Privacy Policy

At EduCard AI, your privacy matters to us. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using our platform you agree to the practices described below.

1. Data We Collect

We collect the minimum amount of data necessary to provide and improve our service. This includes:

• Account information — your name, email address, and profile details provided during sign-up.
• Uploaded content — PDFs, documents, and YouTube URLs you submit for flashcard and summary generation.
• Generated content — flashcard decks, summaries, and audio files created by our AI on your behalf.
• Usage data — pages visited, features used, timestamps, and general interaction patterns that help us improve the product.
• Device & browser data — IP address, browser type, operating system, and screen resolution collected automatically through standard web technologies.

2. How We Use Your Data

We use the data we collect to:

• Provide, operate, and maintain the EduCard AI platform.
• Process your uploaded content through our AI pipeline to generate flashcards, summaries, and audio.
• Personalize your experience and remember your preferences.
• Analyze usage trends to improve features, performance, and reliability.
• Communicate important updates, security alerts, and support responses.
• Enforce our Terms of Service and protect against misuse.

3. Third-Party Services

To deliver our core functionality, EduCard AI integrates with the following third-party services. Data shared with these providers is limited to what is strictly necessary for the feature to work.

We may also use analytics, payment processing, and infrastructure providers in the normal course of operating the service. We do not sell your personal data to any third party.

4. Data Storage

All user data — including account information, uploaded content, and generated materials — is stored securely in Supabase, our hosted PostgreSQL database and storage provider. Supabase enforces encryption at rest and in transit, and its infrastructure runs on trusted cloud platforms with industry-standard security certifications.

We retain your data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

5. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — request that we delete your personal data and account.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to certain types of processing, such as direct marketing.

To exercise any of these rights, please contact us using the details below. We will respond to your request within 30 days.

6. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please reach out to us at hello@educardai.com. We take every inquiry seriously and will do our best to address your concerns promptly.