CODES AI Limited — AI-native software at codes-ai.uk info@codes-ai.uk

Privacy Policy

Last updated: 2 July 2026

This Privacy Policy explains how CODES AI LIMITED (“CODES AI”, “we”, “us”) collects, uses, shares, and protects personal data when you use SparkVibe — our web application at vibe.codes-ai.uk, our Windows and macOS desktop apps, and our Android app (together, the “Service”). The Android app is a native shell that loads the same hosted web application.

CODES AI LIMITED is a company registered in England & Wales (Company No. 16078672), registered office 97 Blenheim Road, Bolton BL2 6EL, United Kingdom. For privacy questions or to exercise your rights, contact info@codes-ai.uk. We are the data controller for personal data processed through the Service.

1. Data we collect

  • Account & workspace data: your name, email address, a securely hashed password, the workspaces (organizations) you belong to, your role, and profile details.
  • Content you create: prompts, projects, board tasks, documents, course and lecture material, uploaded files (e.g. lecture images and recordings), messages, and other content you add to a workspace.
  • Learning & teaching data: course enrolments, progress, assessments, and (where a workspace uses the guardian/academy features) information about learners and guardians provided by an administrator.
  • Payment data: if you pay for tuition or a subscription, payments are handled by third-party processors (e.g. Stripe, JazzCash, EasyPaisa). We receive transaction status and limited billing details but do not store full card or bank credentials.
  • AI feature data: when you use AI-assisted features, the prompts and content you submit are sent to the AI provider configured for your workspace to generate a response.
  • Device relay & terminals (optional): if you connect your own machines, we process the commands and prompts you choose to queue to them and the results they return.
  • Technical & usage data: IP address, browser/device type, app version, log and diagnostic data, and actions taken in the Service, used to operate and secure it.

2. How we use your data

  • To provide, maintain, and secure the Service and your workspaces.
  • To authenticate you and keep you signed in.
  • To deliver teaching, learning, prompt, project, and collaboration features.
  • To process payments and manage tuition/subscriptions via our payment processors.
  • To provide AI-assisted features you request.
  • To respond to support requests and communicate service or account notices.
  • To detect, prevent, and investigate abuse, fraud, and security incidents.
  • To comply with our legal obligations and improve the Service.

3. Legal bases (UK/EU GDPR)

We rely on: performance of a contract (to provide the Service you sign up for); legitimate interests (to secure, operate, and improve the Service, and communicate about it); consent (where required, e.g. certain optional features); and legal obligation (e.g. accounting and responding to lawful requests). You may withdraw consent at any time where processing is based on consent.

4. How we share data

We do not sell your personal data. We share it only:

  • Within your workspace: content and activity are visible to other members and administrators of the same workspace, according to their role and permissions.
  • Service providers / sub-processors acting on our behalf, including hosting/infrastructure (IONOS), payment processors (Stripe, JazzCash, EasyPaisa), email delivery (e.g. Resend), and the AI/LLM providers configured for your workspace (e.g. Anthropic, OpenAI, and others you enable). These providers process data under their own terms and only as needed to provide their service.
  • Legal & safety: where required by law, regulation, legal process, or to protect the rights, safety, and security of users, the public, or CODES AI.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. AI providers

When you use AI features, your prompts and the content you choose to send are transmitted to the third-party AI provider selected for your workspace to produce a response. Your workspace administrator controls which providers are enabled and which API keys are used. Please review the relevant provider’s privacy terms for how they handle submitted content.

6. International transfers

We are based in the UK. Some service providers may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

7. Data retention

We keep personal data for as long as your account or workspace is active and as needed to provide the Service, then for a reasonable period to meet legal, accounting, and security obligations, after which it is deleted or anonymised. You or your workspace administrator can delete content, and deleting a workspace removes its data subject to backups and legal retention.

8. Security

We protect data using measures including encryption in transit (HTTPS), hashed passwords, per-tenant database isolation (row-level security), access controls, and least-privilege practices. No method of transmission or storage is completely secure, but we work to protect your data and respond to incidents.

9. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. To exercise these rights, contact info@codes-ai.uk. If you are in the UK/EU and have concerns, you may also complain to your data protection authority (in the UK, the Information Commissioner’s Office, ico.org.uk).

10. Children and academies

SparkVibe is a workspace tool for teams, educators, and academies. It is not directed to children under 13, and we do not knowingly collect their data directly. Where a school, academy, or guardian uses the teaching or guardian features, the relevant administrator is responsible for obtaining any required consents and for the learner information they provide. If you believe a child’s data has been provided without proper authority, contact us and we will address it.

11. Cookies and local storage

We use a strictly necessary session cookie to keep you signed in and to operate the Service securely. We do not use it for advertising. The apps may store limited local data (e.g. your server URL or an access token) on your device to keep you signed in.

12. Android app

The Android app is a container that loads the hosted web app over HTTPS. It requires internet access. It does not collect location, contacts, or advertising identifiers. Data handling within the app is the same as described in this Policy for the web service.

13. Changes to this Policy

We may update this Policy from time to time. We will change the “Last updated” date above and, where appropriate, notify you. Continued use of the Service after changes take effect constitutes acceptance.

14. Contact

CODES AI LIMITED (Company No. 16078672)
97 Blenheim Road, Bolton BL2 6EL, United Kingdom
Email: info@codes-ai.uk