Privacy Policy

Cookies and Local Storage

We use cookies and browser local storage to enhance your experience and provide essential functionality:

• Essential cookies: Required for app functionality including user authentication, session management, and security
• Functional cookies: Remember your preferences such as sidebar state and user interface settings
• Analytics cookies: Help us understand how you use our service through Google Analytics (optional, can be disabled)

You can control your cookie preferences through our consent banner or in your account settings. Essential cookies cannot be disabled as they are necessary for the application to function properly.

Analytics and Usage Tracking

When you consent to analytics cookies, we collect:

• Page views and navigation: Which pages you visit and how you navigate through the app
• Feature usage: Which features you use and how often
• Performance data: Page load times and technical performance metrics
• Device information: Browser type, screen size, and operating system (anonymized)

This data is processed by Google Analytics and Vercel Analytics. No personal information is included in analytics data, and you can opt out at any time through your settings.

Local Storage Usage

We store the following information in your browser's local storage:

• Cookie consent preferences: Your choices regarding analytics and functional cookies
• Subscription information: Temporary data during payment processing
• User interface preferences: Settings that improve your user experience

Local storage data remains on your device and is not transmitted to our servers unless explicitly needed for functionality.

Document Processing and File Handling

When you upload documents to generate flashcards, we process them as follows:

• Supported formats: PDF, Microsoft Word (.docx/.doc), PowerPoint (.pptx/.ppt), plain text (.txt), and Markdown (.md) files
• File size limit: Maximum 15MB per file
• Temporary storage: Files are temporarily uploaded to Vercel Blob storage for processing
• AI processing: Content is extracted and processed using Google Gemini AI to generate flashcards
• Immediate deletion: All uploaded files are automatically deleted from our servers immediately after processing completion

We do not retain copies of your uploaded documents beyond the processing session. Only the generated flashcard content (questions and answers) is stored in your account.

AI Service Integration

We use Google Gemini AI (specifically Gemini 2.0 Flash model) for flashcard generation and ElevenLabs (Flash v2.5 model) for text-to-speech functionality. Your content may be processed by these third-party AI services in accordance with their respective privacy policies and our data processing agreements.

Text-to-Speech and API Key Storage

Our text-to-speech functionality operates differently based on your subscription tier:

• PRO users: We process your flashcard text using our ElevenLabs API integration
• FREE/BASIC users: You may provide your own ElevenLabs API key, which we encrypt using AES-256-CBC encryption and store securely in Firebase Firestore

User-provided API keys are never stored in plain text and are only decrypted server-side when needed for TTS generation.

Audio Caching and Performance

Generated audio content is cached in Vercel Blob storage using deterministic cache keys based on text content and voice settings. This caching improves performance and reduces API costs. Cached audio files are automatically cleaned up after 30 days. We do not record or store your voice or any audio input from your device.

Export Functionality

When you export flashcards as PDF or JSON files, this processing occurs on our servers using Puppeteer/Chromium for PDF generation. The exported files are generated on-demand and are not permanently stored. JSON exports are generated client-side in your browser.

Third-Party Service Integrations

We integrate with the following third-party services to provide our functionality:

• Google Gemini AI: Document processing and flashcard generation
• ElevenLabs: Text-to-speech audio generation
• Firebase (Google): User authentication, database storage, and user management
• Vercel Blob: Temporary file storage and audio caching
• Paystack: Payment processing for subscriptions
• Google Analytics: Website usage analytics (when enabled)

Data shared with these services is processed in accordance with their respective privacy policies and our data processing agreements.

International Data Transfers

Some of our third-party service providers are located outside South Africa. When we transfer your data internationally, we ensure appropriate safeguards are in place:

• Google Services (Gemini AI, Analytics, Firebase): Data may be processed in the United States and other countries where Google operates, protected by Google's privacy commitments and Standard Contractual Clauses (SCCs)
• ElevenLabs: Text-to-speech processing may occur in the United States, governed by ElevenLabs' privacy policy and data protection agreements
• Vercel (Hosting & Storage): Data is primarily processed in the United States with appropriate technical and organizational measures
• Paystack: Payment processing occurs within Africa and complies with applicable data protection regulations

All international transfers are conducted in compliance with applicable data protection laws, including the Protection of Personal Information Act (POPIA) and GDPR where applicable. We ensure that adequate safeguards are in place through Standard Contractual Clauses, adequacy decisions, or other approved transfer mechanisms.