Legal in full

Last updated 6 September 2026

Four documents, no summaries. Each one is written to be read on its own, and this page exists only so you can find the right one quickly.

Privacy →

What we collect, why, how long we keep it, and who else ever sees it. The one to read if you want a single answer about your own data.

Who may open an account, what Raya is and — as importantly — is not, and how an account ends.

Schools DPA →

The data-processing agreement a school signs. Written for the person at the school who has to sign it, not for a student.

Sub-processors →

Every third party that touches your data, what each one does, and where it runs. Named, not summarised.

Doing something about it

Reading a policy and acting on it are different things, and the second one should not require writing to anybody. Everything below is a control in your own account settings, not a request form:

Download everything we hold as a JSON file — including the model of your learning that Raya keeps but never shows you.
Switch off product analytics, and switch off whether your work is used to improve Raya. Both take effect immediately, and nothing about the product changes when you do.
Delete the account outright, with a typed confirmation and no undo.

If you are under 18

Neither of those two switches applies to you, and not because we forgot them. Accounts belonging to under-18s are not measured by analytics and their work is never used to improve our models — that is enforced above the setting rather than by it, so there is no state of the account in which it can be turned on. The privacy policy says how that is decided. Nothing can be bought from an account belonging to an under-18 unless the person paying confirms they are a parent or guardian, and under 13 the account is held to the strict minimum described there.