Privacy Policy
1. Information We Collect
We only collect the minimum amount of information necessary to provide you with the Spaced Repetition Online service. When you authenticate using Google, we collect:
- Your email address
- Your basic profile information (such as your display name and avatar)
We also store the study materials, flashcard sets, custom intervals, topics, and notes that you actively create or import to be scheduled for spaced repetition review.
2. Database Architecture, Row-Level Isolation, and Security
Your privacy and trust are paramount. We employ a modern multi-layer security architecture:
- Row-Level Security (RLS): Every database table enforces PostgreSQL Row-Level Security policies. Client requests can strictly only access records linked to the authenticated user's ID. No user can ever query or view another user's private notes, flashcards, or study metrics.
- Encryption at Rest & in Transit: All data is encrypted in transit using TLS 1.3 and at rest using industry-standard AES-256 cloud infrastructure.
- Administrative Access Governance: Consistent with standard cloud software operations, designated system operators maintain administrative database access for infrastructure maintenance, schema migrations, performance tuning, automated backups, and direct customer support upon request. System operators are bound by strict confidentiality and never inspect private notes or study content without your explicit request or permission.
- No AI Model Training on Your Data: Your private notes, flashcards, and uploaded study materials are never used to train public AI foundation models. AI processing is performed strictly on-demand for user-initiated operations (such as generating flashcards or mock tests from your selected text).
3. How We Use Your Information
The information we collect is used exclusively for the following purposes:
- To create, authenticate, and secure your account
- To sync your learning materials across your devices seamlessly
- To calculate and schedule your FSRS/SM-2 spaced repetition review intervals
- To process user-requested AI study synthesis via dedicated edge workers
We do not sell, rent, monetize, or share your personal data or study materials with any third parties or advertising networks.
4. Data Ownership, Portability, and Deletion
You own 100% of your data. SRO is built with a zero platform lock-in philosophy:
- Full Export: You can export your flashcard decks and sets at any time into standard Anki (.apkg) packages or structured JSON.
- Right to Erasure: You can delete any individual notes, sets, or entire folders at any time, or request complete account and data deletion. When deleted, your records are permanently purged from active databases.
5. Cookies and Session Management
We use essential authentication cookies and local storage tokens solely to maintain your active login session and offline review queue. We do not use third-party tracking cookies or behavioral advertising trackers.
6. Changes to This Policy
We may update our Privacy Policy from time to time to reflect new features or security enhancements. If we make significant changes, we will update the date at the top of this policy and notify users through the application.
7. Contact Us
If you have any questions or concerns about this Privacy Policy, your data privacy, or how your materials are stored, please reach out to the developer directly on X (Twitter): @lowkyShadow.