Privacy Policy

Effective Date: August 29, 2026 · Last Updated: October 8, 2026

Unwrapped Solutions Inc. ("Cognik," "Cognik AI," "we," "us," or "our") provides cognik.ai and app.cognik.ai, a creator intelligence platform for building, operating, and interacting with authorized AI-powered Digital Minds trained on a Creator's own content (collectively, the "Services").

Your privacy matters to us and we take it seriously. This Privacy Policy explains what information we collect, why we collect it, how we use and share it, how long we keep it, and what choices you have. It applies to everyone who uses Cognik, including Creators who build Digital Minds on our platform and Subscribers who interact with those Digital Minds.

Capitalized terms not defined here have the meanings given in the Cognik Terms of Service.

1. Introduction and Key Terms

Scope. This Policy applies to personal information Cognik processes through our website, dashboard, applications, voice features, billing features, support channels, and related services. It should be read together with the Cognik Terms of Service.

Key Terms. A "Digital Mind" is an AI-powered knowledge or voice experience operated through the Cognik platform and trained on a Creator's content. A "Creator" is the coach, consultant, author, expert, business, or organization that a Digital Mind represents and whose content forms its knowledge base. A "Source Individual" is the person whose data, likeness, or voice is used to create or configure a Digital Mind. A "Subscriber" is a person who accesses or interacts with a Digital Mind.

Changes. We will notify you of material changes by posting an update on our website or emailing you. Continuing to use the Services after a change means you accept the updated Policy. We will not materially expand our use of previously collected personal information without appropriate notice and, where required, consent.

2. Information We Collect

Account and Profile Information. Name, email address, username, phone number, login credentials or authentication identifiers, account settings, role, permissions, profile information, and preferences. We use this to manage your account, communicate with you, and deliver the Services.

Identity Verification (Creators). A government-issued ID such as a driver's license, together with authorization or consent records. We use this only to verify identity and authority as part of setting up a Creator account and approving a Digital Mind.

Digital Mind Configuration Information (Creators). Digital Mind name, description, persona, instructions, Source Individual information, authorization status, knowledge sources, restricted topics, access and invitation settings, voice settings, branding, plan configuration, and related settings.

Creator Content and Source Materials (Creators). Videos, podcasts, courses, coaching calls, webinars, books, newsletters, transcripts, frameworks, written materials, images, logos, and other content you provide so we can build and operate your Digital Mind. Creators typically deliver this to us through a shared cloud folder such as Google Drive or Dropbox, or by direct upload.

Subscriber Interaction Data. Questions, prompts, messages, conversation history, voice interactions, notes, saved items, workspace content, feedback, progress and engagement activity, session information, and usage information generated when you interact with a Digital Mind.

Digital Mind Output. The responses, summaries, audio, and other material generated by a Digital Mind, together with associated metadata.

Voice, Audio, Transcript, and Biometric Information. Where voice features are enabled, we may process voice recordings, audio samples, call metadata, transcripts, voice settings, voice-model configuration, voice models, and generated audio. Some of this information may constitute biometric information or a biometric identifier under laws such as the Illinois Biometric Information Privacy Act and comparable Texas and Washington statutes. See Section 7.

Billing Information. Subscription plan, invoice information, payment status, billing contact, customer and subscription identifiers, card type, last four digits, billing address, usage, taxes, entitlements, and transaction metadata. Payment card information is processed by Whop Payment Processing, Inc. and is not stored in full by Cognik.

Device and Technical Data. IP address, device identifiers, device type, browser, operating system, app version, and diagnostics. We use this to keep the platform secure and running smoothly.

Usage, Cookies, Logs, and Analytics. Pages viewed, features used, referral sources, session identifiers, cookies, local storage, performance data, error logs, event metadata, and analytics events.

Location Data. General location derived from your IP address, used for regional customization, security, and analytics. We do not collect precise GPS location.

Support and Communications. Information you provide through support requests, email, forms, troubleshooting sessions, feedback, surveys, incident reports, or privacy requests.

3. How We Collect Information

We collect information:

  • directly from you;
  • from a Creator, organization, administrator, or authorized representative;
  • from a Source Individual or a person acting on their behalf;
  • from Subscriber interactions with a Digital Mind;
  • from files, recordings, and knowledge sources you upload, import, or share with us;
  • from payment, hosting, database, AI, voice, analytics, security, support, and infrastructure providers; and
  • from automated logs and product usage events.

4. How We Use Your Information

We use information to:

  • provide, operate, maintain, and secure the Services;
  • create and manage your account;
  • build, configure, personalize, and operate Digital Minds;
  • process questions, messages, files, recordings, notes, knowledge sources, and transcripts;
  • deliver AI responses, retrieval, search, memory, voice, and transcription features;
  • verify authorization, consent, ownership, or rights to create or operate a Digital Mind;
  • process payments, subscriptions, invoices, taxes, usage, and entitlements;
  • produce analytics and performance reporting for Creators and for our own operations;
  • provide customer support and troubleshoot issues;
  • detect, prevent, investigate, and respond to fraud, abuse, security incidents, and policy violations;
  • debug, monitor, analyze, and improve the Services;
  • communicate with you about your account or the Services;
  • market our Services where permitted; and
  • comply with law, enforce our terms, and protect rights and safety.

5. AI, Model Providers, and Training

Cognik uses third-party AI, transcription, voice, search, hosting, database, and infrastructure providers to deliver requested features. Uploaded audio and video used for content ingest is transcribed using OpenAI gpt-4o-mini-transcribe. Anthropic API services process prompts and outputs. Fish Audio provides voice synthesis and voice-model functionality. The provider or model used for live Subscriber speech may differ and has not been identified in this Policy.

Cognik does not use one Creator's content to operate another Creator's Digital Mind and does not intentionally train a general-purpose model on Subscriber conversations. Provider retention and model-improvement practices depend on provider terms, account type, configuration, and settings. Cognik does not claim Enterprise terms, zero data retention, or a signed DPA with every provider.

If Cognik proposes materially broader model-training use, we will provide notice and obtain consent where required.

6. Digital Minds, Likeness, and Voice

Authorized Digital Minds Only. Cognik builds Digital Minds only under written agreement with the Creator, with the necessary rights, permissions, and consents in place. We do not permit users to create Digital Minds of other people, and we do not permit Digital Minds of deceased people or deceased public figures unless this policy is changed in writing.

Source Individual Configuration. Where a Digital Mind is based on or represents a Source Individual, information about that person may be used to configure the Digital Mind, including their knowledge, frameworks, files, voice, likeness, writing style, and other authorized materials. Creators are responsible for ensuring they have the right to provide and use such information.

AI Disclosure. Digital Minds are AI. How the AI nature of the experience is communicated to Subscribers is agreed with each Creator before launch, and Digital Minds are not presented as a live human.

7. Biometric Information (Voice)

When authorized voice features are used, Cognik may collect voice recordings, create or use a persistent voice model, process text for speech generation, and receive generated audio. Voice information may be treated as biometric information in some jurisdictions.

A persistent Creator voice model requires a separate signed Voice and Likeness Authorization. Fish Audio currently provides voice-model and synthesis functionality. Cognik does not sell voice information.

When authorization ends, Cognik disables the affected feature and initiates deletion using provider controls available to it. Provider generation history, restricted records, legal records, and backups may remain according to provider processes. Fish Audio currently provides a technical Delete Voice API, but Cognik does not promise a 30-day provider-wide or backup deletion period.

8. How We Share Your Information

We may disclose information:

  • to service providers and subprocessors that help us provide the Services;
  • to AI, model, voice, transcription, hosting, database, storage, payment, analytics, security, and support providers;
  • to Creators and their authorized administrators, as described in Section 11;
  • to comply with law, legal process, court orders, subpoenas, or government requests;
  • to enforce our terms, investigate abuse, protect rights, prevent harm, and maintain security;
  • in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case we will take reasonable steps to ensure your information continues to be protected under a policy materially consistent with this one; and
  • with your consent or at your direction.

Aggregated and De-Identified Data. We may create and share anonymized, aggregated, or de-identified data that cannot reasonably identify you, for example usage statistics, benchmarks, or industry research. We will not attempt to re-identify such data.

What We Do Not Do. We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We do not share Creator content or Subscriber data with other Creators or with third parties without explicit written consent, except as described in this Policy.

9. Service Providers and Subprocessors

We use providers for hosting, database, authentication, storage, AI, transcription, voice, payments, forms, security, and business operations. Current material providers include Anthropic, OpenAI, Fish Audio, Supabase, Vercel, Railway, Whop, Google services used for authentication or operations (including the optional YouTube Connect feature in Creator Studio), Cloudflare security services, and Tally forms.

Providers process information only for the functions assigned to them under the arrangements and settings applicable to Cognik. Those arrangements vary, and not every provider offers Enterprise terms, zero data retention, a Cognik-specific DPA, or a fixed backup-deletion schedule. Contact support@cognik.ai for current provider information.

10. YouTube API Services

YouTube API Services. Cognik's Creator Studio includes optional YouTube features that use YouTube API Services. By connecting a YouTube account, you authorize Cognik to access certain YouTube data as described below and on Google's consent screen.

What we access. We ask for the YouTube permission each feature needs, at the moment you use it:

  • Connect YouTube (browse): read-only access to list the channels you own and the titles and identifiers of the videos on those channels.
  • Import captions: when you choose videos and press Import, we ask for the broader YouTube permission that Google requires to download caption tracks. We use it only to read the caption tracks of videos on channels you own. Cognik does not use that permission to upload, edit, or delete your YouTube videos, captions, comments, or ratings.

How we use it. We use this data only to show your channels and videos in Creator Studio and, when you import captions, to place the caption text in your review inbox. Caption text is added to your own Digital Mind only after you approve it, and is used only for your Digital Mind. We do not use YouTube data to operate another creator's Digital Mind or to train AI models shared with anyone else.

Caption data. Caption data we store (in your review inbox or in your Digital Mind) is refreshed from YouTube or deleted within 30 days of when we last retrieved it. If we cannot refresh it, for example because you revoked access or the video or caption track was removed, we delete it. When you disconnect YouTube in Cognik, we delete all caption data obtained through YouTube, including what was added to your Digital Mind, within 7 days. If you revoke Cognik's access in your Google Account, we delete that data as soon as we detect the revocation and in any case within 30 days. We never sell caption data and never use it for advertising.

Storage and security. Refresh tokens are encrypted at rest and stored only for the connected creator. Access tokens are kept only for the request. Browse results are fetched on demand and are not kept as a long-lived YouTube library cache. We retain YouTube-authorized data only as needed for the active connection and in line with the YouTube API Services Developer Policies.

Sharing. We do not sell YouTube user data and do not use it for advertising. Infrastructure providers that host Cognik (for example our database and application hosts) may process encrypted tokens or caption text solely to operate these features, under our arrangements with them.

Google's privacy policy. Information Google collects when you use Google sign-in or YouTube authorization is also governed by Google's Privacy Policy: http://www.google.com/policies/privacy

Revoking access. You can Disconnect YouTube in Creator Studio. That revokes Cognik's Google authorization for these features and deletes our stored connection and caption data. You can also revoke Cognik's access at any time in your Google Account permissions: https://security.google.com/settings/security/permissions Deleting data in Cognik does not delete anything stored by YouTube; to delete data on YouTube, use YouTube.

Contact. Privacy questions about Cognik's YouTube integration: support@cognik.ai

Limited Use of Google user data. Cognik's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. In practice, we use that data only to provide or improve user-facing features that are prominent in Cognik: listing your YouTube channels and videos in Creator Studio, and importing the captions you choose into your review inbox and, once you approve them, your own Digital Mind. We do not transfer that data except to provide those features with your consent, for security, to comply with law, or as part of a merger or acquisition with prior user consent. We do not allow humans to read that data except with your affirmative agreement to review specific items you imported, when required for security or legal compliance, or when data is aggregated for internal operations. We do not sell that data to data brokers, advertising platforms, or information resellers, we do not use it for advertising or creditworthiness decisions, and we do not use it to train AI models shared with other users.

11. Creator Visibility Into Subscriber Interactions

Unwrapped Solutions Inc. determines how Cognik account information, Subscriber conversations, billing-adjacent information, platform analytics, and security information are collected and used. Creators do not control Cognik Subscriber records.

Creators may receive de-identified questions, conversation excerpts without direct account identifiers, and aggregate engagement information associated with their Digital Mind. Cognik does not show Creators the Subscriber's name, email address, payment information, or account identity with those conversations.

A Subscriber may identify themselves through message content. Avoid submitting information you do not want the relevant Creator or Cognik to review. Send access, correction, or deletion requests to support@cognik.ai.

12. Cookies and Tracking

We use cookies, local storage, and similar technologies for authentication, security, session management, forms, and core functionality. On the public landing-page site at cognik.ai, we use Vercel Web Analytics to measure anonymous, aggregated traffic. This analytics implementation is not enabled in the authenticated application at app.cognik.ai.

Vercel Web Analytics may process page URLs, filtered query parameters, referrers, browser and operating-system information, device type, and approximate country, region or state, and city. Vercel derives that approximate location from the incoming request's IP address, but recorded Web Analytics data is not tied to an identified person or IP address. The service does not use cookies to identify visitors. Instead, Vercel identifies a visitor using a hash created from the incoming request; the hash is valid for one day and then automatically resets.

Designated Cognik team members can activate an internal opt-out on their device. While it is active, page-view events from that device are not sent to Vercel. We do not use Google Analytics, Google Tag Manager, or session-replay tools on the public landing-page site.

See the Cookie Policy for verified technologies, current limitations, and browser controls. We do not currently use advertising cookies or cross-context behavioural advertising on the tested public pages.

13. Data Retention

We retain information only as long as reasonably necessary for the purposes described here, considering account status, legal and tax duties, fraud prevention, security and retrieval logs, disputes, technical dependencies, provider processes, and backup cycles. We do not currently operate database jobs that guarantee the earlier 24-month conversation, 12-month inactive-account, 90-day log, or 30-day backup schedules.

A verified account-deletion process removes chats, insights, actions, memory, documents, voice-usage records, subscriptions, and the Subscriber record from Cognik's primary database. Payment rows are de-linked rather than deleted; retrieval logs are not currently included; authentication deletion is a separate step; and the database process does not itself erase copies held by Whop, OpenAI, Anthropic, Fish Audio, or other providers.

Deleting a source does not currently guarantee simultaneous deletion of every related chunk or embedding. This does not apply to caption data obtained through YouTube API Services, which is deleted from your review inbox and your Digital Mind, including related chunks and embeddings, as described in Section 10. We are improving these processes. Until then, deletion means that Cognik takes reasonable steps to delete or de-identify applicable information from active systems, subject to the exceptions above. Keep your own copies of important information.

14. Data Security

We use administrative, technical, and organizational safeguards designed to protect information, including controls provided by our hosting, database, authentication, and infrastructure providers. No system is completely secure. We do not claim a particular certification, universal administrative audit logging, or a specific provider configuration unless separately confirmed in writing.

Protect your credentials and promptly report suspected unauthorized access to support@cognik.ai.

15. Your Privacy Rights and Choices

Depending on applicable law, you may request access to or correction of personal information under our control, withdraw consent subject to legal or contractual restrictions, request deletion, or ask questions about our practices. We may verify your identity and may limit or refuse a request where permitted or required by law.

Send requests to support@cognik.ai. If you are dissatisfied with our response, you may contact the Office of the Information and Privacy Commissioner for British Columbia or another regulator with jurisdiction. A deletion request may not immediately remove transaction records, security or retrieval logs, authentication records awaiting separate processing, backups, or provider-held copies.

Residents of US states with applicable privacy rights may also request the rights available under their state law. Cognik does not sell personal information or share it for cross-context behavioural advertising.

16. Other Regional Rights

Cognik is launching for users in Canada and the United States. If another jurisdiction's privacy law applies, we will provide the rights and protections required by that law. We do not claim to have implemented European Standard Contractual Clauses or the UK Addendum for all processing.

17. Processing Across Borders

Unwrapped Solutions Inc. is based in Canada. Cognik and its providers may process information in Canada, the United States, and other countries where a provider operates. Information in another jurisdiction may be accessible to courts, law-enforcement agencies, or authorities under that jurisdiction's laws.

We remain accountable for personal information transferred to service providers as required by applicable law and use contractual or other measures appropriate to the service and information. Provider locations and safeguards may change.

18. Children's Privacy

The Services are intended for users who are at least 18 years old. The Services are not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with their information, contact us at support@cognik.ai and we will take steps to delete it promptly.

19. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required by law, by posting an update on our website or emailing you directly. We will not materially expand our use of previously collected personal information without appropriate notice and consent where required.

20. Governing Law

This Policy is governed by applicable privacy law. Contractual disputes concerning use of the Services are handled under the Terms of Service, which apply British Columbia law subject to non-waivable rights.

21. Contact Us

Organization responsible for personal information: Unwrapped Solutions Inc.

Mailing address: 4873 Delta St, Delta, BC V4K 2T9, Canada

Privacy, security, and support contact: support@cognik.ai

Website: www.cognik.ai

Questions? support@cognik.ai