Last updated: 22 June 2026
This Privacy Policy explains how RY Studies collects, uses and protects your personal data when you use our website (rystudies.com), our learning platform (practice.rystudies.com) and related services (the “Service”).
Who is responsible for your data (the controller): RY Studies is a trade name of Iana Golovanova, a sole proprietor (eenmanszaak) established in the Netherlands, registered with the Netherlands Chamber of Commerce under number 42080594, VAT number NL005484505B49, registered address De Peppels 28, 1402 KV Bussum, the Netherlands.
Contact for any privacy question or request: info@rystudies.com
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Dutch data-protection law.
You give us:
We collect automatically:
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Create and run your account; provide the courses, practice, AI marking and Asya | Performance of a contract |
| Process payments and prevent payment fraud | Performance of a contract; legitimate interests |
| Personalise your study (mastery map, weak-area analysis) | Performance of a contract |
| Send service emails (e.g. receipts, account notices) | Performance of a contract |
| Send marketing emails about RY Studies | Consent (you can unsubscribe at any time) |
| Analytics and advertising cookies | Consent (via the cookie banner) |
| Keep tax and accounting records | Legal obligation (Dutch law requires 7 years) |
| Security, prevent abuse, prevent refund/Pass-Guarantee abuse, sanctions screening | Legitimate interests; legal obligation |
Where we rely on legitimate interests, we have balanced them against your rights; you may object (see §7).
3.1 When you use Asya or submit a written answer for AI marking, the text you provide (your message or answer), together with relevant study context (such as the current question and your progress), is sent to our third-party AI provider to generate a response or a mark.
3.2 We currently use Anthropic (Claude) for this, via its commercial API. Under Anthropic’s commercial terms, your inputs and outputs are not used to train Anthropic’s models by default, and Anthropic applies short operational retention. We may use additional or alternative AI providers in future and will keep this Policy updated.
3.3 International transfer. Our AI provider may process this data outside the EEA (including in the United States). Where that happens, the transfer is protected by appropriate safeguards — Standard Contractual Clauses and/or a recognised adequacy mechanism — under a data-processing agreement.
3.4 AI marking is formative. AI-generated marks and feedback are study aids, not authoritative assessments, and do not produce legal or similarly significant effects. You can flag any AI mark, give your own view and ask us to review it (see also our Terms, clause 4).
3.5 Please don’t put other people’s data into the AI tools. Asya is for your studies. Do not enter other people’s personal data or confidential information.
We do not sell your personal data. We share it only with service providers (“processors”) who help us run the Service, under contracts that require them to protect it:
| Provider | Purpose | Location / transfer safeguard |
|---|---|---|
| Vercel | Website/app hosting | EU/US — SCCs where applicable |
| Supabase | Database and authentication (account, learning data) | EU region (Germany/Ireland) |
| Anthropic | Asya and AI marking | US — SCCs / DPA; not used for training |
| Stripe | Payment processing | EU/US — SCCs; PCI-DSS certified |
| Resend | Transactional and account emails | US — SCCs |
| Tilda | Marketing website and contact forms | Processes data submitted via rystudies.com forms |
| Google (Analytics & Ads — when enabled) | Website analytics and advertising, only with your cookie consent | US — SCCs; Google Consent Mode v2 |
We may also disclose data where required by law, to enforce our Terms, to prevent fraud or harm, or in connection with a business transfer.
Your core account and learning data are stored in the EEA (Supabase EU region). Some processors are based outside the EEA (for example in the US). Where personal data is transferred outside the EEA, we rely on Standard Contractual Clauses, recognised adequacy decisions (such as the EU–US Data Privacy Framework where a provider is certified), and additional safeguards as appropriate. You can ask us for more detail at info@rystudies.com.
Under the GDPR you have the right to: access your data; rectify inaccurate data; erase your data (“right to be forgotten”); restrict or object to processing; data portability; and to withdraw consent at any time (for marketing or cookies) without affecting prior processing.
To exercise any right, email info@rystudies.com. We will respond within one month. As noted in §6, after an erasure request we keep only your email address, for 12 months, to prevent abuse.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or your local supervisory authority.
We use appropriate technical and organisational measures to protect your data, including encryption in transit, hashed passwords, access controls and EU-based storage of core data. No system is completely secure; if a data breach affects your rights, we will notify you and the supervisory authority where the law requires.
The Service is for users aged 16 and over and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.
We may update this Policy. If changes are material, we will notify you (for example by email or a notice on the Service). The “Last updated” date shows the current version.
RY Studies — a trade name of Iana Golovanova · KvK 42080594 · VAT NL005484505B49 · De Peppels 28, 1402 KV Bussum, the Netherlands · info@rystudies.com