search, memory, voice, and transcription features;
  • verify authorization, consent, ownership, or rights to create or operate a Digital Mind;
  • process payments, subscriptions, invoices, taxes, usage, and entitlements;
  • produce analytics and performance reporting for Creators and for our own operations;
  • provide customer support and troubleshoot issues;
  • detect, prevent, investigate, and respond to fraud, abuse, security incidents, and policy violations;
  • debug, monitor, analyze, and improve the Services;
  • communicate with you about your account or the Services;
  • market our Services where permitted; and
  • comply with law, enforce our terms, and protect rights and safety.

5. AI, Model Providers, and Training

Cognik uses third-party AI, transcription, voice, search, hosting, database, and infrastructure providers to deliver requested features. Uploaded audio and video used for content ingest is transcribed using OpenAI gpt-4o-mini-transcribe. Anthropic API services process prompts and outputs. Fish Audio provides voice synthesis and voice-model functionality. The provider or model used for live Subscriber speech may differ and has not been identified in this Policy.

Cognik does not use one Creator's content to operate another Creator's Digital Mind and does not intentionally train a general-purpose model on Subscriber conversations. Provider retention and model-improvement practices depend on provider terms, account type, configuration, and settings. Cognik does not claim Enterprise terms, zero data retention, or a signed DPA with every provider.

If Cognik proposes materially broader model-training use, we will provide notice and obtain consent where required.

6. Digital Minds, Likeness, and Voice

Authorized Digital Minds Only. Cognik builds Digital Minds only under written agreement with the Creator, with the necessary rights, permissions, and consents in place. We do not permit users to create Digital Minds of other people, and we do not permit Digital Minds of deceased people or deceased public figures unless this policy is changed in writing.

Source Individual Configuration. Where a Digital Mind is based on or represents a Source Individual, information about that person may be used to configure the Digital Mind, including their knowledge, frameworks, files, voice, likeness, writing style, and other authorized materials. Creators are responsible for ensuring they have the right to provide and use such information.

AI Disclosure. Digital Minds are AI. How the AI nature of the experience is communicated to Subscribers is agreed with each Creator before launch, and Digital Minds are not presented as a live human.

7. Biometric Information (Voice)

When authorized voice features are used, Cognik may collect voice recordings, create or use a persistent voice model, process text for speech generation, and receive generated audio. Voice information may be treated as biometric information in some jurisdictions.

A persistent Creator voice model requires a separate signed Voice and Likeness Authorization. Fish Audio currently provides voice-model and synthesis functionality. Cognik does not sell voice information.

When authorization ends, Cognik disables the affected feature and initiates deletion using provider controls available to it. Provider generation history, restricted records, legal records, and backups may remain according to provider processes. Fish Audio currently provides a technical Delete Voice API, but Cognik does not promise a 30-day provider-wide or backup deletion period.

8. How We Share Your Information

We may disclose information:

  • to service providers and subprocessors that help us provide the Services;
  • to AI, model, voice, transcription, hosting, database, storage, payment, analytics, security, and support providers;
  • to Creators and their authorized administrators, as described in Section 10;
  • to comply with law, legal process, court orders, subpoenas, or government requests;
  • to enforce our terms, investigate abuse, protect rights, prevent harm, and maintain security;
  • in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case we will take reasonable steps to ensure your information continues to be protected under a policy materially consistent with this one; and
  • with your consent or at your direction.

Aggregated and De-Identified Data. We may create and share anonymized, aggregated, or de-identified data that cannot reasonably identify you, for example usage statistics, benchmarks, or industry research. We will not attempt to re-identify such data.

What We Do Not Do. We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We do not share Creator content or Subscriber data with other Creators or with third parties without explicit written consent, except as described in this Policy.

9. Service Providers and Subprocessors

We use providers for hosting, database, authentication, storage, AI, transcription, voice, payments, forms, security, and business operations. Current material providers include Anthropic, OpenAI, Fish Audio, Supabase, Vercel, Railway, Whop, Google services used for authentication or operations, Cloudflare security services, and Tally forms.

Providers process information only for the functions assigned to them under the arrangements and settings applicable to Cognik. Those arrangements vary, and not every provider offers Enterprise terms, zero data retention, a Cognik-specific DPA, or a fixed backup-deletion schedule. Contact support@cognik.ai for current provider information.

10. Creator Visibility Into Subscriber Interactions

Unwrapped Solutions Inc. determines how Cognik account information, Subscriber conversations, billing-adjacent information, platform analytics, and security information are collected and used. Creators do not control Cognik Subscriber records.

Creators may receive de-identified questions, conversation excerpts without direct account identifiers, and aggregate engagement information associated with their Digital Mind. Cognik does not show Creators the Subscriber's name, email address, payment information, or account identity with those conversations.

A Subscriber may identify themselves through message content. Avoid submitting information you do not want the relevant Creator or Cognik to review. Send access, correction, or deletion requests to support@cognik.ai.

11. Cookies and Tracking

We use cookies, local storage, and similar technologies for authentication, security, session management, forms, and core functionality. On the public pages tested as of the Last Updated date, Google Analytics, Google Tag Manager, and Vercel Web Analytics were not enabled. The authenticated application was not fully inventoried.

See the Cookie Policy for verified technologies, current limitations, and browser controls. We do not currently use advertising cookies or cross-context behavioural advertising on the tested public pages.

12. Data Retention

We retain information only as long as reasonably necessary for the purposes described here, considering account status, legal and tax duties, fraud prevention, security and retrieval logs, disputes, technical dependencies, provider processes, and backup cycles. We do not currently operate database jobs that guarantee the earlier 24-month conversation, 12-month inactive-account, 90-day log, or 30-day backup schedules.

A verified account-deletion process removes chats, insights, actions, memory, documents, voice-usage records, subscriptions, and the Subscriber record from Cognik's primary database. Payment rows are de-linked rather than deleted; retrieval logs are not currently included; authentication deletion is a separate step; and the database process does not itself erase copies held by Whop, OpenAI, Anthropic, Fish Audio, or other providers.

Deleting a source does not currently guarantee simultaneous deletion of every related chunk or embedding. We are improving these processes. Until then, deletion means that Cognik takes reasonable steps to delete or de-identify applicable information from active systems, subject to the exceptions above. Keep your own copies of important information.

13. Data Security

We use administrative, technical, and organizational safeguards designed to protect information, including controls provided by our hosting, database, authentication, and infrastructure providers. No system is completely secure. We do not claim a particular certification, universal administrative audit logging, or a specific provider configuration unless separately confirmed in writing.

Protect your credentials and promptly report suspected unauthorized access to support@cognik.ai.

14. Your Privacy Rights and Choices

Depending on applicable law, you may request access to or correction of personal information under our control, withdraw consent subject to legal or contractual restrictions, request deletion, or ask questions about our practices. We may verify your identity and may limit or refuse a request where permitted or required by law.

Send requests to support@cognik.ai. If you are dissatisfied with our response, you may contact the Office of the Information and Privacy Commissioner for British Columbia or another regulator with jurisdiction. A deletion request may not immediately remove transaction records, security or retrieval logs, authentication records awaiting separate processing, backups, or provider-held copies.

Residents of US states with applicable privacy rights may also request the rights available under their state law. Cognik does not sell personal information or share it for cross-context behavioural advertising.

15. Other Regional Rights

Cognik is launching for users in Canada and the United States. If another jurisdiction's privacy law applies, we will provide the rights and protections required by that law. We do not claim to have implemented European Standard Contractual Clauses or the UK Addendum for all processing.

16. Processing Across Borders

Unwrapped Solutions Inc. is based in Canada. Cognik and its providers may process information in Canada, the United States, and other countries where a provider operates. Information in another jurisdiction may be accessible to courts, law-enforcement agencies, or authorities under that jurisdiction's laws.

We remain accountable for personal information transferred to service providers as required by applicable law and use contractual or other measures appropriate to the service and information. Provider locations and safeguards may change.

17. Children's Privacy

The Services are intended for users who are at least 18 years old. The Services are not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with their information, contact us at support@cognik.ai and we will take steps to delete it promptly.

18. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required by law, by posting an update on our website or emailing you directly. We will not materially expand our use of previously collected personal information without appropriate notice and consent where required.

19. Governing Law

This Policy is governed by applicable privacy law. Contractual disputes concerning use of the Services are handled under the Terms of Service, which apply British Columbia law subject to non-waivable rights.

20. Contact Us

Organization responsible for personal information: Unwrapped Solutions Inc.

Mailing address: 4873 Delta St, Delta, BC V4K 2T9, Canada

Privacy, security, and support contact: support@cognik.ai

Website: www.cognik.ai

Questions? support@cognik.ai