Privacy Policy

Last updated: September 16, 2026

Corta is operated by ASH Ventures LLC ("ASH Ventures," "we," "us," or "our"). This policy explains what information we collect and how we use it.

What we collect

Account information: your name, email address, and — if you enable two-step verification — your phone number. Player profiles: a display name and, optionally, an age division, state, and rating (World Tennis Number), entered by you, for the junior players you manage. Activity: matches, point-by-point scores, follows, and related app activity. Subscription information: Apple purchase history, subscription status, and the Corta user ID associated with the purchase; we do not receive your card or bank-account details. Technical: push-notification tokens for your devices and standard service logs generated by our infrastructure provider (Google Firebase).

Children's privacy

Corta is designed so that children never hold accounts and we never collect personal information directly from children. Player profiles are created and controlled entirely by a parent, legal guardian, or an adult they authorize. Profiles contain only a parent-entered display name (we recommend first name and last initial) and optional age division, state, and rating — no birthdates, photos, contact details, or messaging. We use the age you enter only to determine whether parental consent is required; we do not store it. Profiles are private by default, and followers must be approved by the profile's managers.

Because some players are under 13, we obtain a parent's verifiable consent and show a direct notice before storing any information about that child. You can consent to our collection and internal use of your child's information without consenting to any disclosure to third-party services — that optional choice is separate and is never required to use Corta. We use no advertising or behavioral analytics services, and subscription processing is associated with the adult account rather than the child's profile. When your child plays an opponent or partner who is not on Corta, we show that person's full name only to the managers and approved followers of the players in that match. Everywhere else — public profiles, search, the live feed, and to anyone else signed in — we display only their first name and last initial.

Parents' rights: at any time you may review your child's information, refuse further collection or use, and delete it — from the player's profile ("Withdraw consent & delete data") or by contacting us at ASH Ventures LLC, 1325 Sunburst Ln, Northbrook, IL 60062, harris@ashventureshq.com. Withdrawing consent deletes the child's data.

How we use information

To operate the service: showing live scores and histories to people you've allowed, sending the notifications you've turned on, securing accounts, and preventing abuse. We do not sell personal information, we do not show ads, and we do not use your data for advertising.

What others can see

What other users see is controlled by each player's visibility setting. Private players (the default) are visible only to their managers and approved followers; only the player's display name appears in search. Public players' matches are visible to signed-in users. Your own name is shown to users you interact with (for example, on follow requests and as the live scorer of a match).

Service providers and third parties

We rely on the following categories of service providers, who process data on our behalf for the purposes shown and not for their own purposes:

• Google Firebase / Google Cloud (Google LLC) — authentication, database, push notifications, and serverless functions that run the app. • Apple — App Store subscription purchase, billing, renewal, and cancellation processing. • RevenueCat — validating App Store receipts, determining subscription access, and subscription reporting. • Email delivery — sending parental-consent codes and transactional email.

We do not disclose a child's personal information to any third party for the third party's own use, and we do not use advertising, behavioral analytics, or attribution services. We use adult subscription information for the subscription reporting described above. We maintain written assurances that our service providers protect the information they process for us. We otherwise share information only as required by law or to protect the safety of our users.

How long we keep information

We keep each category of information only as long as needed for the purpose below, then delete it. We do not keep children's information indefinitely.

• Adult account record — to operate your account: kept while the account is active; deleted within 30 days of an account-deletion request. We also periodically review accounts with no sign-in for 24 months or more and may delete them. • Child profile and match/performance data — to show scores, history, and stats to you and approved followers: kept while you maintain the profile; deleted within 30 days of you deleting it or withdrawing consent. A match played against another Corta family stays in that family's own history (it is theirs too); only your copy is removed. • Parental-consent record — to document that we obtained consent: kept 36 months after the related child data is deleted, then deleted. • Push-notification tokens — to deliver notifications: kept until the device unregisters. • Subscription records — to validate paid access and support purchases: kept while the account or subscription is active and as needed for transaction, fraud-prevention, and legal obligations. Deleting your Corta account deletes Corta's RevenueCat customer record; it does not itself cancel a subscription billed by Apple.

You can delete individual matches (unless linked to another family's player), delete player profiles you manage, and delete your entire account from Settings. You can also email harris@ashventureshq.com with any deletion request, including as a parent regarding your child's information.

Security

We maintain a written information-security program appropriate to the sensitivity of the data, overseen by our designated Security Coordinator and reviewed at least annually. Data is stored on Google infrastructure and protected by per-user access rules; optional two-step phone verification is available (and required for email/password accounts). No service can promise perfect security, but access to a child's data is limited to the managers you designate and the followers you approve.

Changes & contact

We'll announce material changes to this policy in the app. Corta does not include third-party advertising or behavioral analytics. Information is sent only to the service providers described above to operate Corta. Questions or requests: ASH Ventures LLC, 1325 Sunburst Ln, Northbrook, IL 60062, harris@ashventureshq.com