Legal

Privacy Policy

Raitu is a whiteboard tutor that teaches with voice, notes, and illustrations, operated by Emitserv Pty Ltd (a South African company) together with its subsidiary, Raitu. This policy explains what we collect, why we collect it, and the choices you have. In short: we collect only what is needed to teach you well, and we never sell your data.

Last updated:

1. Who we are

Raitu is provided by Emitserv Pty Ltd (“Emitserv”, “we”, “us”), a South African company, together with its subsidiary Raitu. For anything in this policy, you can reach us at support@raitu.tech.

2. Information we collect

We collect information in three ways: what you give us, what you create with us, and what we observe about how you use Raitu.

Account information. When you sign in with Google or your email, we receive the details your provider shares with us — typically your email address, and sometimes your display name. We store a profile in your name, including your chosen plan status (currently beta) and when you joined.

Lesson content. Everything you teach yourself with Raitu is yours: the topics you ask about, your typed and spoken questions, the lesson plans and whiteboard figures Raitu generates for you, your answers to understanding checks, and your replay/scrub positions. This content is stored in your account so your history follows you across devices.

Voice recordings. When you speak a question out loud, Raitu records your speech to transcribe it and understand what you asked. Transcripts become part of your lesson. We do not use your voice to train models unless you consent separately.

Usage data. We collect basic technical information needed to run and improve the service, such as the content of your lesson requests, response quality signals, error reports, and standard device/browser information (for example browser type, rough location at country level, and IP address, used for security and abuse prevention).

Local device data. Raitu caches your lessons and prefs in your browser’s local storage (IndexedDB) so lessons load instantly and work offline. We also set a small cookie to remember that an anonymous visitor has already used their one free lesson.

3. How we use your information

  • To generate, narrate, and illustrate the lessons you request — including voices for narration and figures for the whiteboard.
  • To understand your spoken questions and answer them mid-lesson.
  • To keep your lessons synced across devices and signed in to your account.
  • To phrase understanding checks and re-explanations based on your answers.
  • To keep the service secure: authenticate you, prevent abuse, and enforce the Terms of Use.
  • To respond to you when you contact us, and to improve Raitu.

4. AI providers and third-party services

Raitu is an AI-assisted product. To teach, narrate, and illustrate, certain parts of your lesson are sent to third-party processing services:

  • LLM providers (such as Google Gemini via our server) receive your topic, questions on the topic, and lesson context in order to plan and generate lessons.
  • Speech services (Fish Audio and/or ElevenLabs for narration; OpenAI for transcribing your spoken questions) receive the relevant text or audio.
  • Image generation services (such as OpenRouter image models) receive figure descriptions to create whiteboard illustrations, which are then stored on Cloudinary.
  • Cloudinary stores whiteboard figure images (served via secure URLs embedded in your lessons).
  • Supabase hosts your account and lesson data. Google provides sign-in if you choose it.

These providers process data on our behalf and under their own privacy terms, and only as needed to render the service you asked for. Our own server code does not send your contacts, passwords, or other unrelated personal data to them. We do not sell your personal information to anyone, and we do not use your lesson content for advertising.

5. How we protect your data

Data is encrypted in transit (TLS) and at rest on our hosting providers. Access to lesson data is restricted by row-level security to the account that owns it. We review our practices as we grow. No system is perfectly secure, so we ask that you don’t share personal or sensitive information as lesson content you’d rather not have stored.

6. Retention

  • Lessons and lesson history: kept while your account exists, so you can replay and resume them.
  • Account profiles: kept while you have an account.
  • Voice recordings: kept with the lesson they belong to; you can delete any lesson at any time.
  • Usage and error logs: kept for up to 12 months, then deleted or aggregated.
  • If we ever process personal data under a longer legal obligation, we’ll keep it as required by law.

7. Your rights

Depending on where you live — in South Africa under the Protection of Personal Information Act (POPIA), and elsewhere under applicable law (including the GDPR and CCPA) — you may have the right to:

  • Access a copy of your personal information.
  • Correct information that is inaccurate.
  • Delete your account, lessons, or voice recordings.
  • Object to, or restrict, processing of your personal information.
  • Withdraw consent, where processing is based on consent.
  • Receive your data in a portable format.
  • Complain to your supervisory authority — in South Africa, the Information Regulator.

You can delete individual lessons from the sidebar at any time. To delete your account or request any of the above, contact us at support@raitu.tech — we’ll respond within 30 days.

8. Children

Raitu is only for people aged 13 and older. We don’t knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us and we’ll delete it promptly.

9. Cookies and local storage

Raitu uses local browser storage (IndexedDB) to cache lessons and preferences so they load fast and work offline, and a cookie to track that an anonymous visitor has used their one free lesson. We don’t use third-party advertising cookies, and we don’t track you across other sites.

10. International processing

Raitu is built in South Africa and hosted with providers who may process data in other countries (including the United States and the European Union) to deliver lessons. We take steps to protect data transferred internationally, in line with POPIA and applicable data protection law.

11. Changes to this policy

We may update this policy as Raitu grows. Significant changes will be announced here, on this page, with a new “last updated” date. Keep using Raitu after a change and you accept the updated policy.

12. Contact us

Questions, requests, or concerns about privacy? Email support@raitu.tech, or use our contact page.