Privacy Policy for RayKin

We only collect data strictly necessary to provide our core learning, reasoning, and thinking tools.

A. User-Provided Information

Account Identity: You may browse RayKin in guest mode without creating an account. Account-specific features require you to sign in using Apple, Google, or GitHub. Depending on the provider, we may receive a stable provider user identifier, a verified email address, and limited profile information such as your name. Apple may provide a private relay email address. We use this information only to create, authenticate, link, and manage your RayKin account.

Learning Queries and Prompts: We process text, math problems, learning questions, and discussion responses you submit into the App.

Photos and Uploaded Images: When you use camera or photo album features to analyze a math problem or worksheet, the selected image is transmitted securely solely to process that specific task.

Audio and Voice Input: When you use dictation or push-to-talk features, audio is captured via the device microphone and converted into text for the active learning workflow.

B. In-App Purchase and Transaction Data (StoreKit)

All financial transactions and payments are processed exclusively through Apple’s In-App Purchase system (StoreKit).

We do not collect, store, or have access to your credit card numbers, billing addresses, or payment credentials.

We receive only cryptographically signed transaction receipts from Apple to verify purchases and credit consumable token packs to your in-app balance.

C. Automatically Collected Diagnostic Data

Anonymous Telemetry: We use Firebase Analytics and Firebase Crashlytics to monitor application stability and performance.

No Cross-App Tracking (Zero IDFA): We have disabled the Identifier for Advertisers (IDFA) and ad-tracking personalization signals. We use Firebase Analytics, Crashlytics, and Performance Monitoring to understand app usage, diagnose crashes, and measure technical performance. RayKin does not use the advertising identifier or track users across third-party apps or websites. Firebase may process app-instance, device, operating-system, crash, and performance information under Google’s privacy terms.

RayKin uses OpenRouter to provide AI-generated answers and images through its platform AI service.

Before RayKin sends content to a third-party AI service, the App displays a disclosure and asks the account holder to choose “Agree and Continue” or “Not Now.” Choosing “Not Now” cancels the current request. The content is not sent to an AI provider and no Credits are charged. The disclosure is shown again only when the account holder initiates another AI action.

Information Sent for AI Processing

Depending on the selected experience, the following information may be sent:

• text, questions, math problems, written steps, and answers entered by the user;
• photos selected or captured for the current task;
• speech transcripts created from a voice input;
• conversation context necessary to respond to the current request;
• limited technical metadata required to route and operate the request.

RayKin does not send account passwords, Apple payment credentials, or full payment-card information to AI providers.

OpenRouter Platform AI Service

When you use RayKin’s platform AI service, the content listed above is sent to OpenRouter to generate the answer or image you request. RayKin enforces OpenRouter’s Zero Data Retention (ZDR) routing restriction, allowing these requests to use only AI processing endpoints with a zero data retention policy. If no eligible endpoint is available, the request fails rather than relaxing this restriction.

OpenRouter Zero Data Retention: https://openrouter.ai/docs/guides/features/zdr

OpenRouter data handling: https://openrouter.ai/docs/guides/privacy/data-collection

OpenRouter provider policies: https://openrouter.ai/docs/guides/privacy/provider-logging

Consent Records and Withdrawal

RayKin stores the consent status, disclosure-policy version, and decision time in the account record and keeps a local copy on the device. These records are used only to determine whether an AI request may proceed and do not contain the text or image submitted with a request.

If the local record is missing, declined, withdrawn, or belongs to an older policy version, the App asks again before the next AI action. The account holder may withdraw consent in Settings. Withdrawal does not delete previously generated history, but it prevents new third-party AI requests until consent is given again.

Model Training and Retention

RayKin does not use submitted family content to train AI models. For platform AI requests sent through OpenRouter, RayKin requires both zero data retention and no-training processing endpoints. These restrictions apply to AI inference processing and do not delete the conversation history you choose to save in RayKin or all technical logs.

OpenRouter’s own input/output logging and use of content are separate opt-in settings, not controlled by the ZDR routing restriction. OpenRouter documents that it does not store prompts or responses unless those options are enabled. It retains operational metadata, such as token counts and processing time. This metadata does not include the content of your prompts or responses. See its data-handling policy linked above.

Cloudflare AI Gateway forwards platform AI requests. Gateway logging and caching are separate from OpenRouter’s ZDR restriction. OpenRouter defines eligible in-memory prompt caching as compatible with ZDR; ZDR does not mean that content is never held in memory while processing a request.

If you choose a custom AI service, content is sent to the service you configure. The OpenRouter platform restrictions described here do not apply to that custom service; its data handling depends on your selected service and configuration.

The App requests permissions strictly on demand when you initiate a specific action:

You may enable or revoke these permissions at any time via your device’s Settings > Privacy & Security.

Consumable Products: RayKin offers consumable credit/token packs purchased through Apple In-App Purchases. Credits are consumed as you perform AI-assisted reasoning tasks and image generation.

No Auto-Renewing Subscriptions: Consumable tokens are one-time purchases and do not automatically recur or renew.

Refund Policy: All in-app purchases are handled directly by Apple. If you wish to request a refund, you must do so through Apple's official refund portal at reportaproblem.apple.com in accordance with Apple Media Services Terms and Conditions.

RayKin retains account information and saved content while the account remains active and as necessary to provide the Services.

You may request account deletion in the App by navigating to Settings > Account > Delete Account. After explicit confirmation and fresh authentication through your primary sign-in provider, RayKin immediately signs you out and blocks new and existing sessions.

The deletion request remains pending for 30 days. During this period, you may cancel the request by authenticating again with the same provider identity used to authorize the deletion. While deletion is pending, the account cannot be used normally.

After the 30-day period, RayKin deletes the account profile, authentication credentials and connections, saved conversations and learning history, configuration, files, generated resources, and remaining Credits.

RayKin retains only non-recoverable transaction identifiers and limited payment anti-replay or security records where necessary to prevent duplicate crediting, fraud, or abuse. These retained records cannot be used to restore the deleted account or its content.

RayKin is intended to be managed by parents or guardians and is designed for family activities involving children aged 3–12. Children may participate in activities initiated and supervised by their family, but RayKin does not provide an independent child account.

Accounts, sign-in methods, purchases, AI data-sharing decisions, and account deletion are intended to be managed by a parent or guardian.

RayKin does not provide public child profiles, behavioral advertising, social-networking feeds, open user-to-user messaging, or public community features for children.

Parents and guardians decide what text, photos, and voice transcripts are submitted during a family activity and should avoid submitting unnecessary personal information about a child.

If you believe that a child’s personal information has been submitted inappropriately, please contact us at support@bricks.cool or use the in-app account-deletion controls. We will review the request and delete the applicable information, subject to limited payment anti-replay, security, and legal-retention requirements.

We implement rigorous technical safeguards:

• All data in transit is protected using TLS / HTTPS encryption.
• User session tokens and secure keys are stored in the platform iOS Keychain / Secure Storage.
• Backend databases are access-controlled.

We do not sell, rent, or lease your personal information. We use the following service providers to operate RayKin:

Apple, Google, and GitHub: For account authentication and identity services. Apple also provides StoreKit payment processing and may provide speech recognition services.

Google Firebase: For app analytics, crash reporting through Crashlytics, and performance monitoring. Firebase may process app-instance, device, operating-system, crash, and performance information under Google’s privacy terms. RayKin does not use Firebase for cross-app tracking or advertising.

OpenRouter: Provides the platform AI service for generating answers and images, subject to the zero data retention and no-training routing restrictions described in Section 2. OpenRouter Privacy Policy.

Cloudflare AI Gateway: Forwards platform AI requests between RayKin and OpenRouter. Its gateway processing is separate from OpenRouter’s inference-endpoint ZDR restriction. Cloudflare Privacy Policy.

We require third-party service providers that receive personal data from RayKin to provide the same or an equivalent level of protection as described in this Privacy Policy and required by applicable App Store guidelines.

We may update this Privacy Policy periodically to reflect changes in our legal obligations, product features, or Apple guidelines. The revised date will be reflected at the top of this document. If a change materially affects how submitted content is shared with third-party AI services, RayKin will ask the account holder for consent again before the next AI action.