Privacy Policy

Last updated: July 22, 2026

Ruffly is a language-learning app where you practice by talking with Ruffy, a friendly AI companion. This policy explains what we collect, why, who we share it with, and the choices you have. We try to keep it in plain English, the way Ruffy talks.

1. Who we are

Ruffly (the “app,” “we,” “us”) is operated by [Company Legal Name], located in [Jurisdiction / Address]. For any privacy question, reach us at privacy@tryruffly.com. We are the data controller for the information described here.

2. What we collect

Information you give us

• Account details. When you create an account we collect your name and email address. You can sign up with email and a password, or with Sign in with Apple or Google. If you use Sign in with Apple’s private-relay email, we only ever see the relay address.
• Anonymous start. You can begin learning without an account. In that case we create an anonymous profile tied to your app install so your progress is saved on the device. If you later sign up, we link that progress to your new account.
• Learning profile. The country/language you’re learning toward, your self-described level, the interests you pick, and settings like Ruffy’s voice and difficulty.
• Your conversations & progress. The messages you exchange with Ruffy, the vocabulary (“words”) you meet and build, your journey/progress, and a rolling summary Ruffy keeps so it can “remember” you across sessions.
• Voice. If you grant microphone access, we process your speech so you can practice talking out loud. See AI & your conversations for how audio is handled.

Information we collect automatically

• Device & usage data. Basic technical data such as device type, operating system, app version, language/region, and in-app events needed to operate the app, diagnose problems, and enforce fair-use limits.
• Notifications. If you allow push notifications, we store a push token so we can send you gentle reminders. You can turn these off any time in your device settings.

3. How we use your information

• To power your conversations with Ruffy and generate lessons tailored to your level and interests.
• To save and resurface your words, journey, and progress, including remembering context across sessions and (where relevant) noting helpful transfer between languages you study.
• To provide word definitions when you tap a word.
• To manage your account, subscription, and fair-use limits.
• To send you notifications you’ve opted into, and important service messages.
• To keep Ruffly safe and working: preventing abuse, debugging, and improving the product.

Our legal bases (where the GDPR applies) are: performance of our contract with you (running the app), your consent (e.g. microphone, notifications), and our legitimate interests (security, product improvement).

4. AI & your conversations

Ruffy’s conversation is powered by large-language-model providers, currently OpenAI. To generate Ruffy’s replies, we send the text of your conversation (and relevant context, such as your level and the rolling memory summary) to the provider’s API. We instruct providers to process this data only to return a response and not to train their models on it, in line with their API terms.

Voice. When you speak, your audio is transcribed to text so Ruffy can respond. [Confirm and disclose: whether transcription happens on-device or via a provider, and whether audio recordings are stored or discarded after transcription.]

Please avoid sharing sensitive personal information in your conversations that isn’t needed to practice.

5. Who we share it with

We do not sell your personal information. We share it only with service providers (“subprocessors”) who help us run Ruffly, under contracts that require them to protect it:

• OpenAI generates Ruffy’s conversational responses from your messages.
• Apple provides Sign-in, the App Store, and in-app purchases.
• Google provides Sign-in.
• RevenueCat manages your subscription status and entitlements.
• Hosting & infrastructure: [Hosting provider] stores your account and learning data on our servers.
• Push delivery: Apple Push Notification service delivers notifications you opt into.
• Dictionary lookups: when you tap a word we may query public dictionary sources (e.g. Jisho for Japanese, Wiktionary for other languages) to fetch a definition.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and Ruffly. If we’re ever part of a merger or acquisition, we’ll notify you before your information becomes subject to a different policy.

Some of these providers are located in the United States and other countries; where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

6. Purchases

Subscriptions (Boarding Pass monthly and annual) are processed by Apple through in-app purchase. We never see or store your full payment card details. We receive confirmation of your purchase and entitlement status via RevenueCat so we can unlock your plan.

7. Data retention & deletion

We keep your information for as long as your account is active or as needed to provide the app. You can delete your account at any time from Settings in the app; this erases your personal data and learning history, except anything we must retain for legal, accounting, or fraud-prevention reasons. You can also request deletion by emailing privacy@tryruffly.com.

8. Your rights & choices

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the use of your personal information, and to object to certain processing. You can exercise these in-app or by contacting us.

• EU/UK (GDPR): rights of access, rectification, erasure, portability, restriction, objection, and to lodge a complaint with your supervisory authority.
• California (CCPA/CPRA): rights to know, delete, correct, and to opt out of “sale”/“sharing.” We do not sell or share your personal information as those terms are defined.

You can withdraw consent for the microphone or notifications any time in your device settings.

9. Security

We use technical and organizational measures, including encryption in transit and access controls, to protect your information. No method of transmission or storage is perfectly secure, but we work to keep your data safe and to respond promptly to any incident.

10. Children

Ruffly is not directed to children under 13 (or the minimum age of digital consent in your country), and we don’t knowingly collect their personal information. If you believe a child has provided us data, contact us and we’ll delete it.

11. Changes to this policy

We may update this policy as Ruffly evolves. We’ll change the “Last updated” date above and, for material changes, notify you in the app or by email.

12. Contact us

Questions about privacy? Email privacy@tryruffly.com or write to [Company Legal Name], [Address]. We’re happy to help. 🐾