Version 1.2 | Effective Date: 1 January 2025 | Last Reviewed: April 2026
1. Who We Are
Koryis Ltd operates IC (Intelligent Companion), an AI-powered GCSE maths tutoring platform designed for dyslexic learners. Our registered contact is Admin@koryis.com.
2. The Personal Data We Collect
Account data: name, email, year group, institution name, and unique student or teacher code.
Learning data: answers submitted, voice session recordings (processed transiently, not stored beyond the session), question attempts, mastery scores, and exam readiness metrics.
Technical data: IP address, browser type, device identifiers, and session logs.
Communications: any messages sent via email or the in-platform feedback tool.
We do not collect payment card details directly. Payments are handled by Stripe under their own privacy policy.
3. How We Use Your Data
To create and manage your account and authenticate your identity.
To personalise question difficulty, topic targeting, and exam readiness scoring.
To allow teachers to monitor student progress and assign tasks.
To send important service communications such as password resets or billing confirmations.
To detect and prevent fraudulent or abusive activity.
To improve the platform through aggregated, anonymised analytics.
4. Legal Basis for Processing
We process your data under: Contract (to deliver the service), Legitimate interests (platform security and improvement), Legal obligation (UK law compliance), and Consent (optional communications). Where students are under 13, a parent or guardian must provide consent.
5. Who We Share Data With
We do not sell or rent personal data. We share only with teachers/school administrators with a legitimate educational relationship, sub-processors under data processing agreements, Stripe for payment processing, and law enforcement where legally required.
6. Data Retention
Account and learning data is retained for the duration of your subscription plus 12 months. After this period, data is deleted or irreversibly anonymised. You may request earlier deletion at any time.
7. Your Rights
Under UK GDPR you have the right to: Access, Rectification, Erasure, Restriction of processing, Portability, Object to processing, and Withdraw consent. Email Admin@koryis.com to exercise any right. We will respond within 30 days.
8. Security
We use TLS encryption in transit, AES-256 encryption at rest, and role-based access controls.
9. Cookies
We use strictly necessary cookies for authentication and session management. See our Cookie Policy for details.
10. Complaints
You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.