Skip to main content
DATA SOVEREIGNTY STANDARD

Privacy & Security Policy

Your career ambitions, personal audio practice, and campus study focus belong strictly to you. Here is our exact architectural commitment to safeguarding your sovereignty.

Effective & Last Updated: September 2026Open Beta Standard

Zero Data Selling & Monetization

We do not sell, license, or broker your personal resumes, voice inputs, compensation details, or study habits to recruiters, advertisers, or data aggregators. Period.

Zero AI Model Training

Your resumes, mock interview audio, transcripts, and personal notes are never used to train, tune, or evaluate foundation AI models (neither RYUN's nor upstream providers').

BYOK Key Sovereignty

When using Bring Your Own Key (BYOK), your API credentials (OpenAI, Gemini, Claude, Groq, DeepSeek) communicate through direct encrypted channels with zero markup and strict commercial zero-retention flags.

Encrypted & Containerized Storage

Data is protected with TLS 1.3 in transit and AES-256 encryption at rest. Application services run in isolated container partitions with strict access control.

01 • BYOK ZERO-RETENTION PROTOCOL

Bring Your Own Key (BYOK) AI Architecture

Unlike legacy SaaS platforms that route your data through shared multi-tenant AI proxies and store prompt logs for analytics, RYUN operates on a sovereign Bring Your Own Key model.

When you input personal API keys (such as Google Gemini, Anthropic Claude, OpenAI, Groq, or DeepSeek):

  • Direct Endpoint Transmission: Requests are dispatched directly to the respective commercial model provider APIs.
  • Zero Training by Providers: Commercial API tiers from OpenAI, Anthropic, and Google strictly prohibit using API inputs/outputs to train future models under their commercial terms of service.
  • Zero Token Markup: You pay wholesale fractions of a cent directly to the provider, ensuring RYUN has no commercial incentive to inspect, throttle, or profile your prompt volume.
02 • SUITE-SPECIFIC DATA HANDLING

How Each Tool Protects Your Information

Ravina (Career Intelligence)

Your resumes, job descriptions, compensation offers, and STAR mock interview notes are stored in isolated user accounts. Ravina never shares candidate resumes with external headhunters, recruiters, or employment brokers without explicit, affirmative action.

Nativra (Language Immersion)

Imported SRT/VTT subtitle files, YouTube URLs, and Anki decks belong solely to you. We do not inspect your study materials or monitor the media you study. Voice recordings during speech practice are processed in real-time and not stored on permanent audio drives.

StudyHush (Focus & Campus Spots)

StudyHush decibel readings use a 10-second client-side microphone sampling window via the Web Audio API / device audio buffer. Zero audio waveforms or conversations are recorded, saved, or uploaded. Only the resulting numerical sound pressure level (e.g., “38 dB”) is transmitted to map quiet library spots. Study Mate partner matching is gated strictly by verified institutional email domains, functioning on a list-only basis with zero live continuous GPS tracking.

03 • COOKIES & TELEMETRY

Minimal, Essential Cookies Only

RYUN does not deploy invasive cross-site ad retargeting pixels (such as Meta Pixel, TikTok Pixel, or third-party ad beacons).

We only utilize strictly necessary operational storage:

  • Session & Authentication: Secure authentication tokens to keep you logged into the unified RYUN suite across tools.
  • Interface Preferences: Local storage flags for your chosen language locale, UI themes, and workspace filters.
04 • YOUR RIGHTS & DATA CONTROL

GDPR, CCPA & Data Ownership Rights

Regardless of your geographic location, we respect fundamental privacy rights consistent with the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA):

  • Right to Export: Download all your resumes, saved vocabulary, and flashcards anytime in universal formats (PDF, DOCX, Anki TSV, JSON).
  • Right to Erasure: Request permanent deletion of your account and all associated records with zero retention.
  • Right to Object: Revoke API key connections or stop telemetry collection at any moment.

Have questions about your data?

Our team responds to all privacy inquiries and data requests within 1–2 business days.

Contact Privacy Team