Privacy Policy

The data controller responsible for the processing of your personal data is:

Tőgyör Zsanett individual entrepreneur
1074 Budapest, Rákóczi út 82. Fsz. 7.
Hungary

Contact: support@ravoq.net

For questions regarding privacy or the processing of your personal data, please contact us at the email address above.

This Privacy Policy applies to personal data processed through:

• the Ravoq mobile application;
• the Ravoq website at ravoq.net;
• Ravoq account and authentication services;
• Ravoq's AI-powered learning features;
• customer support communications;
• subscription-related services.

This Privacy Policy does not apply to third-party websites, applications, or services that may be linked from Ravoq. Those services are governed by their own privacy policies.

Ravoq is designed for users aged 13 and older.

Ravoq does not knowingly provide services to children under 13.

Where applicable law requires parental or guardian authorization for the processing of personal data of users under a particular age, Ravoq will require or rely on such authorization as required by applicable law.

The specific requirements may vary depending on the user's country or jurisdiction.

If you are under the applicable age of digital consent in your country and Ravoq requires parental or guardian authorization, you should use Ravoq only with the involvement and authorization of your parent or legal guardian.

Parents and legal guardians may contact us at support@ravoq.net if they have questions regarding the processing of a minor's personal data or wish to exercise applicable privacy rights on behalf of a minor.

Ravoq does not knowingly request or intentionally collect information that is unnecessary for providing the service from children.

Depending on how you use Ravoq, we may collect the following categories of information.

4.1 Account Information

When you create a Ravoq account, we may collect:

• email address;
• display name;
• authentication information;
• preferred language;
• learning goals.

You may create an account using email and password authentication or Google Sign-In.

We do not receive or store your Google account password when you use Google Sign-In.

4.2 Learning and User-Generated Content

Ravoq processes information that you create or provide through the application, including:

• flashcards;
• decks;
• questions and answers;
• notes;
• categories and tags;
• quiz results;
• review history;
• spaced-repetition data;
• learning progress;
• learning goals;
• AI-generated learning content;
• concept maps and related learning information;
• other content you voluntarily create within Ravoq.

This information is associated with your Ravoq account so that Ravoq can provide personalized learning functionality.

Only the content necessary to provide the requested service is processed.

Users should not upload sensitive personal information about themselves or other individuals unless such information is necessary for the requested functionality.

Ravoq may provide features that allow you to generate learning materials from PDF documents or images.

Where this functionality is used, the original PDF file is processed locally on your device whenever technically possible.

Local document processing

The raw PDF file is not uploaded to Ravoq's servers for this processing.

Text extraction may take place locally on your device using technologies such as PDF.js and, where necessary, Tesseract.js OCR.

The physical PDF file remains in temporary memory during processing and is discarded when the local extraction process is completed.

Text transmission

After local extraction, only the extracted text required to provide the requested AI functionality is transmitted to Ravoq's protected backend over an encrypted HTTPS connection.

The extracted source text is not intentionally stored in Ravoq's database as persistent user content.

AI processing

The extracted text may be transmitted from Ravoq's backend to OpenAI's API for processing.

Ravoq uses OpenAI's API to generate learning content such as flashcards and other AI-powered learning functionality.

The raw PDF itself is not sent to OpenAI through this process.

Generated flashcards

The structured flashcards returned by the AI are presented to the user.

Only flashcards approved or saved by the user are stored in the Ravoq database and associated with the user's account.

The original temporary input text is discarded after processing and is not retained as persistent Ravoq content.

Ravoq uses the OpenAI API to provide AI-powered functionality.

Depending on the feature, information supplied to the AI service may include:

• extracted text from documents;
• user-provided learning content;
• flashcard-related information;
• instructions and prompts required to generate learning materials.

Ravoq does not intentionally send the user's raw PDF file to OpenAI when using the document-processing workflow described above.

According to OpenAI's current API data controls, data submitted to the OpenAI API is not used to train or improve OpenAI models unless the customer explicitly opts in. OpenAI also states that abuse-monitoring logs may contain customer content and are generally retained for up to 30 days by default, subject to applicable exceptions.

Ravoq does not intentionally use your submitted learning content for training its own AI models.

Because Ravoq may be used by users under 18, Ravoq will take additional care when designing and operating AI-powered features involving younger users.

Users should not submit sensitive personal information about themselves or other individuals into AI prompts or documents unless it is necessary for the requested learning functionality.

For additional information about OpenAI's handling of API data, please refer to OpenAI's applicable privacy and API data-processing documentation.

We may use personal information for the following purposes:

• to create and maintain your Ravoq account;
• to authenticate you;
• to provide Ravoq's learning functionality;
• to store and synchronize your flashcards and learning progress;
• to generate AI-powered learning materials;
• to personalize learning recommendations;
• to provide spaced-repetition functionality;
• to provide quizzes and learning statistics;
• to provide customer support;
• to process subscriptions and purchases;
• to monitor application performance;
• to identify and diagnose technical problems;
• to prevent fraud, abuse, and security incidents;
• to understand how users interact with Ravoq;
• to improve Ravoq's functionality and user experience;
• to comply with applicable legal obligations.

We do not sell your personal information.

Ravoq uses Firebase Analytics to understand how users interact with the application and to measure product usage.

Analytics information may include information such as:

• application events;
• feature usage;
• session information;
• application version;
• operating system;
• device information;
• language;
• approximate geographic information;
• app installation or instance identifiers;
• other technical or usage information generated through Firebase Analytics.

Because Ravoq is intended for users aged 13 and older, analytics and related SDK configurations will be operated in accordance with applicable laws and Google Play requirements concerning younger users.

We will not intentionally use analytics information to create advertising profiles of children.

The exact analytics events and reports used by Ravoq may change as the application develops.

We use analytics primarily for product improvement, feature measurement, troubleshooting, and understanding aggregate usage patterns.

Ravoq uses Firebase Crashlytics to identify and diagnose application crashes and technical problems.

Ravoq also uses Firebase Performance Monitoring to monitor application performance and identify technical issues that may affect the user experience.

These services may process technical information relating to the device, application version, operating system, performance characteristics, and crash events.

Because Ravoq is intended for users aged 13 and older, these services will be configured and used in accordance with applicable Google Play and privacy requirements relating to younger users.

This information is used for technical diagnostics, application stability, and performance improvement.

Ravoq offers free and paid functionality.

Premium subscriptions may be offered through Google Play, including monthly and annual subscription options and promotional trials.

Payments for Android purchases are processed through Google Play Billing.

Ravoq does not directly collect or store your full credit card number or other complete payment-card credentials.

Google may process payment and transaction information in accordance with Google's own terms and privacy policies.

Ravoq may receive information necessary to determine the status of your subscription, such as whether a subscription is active, expired, cancelled, or otherwise unavailable.

If a user is under 18, purchases may also be subject to applicable parental controls, purchase approval mechanisms, or other requirements provided by Google Play and the user's device or account settings.

We may share or make personal data available to third-party service providers when necessary to operate Ravoq.

These providers may include:

OpenAI

Used for AI-powered content generation and processing.

Google / Firebase

Used for:

• authentication through Google Sign-In;
• analytics;
• crash reporting;
• performance monitoring;
• other technical infrastructure where applicable.

Google Play

Used for:

• application distribution;
• subscription management;
• payment processing;
• purchase verification.

Third-party service providers may process information on our behalf and are expected to process information in accordance with applicable contractual and legal requirements.

Where Ravoq is used by minors, third-party services will be configured and used in accordance with applicable requirements concerning children's and minors' data.

We do not sell personal information to third parties.

We take reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, loss, or destruction.

These measures may include:

• encrypted HTTPS connections for data transmitted between your device and Ravoq services;
• authentication controls;
• access controls;
• database security measures;
• account-level data isolation;
• Row-Level Security where applicable;
• secure authentication mechanisms;
• restricted access to administrative systems;
• technical monitoring and security logging.

We take particular care to protect personal information relating to younger users.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Account and learning data

Your account-related information and saved learning content are generally retained while your account remains active.

When you delete your account, the personal data and learning content associated with the account will be deleted, subject to the exceptions described below.

Billing and transaction records

Certain billing, accounting, tax, and transaction information may need to be retained for the period required by applicable laws.

Security and fraud-prevention information

Certain security or fraud-prevention logs may be retained for a limited period where reasonably necessary to protect Ravoq, its users, or third parties.

Analytics

Analytics data may be retained in accordance with the retention settings and policies applicable to the analytics service used by Ravoq.

You may request deletion of your Ravoq account and associated personal data.

In-app deletion

You can initiate account deletion from the Ravoq application:

Settings → Delete Account

Web-based deletion request

You can also request deletion through:

https://ravoq.net/delete-account

If you submit a deletion request, we will process it in accordance with applicable legal requirements.

For users under the applicable age of digital consent, a parent or legal guardian may exercise applicable rights on behalf of the minor where permitted or required by law.

Certain information may be retained where required by law or where retention is necessary for legitimate purposes such as accounting, fraud prevention, security, dispute resolution, or compliance with legal obligations.

Deleting your Ravoq account does not necessarily cancel a subscription purchased through Google Play. You may need to manage or cancel your Google Play subscription separately through Google Play.

If the GDPR applies to the processing of your personal data, you may have the following rights:

Right of access

You may request confirmation as to whether we process your personal data and request access to that information.

Right to rectification

You may request correction of inaccurate or incomplete personal information.

Right to erasure

You may request deletion of your personal data, subject to applicable legal exceptions.

Right to restriction

You may request restriction of processing in certain circumstances.

Right to object

You may object to certain processing activities where permitted by applicable law.

Right to data portability

Where applicable, you may request your personal data in a structured, commonly used, and machine-readable format.

Right to withdraw consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing performed before withdrawal.

Rights of parents and legal guardians

Where permitted or required by applicable law, a parent or legal guardian may exercise privacy rights on behalf of a minor.

Right to lodge a complaint

You have the right to lodge a complaint with a competent data protection supervisory authority.

In Hungary, the relevant supervisory authority is:

National Authority for Data Protection and Freedom of Information (NAIH)
Nemzeti Adatvédelmi és Információszabadság Hatóság

You can contact us first at support@ravoq.net regarding privacy-related requests.

We generally respond to valid GDPR requests within one month, unless a longer period is permitted by applicable law.

Where the GDPR applies, we process personal data on one or more of the following legal bases:

Performance of a contract

Processing necessary to:

• create and operate your account;
• provide Ravoq's functionality;
• store your learning content;
• provide AI-powered features;
• manage your subscription.

Legitimate interests

Processing necessary for purposes such as:

• application security;
• fraud and abuse prevention;
• technical diagnostics;
• crash analysis;
• application performance;
• maintaining and protecting Ravoq's services.

When the data subject is a child or minor, we take particular account of the child's interests and fundamental rights when assessing whether legitimate interests provide an appropriate legal basis.

Legal obligation

Processing necessary to comply with legal, tax, accounting, or other statutory obligations.

Consent

Where required by law, we may rely on your consent for specific processing activities, such as certain analytics or tracking technologies.

Where applicable law requires parental or guardian authorization for consent provided by a minor, we will seek or rely on the required authorization.

The Ravoq website may use cookies or similar technologies where necessary for website functionality, security, analytics, or other legitimate purposes.

The exact cookies and technologies used by the website may change as the website develops.

Where applicable law requires consent for non-essential cookies or tracking technologies, Ravoq will request the required consent before using those technologies.

Ravoq does not use cookies for the purpose of selling users' personal information.

We do not intentionally use behavioral advertising technologies to create advertising profiles of children.

Ravoq is intended for users aged 13 and older.

Ravoq does not knowingly provide the service to children under 13.

We recognize that users between 13 and 17 may be minors under applicable law and may therefore benefit from additional privacy protections.

Ravoq will not intentionally collect more personal information from minors than is reasonably necessary to provide the service.

We do not knowingly sell personal information belonging to minors.

We do not intentionally use personal information of minors to create behavioral advertising profiles.

We encourage users under 18 not to provide sensitive personal information through Ravoq unless it is necessary for the requested learning functionality.

Parents and legal guardians may contact us at support@ravoq.net regarding the processing of their child's personal information.

Where applicable law requires parental or guardian authorization for processing based on consent, Ravoq will apply the relevant requirements.

If we become aware that we have collected personal information from a child under 13 without the required authorization, we will take reasonable steps to delete that information.

Because Ravoq uses third-party service providers, personal data may be processed in countries outside Hungary and/or the European Economic Area.

Where personal data is transferred outside the EEA, we will use appropriate safeguards where required by applicable data protection law.

Such safeguards may include an adequacy decision, Standard Contractual Clauses, or another legally recognized transfer mechanism.

The applicable third-party provider may also process data in accordance with its own data protection terms.

Ravoq may contain links to third-party websites or services.

Examples may include:

• Google;
• Google Play;
• OpenAI;
• other external services used to provide Ravoq functionality.

We are not responsible for the privacy practices of third-party services.

We encourage you to review the privacy policies of those services before providing personal information to them.

We may update this Privacy Policy from time to time.

Changes may be necessary because of:

• changes to Ravoq's functionality;
• new third-party services;
• changes to data processing practices;
• legal or regulatory requirements;
• security or operational changes.

When we make material changes, we will update the "Last updated" date at the beginning of this Privacy Policy and, where required, provide additional notice.

You should periodically review this Privacy Policy to remain informed about how your information is handled.

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how your personal information is processed, please contact:

Tőgyör Zsanett individual entrepreneur
1074 Budapest, Rákóczi út 82. Fsz. 7.
Hungary

Email: support@ravoq.net