Privacy Policy

What we collect

• Account data — your email address, and a display name if you set one. Passwords are handled by our authentication provider (Supabase) and we never see them in plain text.
• Content you create — flashcards, subjects, notes, and any images or files you upload, plus your review ratings, quiz answers, and the scheduling state derived from them.
• Basic technical data — standard server logs (IP address, timestamps, error traces) needed to run and secure the Service.

We do not use third-party advertising or analytics trackers, and we do not sell your data.

Why we use it

To provide the Service: store and display your cards, schedule reviews, generate quizzes, and keep your account secure. Our legal basis is performance of the contract with you (these Terms) and our legitimate interest in operating a reliable service.

Who it's shared with

• Supabase — our database, authentication, and file storage provider. Your account and content are stored there.
• Google (Gemini) and xAI (Grok) — when you use an AI feature, the relevant text (and, for image imports, the images) is sent to one of these providers to produce the result. This only happens when you trigger the feature. Their handling of that data is governed by their own policies.
• Hosting / infrastructure providers that run the application servers.
• Razorpay, our payment processor, handles billing details when you subscribe to a paid plan. We will not store full card numbers ourselves.

We may also disclose data if required by law or to protect the rights and safety of users.

Retention

We keep your content for as long as your account is active. Server logs are kept for a limited period and then rotated out.

Your rights

• Export — download everything in your account as a JSON file at any time, from Profile → Your data.
• Correction — edit your name, email, and any of your content directly in the app.
• Deletion — you can request full deletion of your account and its data. Deleting your account removes your subjects, flashcards, review history, and quiz data; backups are purged on their normal cycle. (A self-serve delete button is on the way; until then, email choticopy33@gmail.com and we will action it.)

Depending on where you live you may also have rights to object to or restrict processing, or to lodge a complaint with a data protection authority.

Security

Every table is protected by row-level security keyed to your user ID, so one account cannot read another’s data. Traffic is encrypted in transit. No system is perfectly secure, but we aim to follow sensible practice.

Children

The Service is not intended for children under 16. We do not knowingly collect data from them.

Changes and contact

We will post updates here and, for material changes, ask you to re-accept at sign-in. For privacy questions or a deletion request, email choticopy33@gmail.com.