Privacy Policy

1. Information We Collect

When you use Active Recalling, we collect information you provide directly, such as your name and email address when you sign in with Google OAuth. We also collect usage data including the content you create (folders, chapters, flashcards, quizzes, and mindmaps) and how you interact with the platform.

Account Information: Name, email address, and profile picture from your Google account.

User Content: Folders, chapters, uploaded documents, flashcards, quizzes, mindmaps, and other learning materials you create.

Usage Data: Information about how you use the service, including features accessed, session duration, and interaction patterns.

Payment Information: Subscription status and customer identifiers. All payment details (credit card numbers, billing addresses) are processed and stored exclusively by Dodo Payments, our Merchant of Record. We never store your payment card details.

2. How We Use Your Information

We use your information to provide and improve the Active Recalling service, personalize your experience, process subscriptions and payments, and communicate with you about your account and updates to our service.

3. Data Storage and Security

Your data is stored securely using Supabase infrastructure. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

4. Third-Party Services

We use third-party services including Google OAuth for authentication, Supabase for data storage, OpenAI for AI-powered content generation, and Dodo Payments as our Merchant of Record for payment processing. Dodo Payments handles all payment transactions, billing, and related financial data on our behalf. Each of these services has their own privacy policies governing how they handle your data.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, your personal data and all associated content will be removed within 30 days. We may retain certain data as required by law or for legitimate business purposes.

6. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place for such transfers, including standard contractual clauses and compliance with applicable data protection regulations.

7. Children's Privacy

Active Recalling is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete it promptly.

8. Your Rights

You have the right to access, correct, or delete your personal data. You can export your data or request account deletion by contacting us at [email protected].

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell your personal information. To exercise your CCPA rights, contact us at [email protected].

10. Contact

If you have questions about this Privacy Policy, contact us at [email protected].