Privacy Policy

This Privacy Policy describes how Ventryx Inc. ("Ventryx", "we", "us", "our") collects, uses, and protects your personal data when you use Core (the "Service").

Core is an AI-powered homework tutoring tool. We are committed to protecting your privacy and handling your data in an open and transparent manner.

For any privacy-related queries, contact us at [email protected].

We collect the following categories of personal data:

We do not collect sensitive personal data such as financial information, government IDs, or biometric data.

• Directly from you — when you register, use the Service, or contact us.
• Automatically — via cookies, server logs, and similar tracking technologies when you use the Service.
• Third parties — authentication providers (if applicable) may share limited profile data with us.

We use your data to:

• Provide, operate, and maintain the Core Service.
• Personalise your experience and remember your preferences.
• Respond to your support requests and communications.
• Monitor usage patterns to improve Core's quality and accuracy.
• Detect, investigate, and prevent security incidents or abuse.
• Comply with legal obligations.

We will never sell your personal data to third parties. We do not use your data for targeted advertising.

Where the UK GDPR or EU GDPR applies, we process your data on the following legal bases:

• Contract performance — processing necessary to provide you with the Service.
• Legitimate interests — to improve the Service, ensure security, and prevent fraud.
• Legal obligation — where required by applicable law.
• Consent — where you have explicitly opted in to specific processing (e.g. marketing emails).

We use cookies and similar technologies to:

• Keep you signed in to your account (essential cookies).
• Understand how users interact with the Service (analytics cookies).

You can control cookies through your browser settings. Disabling essential cookies may impair your ability to use the Service. We do not use third-party advertising cookies.

We share your data only in the following circumstances:

• Service providers — trusted third parties who help us operate the Service (e.g. hosting, database, authentication), bound by data processing agreements.
• Legal requirements — where required by law, court order, or to protect the rights and safety of users or the public.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before this occurs.

Core is not affiliated with Sparx Learning Limited and does not share any data with Sparx Learning.

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it longer.

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (TLS/HTTPS).
• Hashed and salted password storage.
• Access controls limiting who can view personal data.
• Regular security reviews.

No system is completely secure. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

Core is designed for students and may be used by individuals aged 13 and above. We do not knowingly collect personal data from children under 13 without verified parental consent. If you believe we have inadvertently collected data from a child under 13, please contact us immediately at [email protected] and we will delete it promptly.

For users aged 13–17, we encourage a parent or guardian to review this Privacy Policy with them.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Restriction — request that we restrict processing of your data.
• Portability — request your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

Your data may be processed in countries outside the UK or European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant authority.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a notice on the Service. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

• Email: [email protected]
• Company: Ventryx Inc.