Privacy Policy

This Privacy Policy explains what information CoreRift Tutor collects, why, who sees it and the choices you have. CoreRift Tutor is operated by Core Rift LLC, a Virginia limited liability company ("CoreRift," "we," "us"). It applies to our website and app (the "Service") and is part of our Terms of Service.

1. Who the Service Is For

The Service is for parents and legal guardians who are at least 18. A child uses it only on a parent's account and under a parent's supervision. The child has no account. We do not knowingly collect information directly from a child, and we do not offer the Service to children on their own. Everything about a child that we hold comes from the parent who set up the account or from the child's answers given through the parent's account. If you believe a child has used the Service on their own, contact us and we will delete that information.

2. Information We Collect

2.1 Information you give us

• Account details from Google sign-in: your name, email address and Google account ID. If you sign in with an invitation code, we receive the code and the email you use to claim it.
• Student profile: the child's first name, age and grade, which you may choose to enter in Settings. They are optional and are used to pitch questions and greet the child. We recommend a first name or nickname only.
• Study material: the photos, PDFs and files you upload, the text read from them, and the study profile built from them (topics, vocabulary, ideas, steps and the practice questions).
• Your Gemini API key, stored encrypted. We show only its first and last few characters afterward.
• Preferences, such as the animals chosen for the background, the speech-input setting and the pass threshold.
• Messages to us: anything you send through the feedback button or by email.

2.2 Information from your child's practice

• Answers: a written transcript of what your child says or types, with the question asked, the tutor's reply, the score, the date and the follow-ups. We keep these so you and your child can see history and progress.
• Audio: we do not keep recordings of your child's voice. If speech input is set to use Gemini, or your browser has no speech recognition of its own, a short recording is sent to Google Gemini to be turned into text and is not saved by us afterward.
• Explorer content: extra questions and facts written for your child's topics, saved with the history.

2.3 Information collected automatically

• Cookies and similar storage: a sign-in cookie to keep you signed in (up to 30 days), a cookie recording that you accepted the Terms, and a setting in your browser remembering whether read-aloud is muted. We do not use advertising or tracking cookies.
• Technical and security logs kept by our hosting providers, such as IP address, browser type and timestamps, used to run and protect the Service.

3. How We Use Information

• To provide the Service: read your study material, write and score questions, show history and progress, and keep your account secure.
• To contact you about your account, security or changes to our terms.
• To fix problems and improve the Service.

We do not sell personal information, show advertising, or use your child's answers to build profiles for any other purpose.

4. AI Processing

To work, the Service sends your study material, your child's answers and the tutor's instructions to Google's Gemini service using your own API key. Google states that content sent through paid Gemini API keys is not used to train its models, but Google may keep it for a limited time to detect abuse and under its own terms. Please use a key from a Google Cloud project with billing turned on. We do not send your child's information to any other AI provider.

5. Voice Features

Reading questions aloud uses your device's built-in voices on the device itself. Dictation may use your browser's own speech recognition (for example in Chrome or Safari), which may send audio to that browser's vendor under its policies. You can switch speech input to Gemini in Settings or type answers instead.

6. Who Receives Information

• Google: sign-in and Gemini (see section 4).
• Vercel: hosts the Service.
• Neon: stores the database, including your study material and your child's transcripts.
• CoreRift Gate: a service from the same company that handles invitation codes, our policies, records of your acceptance of them, and the feedback button.
• When the law requires, or to protect rights, safety and the Service.

We require service providers to use information only to provide their services to us. We do not sell or share your information for advertising.

7. Retention and Deletion

We keep your information while your account is active. You can delete a project, its study material and its history at any time from the project page. To delete your whole account and everything in it, or to have your child's information deleted, email us at the address below and we will do so. Deleted data may remain in provider backups for a short time before it is overwritten.

8. Your Choices

You can review and change the student profile in Settings, remove your Gemini key, delete projects, switch to typed answers, and ask us for a copy of your information or its deletion. You may withdraw consent for your child's information to be collected by stopping use of the Service and asking us to delete it.

9. Security

Your Gemini key is encrypted, connections use HTTPS, and access to the database is restricted. No system is perfectly secure, so we cannot guarantee absolute security. If we learn of a breach affecting you, we will tell you as the law requires.

10. Changes to This Policy

We may update this policy. When we do, we will post the new version here and ask you to accept it again the next time you sign in.

11. Contact

Questions or requests about privacy, including deletion: ejmencke@gmail.com.