Privacy Policy

How Richy protects parent and learner information.

Last updated: 16 September 2026

1. Who we are

Richy Learning ("Richy", "we", "us") operates the Richy learning service at richy.app and is the data controller for the personal information described in this policy. For privacy questions or requests, contact support@richy.app.

2. Who the service is for

Richy is designed to be set up and managed by a parent, guardian or other responsible adult. Learner profiles are not independent child accounts and are not public profiles. The adult account holder should only add learner information that they are authorised to provide and that is reasonably needed for the learning service.

3. Information we handle

Depending on how Richy is used, we may handle:

• Parent account information such as first name, email address, username, securely hashed password, account settings, and records showing acceptance of the current Terms, Privacy Policy and adult-account declaration.
• Learner profile information entered by the parent, such as learner name, optional avatar, age band, preferred learning mode, communication stage, usual communication method, optional speech-clarity setting, interests, strengths, focus areas, onboarding answers and placement information. Richy does not require a diagnosis or medical history, and parents should not enter unnecessary health or other sensitive information.
• Learning and progress information such as questions presented, selected answers, correct/incorrect/unclear outcomes, retries, skipped questions, response timing, Tap or Spoken mode, practice sessions, baseline results, mastery, progression and recommended next steps.
• Subscription and access information such as plan or entitlement status, trial or subscription expiry, product identifiers and provider/customer identifiers needed to grant or maintain Premium access.
• Technical and security information such as cookies, IP address, browser/device information, request logs and security/rate-limit information processed by WordPress, hosting, CDN or security systems. Richy also uses short-lived hashed identifiers for registration/login abuse prevention and signed-in feature rate limiting.

4. Spoken practice, microphone audio and AI services

When a learner chooses Spoken mode and starts speaking, the audio clip is sent through Richy to an external speech-processing service for transcription. Richy currently uses OpenAI API services for functions that can include speech transcription, spoken-answer evaluation and generated speech.

The Richy learning database does not save the raw microphone audio file as part of the learner's practice record. The spoken transcript is used to score or respond to the current activity and may be shown temporarily on screen, while the learning record stores the resulting outcome needed for progress and recommendations. External service providers process the information sent to them under their applicable service and data-protection terms.

5. Payments and subscriptions

Richy may use subscription and payment providers such as RevenueCat and, depending on platform, Stripe, Apple or Google. Richy uses subscription-status and transaction information needed to provide access. Full payment-card details are collected and handled by the relevant payment provider rather than stored in the Richy learning database.

6. Why we use personal information and our lawful bases

• To create and manage the adult account, provide requested features and administer subscriptions: where necessary to perform our contract with the adult account holder.
• To store learner profiles, learning history, progress and recommendations: our legitimate interests in providing and improving a parent-managed educational service, while limiting the information collected and protecting the learner's interests and privacy.
• To secure the service, prevent abuse, troubleshoot faults and maintain reliability: our legitimate interests in operating a safe and dependable service.
• To keep records required by law, tax or regulatory obligations: compliance with legal obligations where applicable.
• For optional marketing communications or non-essential cookies: consent where consent is required. Consent can be withdrawn at any time.

Richy does not use learner progress information for behavioural advertising.

7. Adaptive practice and automated personalisation

Richy uses baseline results and learning evidence to automatically choose or recommend suitable practice, levels and Tap/Spoken modes. These are educational recommendations designed to support practice. They are not medical diagnoses, clinical assessments, eligibility decisions or decisions that produce legal or similarly significant effects.

8. Who we share information with

We share information only where reasonably necessary to operate Richy, including with categories of service providers such as website hosting/CDN/security providers, email or support providers, OpenAI for enabled AI/speech features, RevenueCat for subscription entitlement management, and payment/app-store providers such as Stripe, Apple or Google where applicable. We may also disclose information where required by law, to respond to lawful requests, or to protect users, Richy or others from fraud, abuse or security threats.

Richy does not sell parent or learner personal information to advertisers.

9. International data transfers

Some service providers may process information outside the United Kingdom. Where personal information is transferred internationally, we use or rely on the safeguards made available under applicable data-protection law and the relevant provider's contractual data-protection terms, such as adequacy arrangements or approved contractual safeguards where required.

10. Cookies and similar technologies

Richy and WordPress use essential cookies or similar storage for functions such as signing in, keeping an account session secure, remembering necessary service context and protecting forms from abuse. If Richy uses non-essential analytics or marketing technologies, they should only be used in accordance with applicable cookie rules and, where required, after consent.

11. How long we keep information

We keep account, learner and learning information for as long as it is needed to provide the Richy service and maintain the progress history the parent expects. Archiving a learner intentionally keeps the learner's learning history. Permanently deleting a learner removes that learner profile and its Richy learning records from the active database. Permanently deleting the parent account removes the account and associated Richy learner data from the active service, subject to limited records we may need to retain for security, fraud prevention, legal or financial obligations.

Backup copies and technical logs may remain for a limited period until they expire through normal backup or log-rotation processes. They are not kept as an active learner record.

12. Security

We use reasonable technical and organisational measures to protect account and learning information, including access controls, authenticated API features, rate limiting and secure account-password handling. No internet service can guarantee absolute security. Adults should use a strong unique password and keep account access private.

13. Your data-protection rights

Depending on the circumstances and lawful basis, you may have rights to access personal information, correct inaccurate information, request deletion, restrict processing, object to processing, receive certain information in a portable format, and withdraw consent where processing relies on consent. Some rights are subject to legal exceptions.

Your right to object: where we rely on legitimate interests, you can object to that processing. We will consider the objection and stop the processing unless we have a lawful reason to continue.

Parents can also use Richy's account controls to edit, archive or permanently delete learner profiles and to permanently delete the parent account.

14. Children's privacy

Richy is designed around adult-managed accounts and private learner profiles. We aim to apply high-privacy defaults and collect only information needed for the learning service. Parents should explain the service to the learner in a way that suits the learner's age and understanding, particularly before using microphone-based features. Richy does not ask children to create their own independent account.

15. Complaints

If you have a concern about how Richy uses personal information, please contact support@richy.app first so we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office (ICO). More information is available at ico.org.uk.

16. Contact

Privacy questions, requests or concerns can be sent to support@richy.app. Please do not send passwords or unnecessary sensitive learner information by email.

17. Changes to this policy

We may update this policy as Richy, its service providers or applicable law changes. We will update the date at the top of this page when material changes are made and, where appropriate, provide an additional notice.