This policy explains how Ryuo AI (“Ryuo”, “we”, “us”) handles personal information when you use our website, desktop studio, and connected services. It applies alongside our Terms of Service.
1. Information we handle
- Account information: your email, profile information supplied by your sign-in provider, account identifiers, and authorized device sessions. Google or Backboard handles its own sign-in credentials; we do not receive your provider password.
- Content you use with AI: prompts, conversation history, attachments, selected project files, tool results, editor captures, and generated assets, depending on the features and permissions you use.
- Connected services: authorization tokens and provider connection information when you explicitly connect a personal provider account.
- Billing records: plan, payment status, transaction identifiers, credit balances, and usage records. Stripe processes payment details; Ryuo does not need your full payment card number.
- App usage and approximate country: daily Studio prompt counts, cloud request activity, and the latest country associated with an authenticated Studio activity request, with its observation time. Our hosting provider derives the country from the request’s network address. For this app analytics dashboard, we do not store raw IP addresses, GPS coordinates, cities, or a history of countries.
- Website and support information: waitlist submissions, messages you send us, request and security logs, IP addresses used for abuse prevention, and website usage information collected through Vercel Analytics.
2. Why we use information
We use this information to provide the studio and website, authenticate users and devices, carry out requested AI operations, manage connected accounts and credits, respond to requests, send access or service updates, diagnose failures, understand website usage, prevent abuse, and meet legal obligations.
Joining the waitlist provides your submitted details to the Ryuo team through a private Discord channel so we can manage access requests.
We use app activity and approximate country to understand active usage, return visits and geographic distribution, and to improve the service. A restricted team dashboard shows these metrics and account-level usage, not conversation text or project contents. Network location can be inaccurate, especially with VPNs or proxies.
3. Local projects and AI providers
Your Unreal project and locally saved studio conversations remain on your computer unless a feature sends relevant content to a connected service. Local storage does not mean all processing is offline: an agent may send project context, code, images, tool outputs, and conversation history to the selected AI provider to complete your request.
Cloud AI features use Backboard and its routed model providers, and asset-generation features may use Tripo. Optional local agent runtimes can communicate with their own providers under your existing account and settings. Provider retention, training practices, and data locations depend on the provider, model, and account terms. Do not submit secrets or content you are not permitted to share.
Signing in with Backboard is separate from explicitly connecting it to fund requests through your personal Backboard account.
4. Who receives information
We use service providers including Supabase for account and database services, Vercel for website hosting and analytics, Stripe for payments when enabled, Discord for waitlist management, and the AI providers needed for your selected operations. They receive information relevant to their role and may process it in countries other than yours.
We may also disclose information where required by law, to protect users or the service, or as part of a business transfer subject to applicable privacy protections. Third-party services have their own terms and privacy policies.
5. Cookies and security
The website uses cookies and similar storage for sign-in, authorization, and session continuity. Blocking these may prevent account features from working. Vercel Analytics measures website usage, and Vercel Speed Insights measures page performance; hosting and security systems may separately process request information.
We use safeguards such as access controls and encrypted credential storage. No system or transmission method is completely secure. Keep your devices, project backups, and connected provider accounts secure.
6. Retention and your choices
We retain information for as long as needed for the purposes above, including account operation, security, dispute resolution, and applicable accounting or legal requirements. Retention differs by record type and provider. Deleting a local conversation or disconnecting a provider does not necessarily delete copies already processed by that provider.
Your latest known country is kept with your account until it is replaced by a newer observation or removed during account deletion; we do not keep earlier countries for this dashboard. Daily Studio prompt counts and your country record are included in the account data export and removed during account deletion, available in account Settings.
You can stop using connected features and manage provider authorizations through your account or the provider. Contact us to request access, correction, deletion, withdrawal of consent, or removal from the waitlist. Depending on your location, you may have additional rights or the right to complain to a privacy regulator. We may need to verify your identity and retain records that law requires.
For questions or requests, contact the Ryuo team through the contact channel provided with your invitation or account. Include the email associated with your account, but do not send passwords, API keys, or payment card details.
7. Children and changes
Ryuo is intended for people who can agree to its terms, or who use it with the permission and supervision of a parent or guardian where applicable. If you believe a child has provided personal information without required permission, contact us.
We may update this policy as the service changes. We will update the date above and provide additional notice or seek consent when required for material changes.