Last updated: 26 July 2026
Rattu ("the app") turns photos of school notebooks into revision quizzes. It is built and operated by Activate Travel ("we", "us"), based in India. This policy explains what data the app collects, why, and how it is handled.
Rattu accounts belong to a parent or guardian. Children use the app through child profiles inside the parent's account; children do not have their own accounts, logins, or contact details in Rattu. Child profiles contain only a first name/nickname, class, board, and an avatar chosen by the parent.
| Data | Why |
|---|---|
| Phone number (parent) | Account sign-in via one-time password (OTP). |
| Photos you scan | Pages you photograph are uploaded to generate quiz questions. The camera is used only when you start a scan; we never access your photo library or camera in the background. |
| Child profile details (name, class, board) | To organise questions and progress per child. |
| Quiz activity (answers, scores, review schedule) | Spaced-repetition scheduling and the weekly progress report shown to the parent. |
| Purchase records | To activate and manage your subscription. Payment card/UPI details are handled entirely by the payment provider — we never see or store them. |
| Device identifiers and basic diagnostics | Sign-in security, push notifications, and fixing crashes. |
We do not collect location, contacts, advertising identifiers, or browsing data. Rattu contains no third-party advertising.
Scanned images are stored in your account's private storage and sent to a cloud AI service (Google Gemini, with OpenAI as fallback) to read the page and generate questions. These providers process the image to return questions and do not use your content to train their models under the API terms we use. Generated questions are always shown to you for review and editing before they are saved.
| Provider | Role |
|---|---|
| Supabase | Authentication, database, and file storage. |
| Google (Gemini) / OpenAI | Reading scanned pages and generating questions. |
| Razorpay | Payments and subscriptions on Android/web (India). |
| Apple / Google Play | In-app purchases and app distribution on their platforms. |
We never sell personal data, and we do not share it with anyone beyond the providers above.
Your data is kept while your account is active. You can delete individual scans, questions, or child profiles in the app at any time. Deleting your account removes your profiles, scans, images, questions, and quiz history from our systems within 30 days (payment records are retained as required by tax law). To delete your account, use the option in the app's profile screen or contact us.
Rattu is designed so that the parent controls everything: the parent creates the account, scans the pages, and reviews all generated content. We collect no contact details from children, show no ads, and provide no social features, chat, or public sharing. Quiz activity linked to a child profile is visible only within that parent's account.
Data is transmitted over HTTPS and stored with per-account access controls (row-level security). Scanned images live in private storage folders scoped to your account. AI API keys and payment secrets are held server-side only.
If this policy changes materially, we will notify you in the app. Questions or requests: privacy@rattu.app.