Privacy Policy

This page explains what data repeat.cards collects when you use the service, why we collect it, who else sees it, and what you can do about it. It coversthe website and the Android app, which share one account and one database. If anything is unclear, write to us at [email protected].

repeat.cards is run by Ivan Bezdenezhnykh, an individual established in Portugal, who is the controller of the personal data described here. If you have a question about anything on this page, or want to exercise one of the rights below, write to [email protected].

What we collect

Account information

When you create an account, we store:

• Your email address (required to sign in and to send you essential emails).
• A hashed version of your password if you signed up with a password — we never store the password itself in readable form.
• If you signed up with Google Sign-In, the first and last name Google sends us, used to greet you in the app and nothing else.
• If you signed up with Sign in with Apple, the identifier Apple gives this app for you, so we recognise you the next time, and the name Apple shares on your first sign-in, if you let it. If you chose to hide your email, the address we hold is the one Apple made up for us, which forwards to yours.

Settings and preferences

Things you choose in your profile and settings — the languages you are learning and learning from, your timezone, your daily new-card and review limits, your preferred AI model and voice, your reminder schedule. These are stored alongside your account.

Your flashcards and learning data

Whatever you create in the app — what you type in, what you upload, what the AI generates for you at your request, and the record of your training — is stored in your account and kept until you delete it or close the account, apart from the exceptions under How long we keep it.

AI keys and AI usage

If you set your own AI provider key, we store it encrypted, never in readable form, and use it only to call that provider. Removing it from your settings deletes it. Setting a key is optional; without one, AI features run on our own provider accounts. Either way, the text on your card is sent to the AI provider when you use one of those features.

Every time the app calls an AI provider for you, we write down statistics about the call: the date, the feature, the provider and model, how much was sent, how long it took, whether it succeeded and what it cost. We do not store the text of what is sent to the AI, or what comes back. These records are tied to your account and deleted after 30 days.

The word you asked about, and what a provider makes from it — the audio file of it spoken, the picture of what it means — are kept in a store shared with other accounts. It carries no name and no address, and is not deleted when an account is closed. A picture or an audio file you upload yourself is never part of it.

Email verification and password resets

When you register, we send a verification email, and another if you ask for a fresh link. We send one if you ask to reset your password, and one if an API token is created on your account. All of them go through a transactional email provider.

Usage analytics we keep ourselves

Our own servers record how you use the service, tied to your account — how you signed up and which page or site brought you, which parts of the app you use and how often, when you were last active, and from which client. We use this to see which features are used, to find errors, and to size the service; we do not use it to build a profile of you or share it with anyone. We keep it for as long as your account exists, and it goes when the account does.

Your progress through the product

Separately from the above, we record the points you pass on the way from registering to learning regularly: signing up and which app you signed up from, being asked to accept these terms and accepting them, finishing or leaving the guided first session and which step you left it on, the first time you make or change something yourself, the first time you hold ten cards, each day you answer at least one card, and running out of the free AI allowance. Alongside them we keep a count of how many cards you created in each week since you signed up.

These hold a name for what happened, when it happened and a short note such as which step you stopped on. They hold nothing you typed, and no part of any card. We use them to see where the product loses people and whether a change made it better. We keep them for as long as your account exists, and closing your account deletes them.

Analytics

We use one analytics provider, hosted in the European Union. It stores nothing on your device at all — no cookie, no identifier kept between visits.

Before you sign in, visits are counted without identifying you. Once you are signed in, your usage is recorded against your email address. The provider also sees your IP address and works out an approximate location from it, and it records session replays — a recording of how the app was used.

We do this on the basis of our legitimate interest in knowing whether the service works, which is Article 6(1)(f) of the GDPR. We have weighed that interest against your privacy and written down how; ask us and we will send you what we wrote. You can object at any time, and you do not need an account or a reason:

Cookies and stored tokens

Signing in stores an access token and a refresh token in your browser, and a cookie recording only that you are signed in — it carries no name, no address and no credential. If you object to analytics, that is kept on your device too.

That is everything. All of it is needed either to run the service or to honour a choice you made, so none of it asks your consent. We set no analytics cookie, no advertising cookie and no third-party tracking pixel.

Why we collect it

We use your data only to:

• Provide the flashcard service — store your decks, schedule your reviews, train you
• Generate AI content when you request it
• Send you the messages the service itself has to send
• Understand and improve the product
• Detect abuse and keep the service available for everyone
• Send you email about the product — what is new, what we have written, surveys, and what anything costs if a part of it is ever paid for — only if you have told us we may

Only the last of those asks anything of you. We send that kind of email only to people who have said yes to it, and you can change your mind at any time — stopping it is as easy as starting it was, and it changes nothing else about your account.

Email we send you

There are two kinds, and what you decide about one never affects the other:

We send no email about the product to an address that has not been confirmed, whatever permission has been given for it.

We do not sell your data to anyone. We do not use your flashcard content to train any AI model. We do not share your account information with advertisers.

Who else sees your data

These providers may process some of your data on our behalf:

• AI providers — when you use an AI feature, the text on the card is sent to whichever provider answers for it, including the one that turns it into an audio file. Which provider that is depends on the key you set, or on ours if you set none; your settings name them, and each has its own privacy policy.
• An analytics provider — as described above.
• A bot-detection provider — the sign-up form carries a challenge that tells people apart from bots. Loading it lets that provider see your IP address and browser details.
• Email provider — to send the mail the service has to send (verification links, password resets, the notice that an API token was created).
• Operational alerts — we use an outside messaging service to notify ourselves when something on the service needs attention. Your email address can appear in those alerts.
• Hosting and storage providers — our servers, our database and the files in your account run on infrastructure operated for us.

We may also disclose data if required by law.

Paying for coins

Coins are bought through a store, and the store is the seller — Google Play for a purchase made in the Android app, the App Store for one made in the iPhone app, and our payment provider for one made on the website. They are not acting on our behalf when they take your payment. The sale is a contract between you and them, they decide what they need in order to take a card and charge the right tax, and they answer for that data themselves. Each has its own privacy policy, shown to you in the payment window before you pay.

Your card details never reach us. Neither does your billing address or your tax number. What your browser or the app hands to us is a reference to the payment; our server takes that reference to the store and the store tells us what the sale was.

What we then keep, against your account, is the store's record of the sale: the store's own identifiers for the transaction and for you as its customer, which step you bought, how many coins it was worth, the amount and tax you were charged and in what currency, and when. We use it to add the coins to your balance, to take them off again if the payment is refunded or charged back, and to answer you if you ask about a purchase. If you tell the store to refund you, it tells us, and we keep that too.

If you ask Apple to refund a purchase made in the iPhone app, we tell Apple how much of it you have used — the share of its coins already spent, that the coins reached your balance, and that every account is given some coins free to try the product with — and, following our refund policy, whether we think the refund should be granted. Apple asks for this to decide the refund, and we answer only that question, only about that purchase. The iPhone app says so beside the coins before you buy.

When you open the payment window on the website we pass the email address on your account to the store, so that you are not asked for it again. You can change it there; what you type is what the store bills, and we do not read it back.

Where your data lives

Everything in your account — the pictures and audio files included — is held by us, or by a provider storing it on our behalf.

When you use AI features, your card text travels to the AI provider's servers, which are outside the European Union. Its own privacy policy and data-processing terms apply to that flow.

How long we keep it

• Account and learning data — as long as your account exists. Closing it removes everything at once, apart from the items below and anything the law requires us to keep.
• An Anki file you upload for import — within a day. The cards you imported stay.
• Email logs — up to 90 days.
• The record of a coin purchase — kept after the account is closed, with the link to your account removed. What is left is the store's own record of a sale: its identifiers, what was charged and how many coins it was worth. We keep it because it is the record of money that actually moved, and because the store can still reverse that payment after you have gone.
• Our own usage records — deleted with your account.
• Your progress through the product, and the weekly counts of cards you created — kept for as long as the account exists, and deleted with it.
• Statistics about each AI call — 30 days.
• Daily AI cost totals — kept indefinitely, under an account number that no longer identifies anybody once the account is closed. Counts and amounts of money, nothing else.
• Shared AI library entries — kept indefinitely, under no name and no address; closing an account does not remove them.
• The record of a permission to email you — a one-way hash of your address and what you agreed to, kept 3 years after the account is deleted, so we can show a message we sent was one you had agreed to. It holds nothing else.
• The record that you accepted a version of the terms — a one-way hash of your address and which version. Kept for as long as what it permits: the library entries above outlive your account, and this is the record that we were allowed to keep them. It names no account.
• An address that asked us to stop — a one-way hash of the address and nothing else, kept indefinitely. It stays on a do-not-contact list through a deletion and a new sign-up, because otherwise closing an account and coming back would quietly start the messages over.
• Analytics events and session replays — the period set with our analytics provider.
• Backups — the service is backed up daily and the copies are rotated, so one can outlive your account for up to six months. Nothing is ever restored from a backup into the running service on its own.

Your rights

You have:

• The right to access — ask us what data we hold about you.
• The right to correction — fix anything that's wrong. Most fields you can correct yourself in your profile.
• The right to deletion — delete your account and everything in it from your profile settings, in the website and in the app alike. It is immediate and cannot be undone, apart from the items under How long we keep it that carry no name and no account.
• The right to data portability — get your data in a machine-readable format.
• The right to object — opt out of any processing based on our legitimate interests. For the analytics that is the control above, which works without an account and takes effect at once.
• The right to withdraw consent — for anything we do based on consent, which today means email about the product and nothing else.
• The right to lodge a complaint — with your local data protection authority.

To exercise any of these rights, email [email protected] from the address associated with your account. We'll respond within 30 days.

Children

repeat.cards is not for children under 13, and we do not knowingly collect anything from one. If we learn we have, we delete it.

Changes to this policy

If we change this policy in a material way, we'll update the “Last updated” date at the top and describe the change on this page. We do not currently have a way to email every registered user, so this page is where to look; if we build one, we will say so here. Smaller editorial changes (typos, clarifications) go in without notice.

Questions

Email [email protected]. We read every message.