Privacy Policy

Last updated: May 2026

What we collect

We collect your email address and password (hashed) when you create an account. We store the flashcard decks and cards you create, your review history, and AI generation logs. If you enable push notifications, we store your browser push subscription endpoint.

Why we collect it

Your email identifies your account. Your flashcard data is the core service. Review history powers the spaced-repetition scheduler. AI generation logs enforce monthly usage limits. Push endpoints deliver due-card reminders.

Third-party services

We use Supabase for authentication and database hosting, Stripe for payment processing (Pro subscribers only), and OpenRouter to run AI card generation. Each service has its own privacy policy. We do not sell your data.

Your rights

You may export all your data or permanently delete your account at any time from Settings → Data & Privacy. Deletion removes your data from our systems within 24 hours.

Contact

Questions? Email dingeagle@gmail.com.