Privacy Policy for Raf

Last Updated: March 4, 2026

1. Introduction

Welcome to Raf (the "App"), operated by Enrich Agency Ltd ("we," "us," or "our").

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Raf mobile application, website, and related services (collectively referred to as the "Service").

By using Raf, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

When you register for an account we collect:

  • Name
  • Email address
  • Password (securely encrypted)

If you use third-party login providers such as Google, we may receive limited profile data including your name and email.

Library and User Content

Information you store in Raf including:

  • Book titles
  • Authors
  • Categories
  • Shelves and location information
  • Notes and reading progress
  • Uploaded images such as book covers

This information is considered user-generated content and remains under your control.

Transaction Data

If you purchase subscriptions or AI scan credits:

  • Payment processing is handled securely by Stripe
  • We do not store full credit card numbers
  • We may store billing status and transaction identifiers

Device and Technical Data

We may automatically collect technical information including:

  • IP address
  • Device type
  • Operating system
  • Browser type
  • App version
  • Crash logs and performance data

This information helps us improve reliability and security.

Analytics Data

We may use analytics tools to understand how the Service is used, including:

  • Feature usage
  • App performance
  • Error reports

This data is aggregated and used only to improve the Service.

3. How We Use Your Information

We use collected information to:

  • Create and manage user accounts
  • Provide Raf’s digital library features
  • Enable the AI book scanning system
  • Process purchases and manage credits
  • Improve app functionality and performance
  • Provide customer support
  • Detect fraud, abuse, or security threats
  • Send important service notifications

We do not sell user personal data.

4. AI Processing

Raf includes AI-powered features that extract information from book covers or text.

Images or text submitted to the AI scanning feature may be processed through external AI APIs.

These providers process the data only to complete the request and are not permitted to use it for unrelated purposes.

Users should review AI-generated results for accuracy.

5. Third Party Services

We may share necessary data with trusted service providers including:

  • Supabase: Database hosting and authentication
  • Stripe: Secure payment processing
  • AI Processing Providers (such as Google Gemini): Book data extraction from images

These providers process data solely to perform services on our behalf.

6. Data Storage and Security

We implement reasonable technical and organizational measures to protect user data including:

  • encrypted connections (HTTPS)
  • secure database access controls
  • authentication protection
  • monitoring for unauthorized access

However, no system can guarantee absolute security.

7. Data Retention

We retain personal information only for as long as necessary to provide the Service or comply with legal obligations.

User library data remains stored while the account is active.

If an account is deleted, personal data will be removed or anonymized within a reasonable time unless retention is required by law.

8. Your Data Protection Rights (GDPR)

Users located in the UK, EU, or other applicable jurisdictions have rights including:

  • Right to access personal data
  • Right to correct inaccurate data
  • Right to delete personal data
  • Right to restrict processing
  • Right to data portability
  • Right to object to certain processing activities

Requests can be submitted using the contact details below.

9. Children's Privacy

Raf is not directed at children under the age of 13.

We do not knowingly collect personal information from children. If we become aware that such data has been collected, we will remove it promptly.

10. International Data Transfers

Your information may be stored or processed in countries outside your jurisdiction depending on our infrastructure providers.

Where required, we ensure appropriate safeguards are in place.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted within the App or website with an updated revision date.

Continued use of the Service constitutes acceptance of the updated policy.

12. Contact Information

Company: Enrich Agency Ltd
Email: salam@raflib.com
Address: Unit C5, Phoenix Estate, Rosslyn Crescent, Harrow, England, HA1 2SP