1. About Ryze
Ryze is a student platform at ryzeapp.org offering study planning, focus tools, mistake analysis, and optional study-stress and wellbeing features. Ryze University is in development. This policy covers the Ryze website, account services, and Ryze Distraction Blocker browser extension.
Ryze (“we”, “us”) is responsible for the information described here. For privacy questions or requests, contact [email protected]. Our services are in beta; availability of individual tools may change.
2. Information we collect
- Account and profile: your name, email address, account identifier, verification status, and profile or onboarding information you provide. Email/password accounts store a password hash rather than a readable password.
- Study information: subjects, topics, grade/year, goals, confidence levels, exam dates, availability, study preferences, plans, tasks, session activity, progress, answers, and mistake-analysis results.
- Uploads: question papers, images, PDFs, answers, and related details you submit to supported document or analysis tools.
- Optional wellbeing information: mood, energy and study-stress check-ins, journal entries, and information you choose to save in these tools. These entries can be sensitive; avoid including information about other people.
- Focus tools: selected blocking categories, custom blocked domains, allowed domains, focus-session identifiers, subject/task details, timestamps, status, and pause, completion or Emergency Use events.
- Support: your contact details and the content of support or partnership enquiries.
- Technical information: IP address and browser/request metadata received by our hosting and delivery services, along with operational, error and security records needed to run the service.
3. Sign in with Google
Google sign-in is optional. Ryze requests the openid, email and profile scopes. Google returns basic identity information, including a unique Google account identifier, your email address and verification status, and profile information such as your name. Ryze uses your Google identifier, verified email and name to create or connect your Ryze account and sign you in.
Ryze does not receive your Google password. This sign-in integration does not request access to Gmail messages, Google Drive files, Google Calendar, contacts or other Google Workspace content. We validate the identity response on our backend and issue a separate Ryze session; we do not use Google sign-in to access your other Google services.
Google-derived account details are stored with your Ryze account and processed by our infrastructure providers only to operate, secure and support the service. They are not sold, used for targeted advertising, or used to train generalized AI or machine-learning models. Ryze’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including applicable Limited Use requirements.
You can revoke Ryze’s connection from your Google Account connections. Revoking Google access does not itself delete data already saved in Ryze. Use Ryze’s account deletion controls or contact us to request deletion.
4. How we use information
We use account information to authenticate you, manage your profile and sessions, send verification or reset messages, and respond to enquiries. We use study information to create and adjust plans, calculate progress, schedule revision, and show your records back to you. Focus settings and session events enable website blocking and synchronization between Ryze and the extension.
Optional wellbeing entries support your own check-ins, journal and weekly summaries. They are not public posts. These features support reflection and study-stress awareness; they do not provide medical diagnosis or treatment.
We also process information to prevent abuse, troubleshoot failures, maintain security, and meet applicable obligations. We do not sell personal data or use private journal entries or Google sign-in data for targeted advertising.
5. AI and uploaded study material
When you choose an available AI document or mistake-analysis feature, the paper, image, question text, answer or mistake information needed for that request is sent to OpenAI to extract questions or generate analysis. This processing occurs only for the feature you request. Our analysis integration requests that API response state is not stored (store: false); this does not mean the provider keeps no operational or abuse-monitoring records.
Google sign-in identifiers and authentication credentials are not included in these analysis requests. The document-analysis integration does not send your private wellbeing journal. Avoid uploading identification documents, unrelated personal information, or material you do not have permission to share. AI outputs can contain errors; review them before relying on them.
6. Ryze Distraction Blocker
The extension saves your block and allow lists, connection status and a cached focus-session snapshot in browser storage. A short-lived access token is held in browser session storage; a revocable refresh token is stored locally so the connection can survive browser restarts. Settings and the session information required for focus tools are synchronized with Ryze’s API.
During a focus session, Chrome compares top-level navigation requests against local blocking rules and redirects blocked navigation to the extension’s blocked page. The extension does not record or transmit your browsing history, attempted-visit history, page contents, keystrokes, screenshots or screen recordings. A domain in your chosen block list is a setting, not a record that you visited it. Session reports may include the number of configured blocked sites.
You can change your lists and disconnect the extension. Focus Lock can restrict early session completion; Emergency Use and session status are checked by the backend. Uninstalling the extension removes its browser-managed storage, but does not delete your Ryze account or account-synced information.
7. Storage, cookies and security
Ryze uses a server backend rather than keeping all account data only in a browser tab. Account and study records use Neon PostgreSQL; wellbeing records use MongoDB Atlas. Supported uploads use Cloudflare R2 object storage. The website is delivered through Cloudflare Pages and the API is hosted on Render. Providers may process information outside your country, including in the United States.
Browser session storage holds short-lived Ryze access tokens and signed-in interface state. Local storage can hold onboarding drafts, preferences and cached interface information. Authentication cookies support session refresh, and temporary Google sign-in cookies protect the connection flow. Clearing browser storage may reset local preferences or sign you out; it does not remove server-stored records.
We use HTTPS, password hashing, scoped account access, short-lived access tokens and revocable refresh sessions to protect information. Access to account records is checked on the backend. No system can guarantee absolute security. Contact support if you believe your account or information is at risk.
8. Service providers and sharing
We share information needed to provide the selected service with these providers:
- Google: optional account authentication, and delivery of Google Fonts used by the website.
- Cloudflare: website delivery, request security and supported file storage.
- Render: hosting and operation of the Ryze API.
- Neon and MongoDB Atlas: storage of account/study records and wellbeing records respectively.
- Resend: delivery of account verification, password-reset and enquiry-related email, including the address and message content needed for delivery.
- OpenAI: requested AI processing described in section 5, where the feature is enabled.
- Asset delivery services: Google Fonts and the Tailwind CSS CDN receive connection/request metadata when pages load their resources.
These services process data under their applicable terms and privacy policies. We do not give AI providers access to your Google account or private wellbeing journal through the document-analysis integration.
We may disclose information when required by law or when necessary to investigate abuse, protect users and secure the service. Support enquiries are available to people handling the enquiry. Do not include sensitive journal entries in support messages unless necessary.
9. Your controls and requests
You can edit profile and study information in Ryze and remove journal entries using the available controls. In Settings → Your data, you can request a JSON export or delete your account. Account deletion requires confirmation and removes the associated account, study and wellbeing records and stored uploads through the backend. If a dependency is unavailable, the deletion may report an error; contact us if you cannot complete it.
You can also email [email protected] to request access, correction, deletion or help with your privacy choices. We may verify that you control the account before acting. Depending on applicable law, you may also have rights to restrict processing, withdraw consent or raise a concern with a data-protection authority.
10. Retention and deletion
Account details, linked Google identity information and saved study or wellbeing records are kept while your account is active and the information is needed to provide the features you use. Uploaded material and analysis remain associated with your account until removed through supported controls or account deletion. Temporary verification codes and authentication tokens have expiry periods; an expired code or token can no longer be used for authentication.
Deleting your account removes its associated records and uploads from the application’s active stores. Provider backups, infrastructure logs, support correspondence and records needed for security, dispute resolution or legal obligations can follow separate retention cycles; they are not necessarily erased immediately by the account deletion action. We retain such information only for the relevant operational or legal purpose. Contact us for questions about a specific record or deletion request.
11. Children and young people
Ryze is intended for students aged 13 and older. If you are below the age at which you can consent to data processing or agree to the service in your country, involve a parent or guardian before using account-based features. We do not describe the beta as having a completed age-verification or guardian-consent system.
If you believe a child has provided personal information without the required permission, contact [email protected] so we can investigate and address the account. Optional journals and check-ins should not be used to share unnecessary sensitive information.
12. Changes to this policy
We update this page when our services or data practices change and show the updated date above. Where appropriate, material changes will also be communicated through the service or by email. Review the policy when choosing to use a new feature.
13. Contact
Service: Ryze
Website: https://ryzeapp.org/
Privacy and support: [email protected]
Help: Ryze Support