Privacy Policy

Repeto provides AI flashcards and FSRS spaced repetition through its web and mobile apps. It is operated by MATSVEI SHULMAN, Individual Entrepreneur, registered in Armenia (“we”). This policy explains what we collect, why, who processes it, and how to request account and data deletion.

What we collect

• Account data. Email and password sign-in sends your credentials to Repeto. We store a password hash rather than your plaintext password. When you use Apple or Google sign-in, we receive an account identifier and the email or profile details provided by that service. Available sign-in methods depend on the app. A device account lets you use the mobile app without providing an email or name; it still sends an installation identifier to our servers and has a Repeto account ID. Linking a sign-in method later keeps that account and its study data.
• Study data. Your decks, notes, cards, review history, FSRS scheduling state, and study preferences such as your scheduler time zone. These are stored on our servers so they can sync across your devices.
• Content you submit for generation. The terms, text, instructions, links, documents, photos, audio recordings, and videos you choose to submit to generate flashcards. Uploads are stored for processing; generated cards and attached media become part of your study data. Anki imports also upload the file and its card and media content.
• Usage counters. How much of your plan’s allowance (for example AI generations) you have used, so we can enforce plan limits.
• Website and web app analytics. Page paths, calls to action, sign-up steps, campaign parameters, the referring site’s hostname, and basic browser context. We do not send study content, files, form input, email addresses, names, full referring URLs, or session recordings to analytics. Activity recorded with a browser identifier is linked to an opaque Repeto account ID only after a successful sign-in.
• App analytics. The apps record when they are opened, the screens you open and your onboarding answers (choices such as your subject, goal and how often you study, never text you type). Once a day our servers also count, from your study data, how many notes and cards you created, imported, edited and deleted, how many reviews you did and how you rated them, your study time, and the AI generations you ran and what they cost us. These are numbers only, never card content, and are linked to your Repeto account ID.
• Crash and error reports. When the iPhone, iPad, Mac or Android app crashes, stops responding, or a request to our servers fails, it sends a report: the app version, device model and operating system, where in the code the problem happened, recent app events such as screen changes and the addresses of recent network requests (without their query text or headers), and your Repeto account ID. Reports never include your IP address or card content.
• Subscription screen activity. Which subscription screen variant you see, plan selections, purchase attempts and cancellations, and verified purchase outcomes. These events are linked to your Repeto account ID so we can compare product improvements. They do not include your study content or payment card details.
• Billing state. Your subscription status, reported to us by Polar (web purchases), or by Apple and Google Play via RevenueCat (iOS and Android purchases). We do not receive your card number or full payment details from these billing providers.

How we use it

To run the product: store and sync your decks, generate the cards you ask for, schedule your reviews, enforce plan limits, and answer your support emails, understand which educational pages lead to useful sign-ups, and test product improvements. We process your data to provide and improve the service and to keep it running safely. Specifically:

• We do not sell your personal data.
• We do not show third-party ads.
• Your decks stay private unless you explicitly publish them to the marketplace.

Third parties

• AI providers. Card generation uses OpenAI. Material processing, research, and automated Marketplace moderation use OpenRouter and the model providers it routes to, currently Google. Groq handles audio transcription. These requests can include your submitted material, deck instructions, or the deck content you publish. Optional pronunciation audio uses ElevenLabs, which receives the text to speak and language settings. Provider retention depends on the service and its configured data controls.
• Image sources. Optional image search sends your search terms to Pexels or Wikipedia. Image previews can load from the source’s servers, which receive the network request, including your IP address. Selected Pexels images can be copied into your deck’s stored media for review and export.
• Sign-in and email services. Apple or Google processes authentication when you choose its sign-in method. Email verification and password-reset messages use Resend, which receives the recipient address and message content.
• Polar. Handles web subscription checkout and billing. Polar processes your payment; we receive your subscription status.
• Apple, Google Play and RevenueCat. Apple or Google Play processes in-app subscription payments. RevenueCat receives purchase records and your Repeto account ID, validates purchases, manages subscription status, and provides subscription analytics.
• PostHog. Processes the product, app and acquisition analytics described above, in the EU. Automatic click capture, session replay, heatmaps, form/input capture, and IP-based location enrichment are disabled.
• Sentry. Receives the crash and error reports described above, in the EU, so we can find and fix problems.
• Hosting. Like any online service, Repeto runs on rented server infrastructure; your synced data is stored in our database on those servers.

Notifications and cookies

Review reminders are local notifications scheduled on your device — we don’t operate a push notification server, and reminder scheduling doesn’t leave your device. We use cookies and local storage to keep you signed in, remember preferences like your theme, and retain first/last campaign attribution. Our analytics identifier is a first-party cookie shared between repeto.ai and its app subdomain so a landing-page visit can be connected to a later sign-up. We respect browser Do Not Track and don’t use third-party advertising cookies.

Data security

Connections to the Repeto API use HTTPS. Password sign-in stores a password hash, and the Android app protects stored sign-in tokens with Android Keystore encryption. Study content is processed on our servers and, for AI requests, by the providers involved in that request; it is not end-to-end encrypted.

Retention and deletion

Repeto stores your account and synced study data while you use the service. In the app, open Settings → Delete account (or Delete all data for a device account). You can also request deletion by email without reinstalling the app. Export any decks you want to keep first.

Account deletion removes your account and its private study records, including decks, notes, cards, review history, and usage counters, from the active database. Stored uploads and media are scheduled for separate cleanup. This also applies to device accounts.

Published Marketplace decks are unlisted and their ownership link is removed when you delete your account. Versions already acquired by other people remain available to them. Deletion does not remove copies that other people have already saved or exported.

Repeto caches eligible vocabulary and context-free concept requests, including their terms and generated results, to avoid repeated AI processing. Matching requests from different accounts can reuse these results. Supplied source context, question-and-answer extraction and cloze generation bypass this shared cache. Instructions and generation settings distinguish cache entries. The account-deletion process does not clear that separate cache or erase operational backups, service logs, or records held by external providers. Authentication records and storage cleanup records also have separate cleanup processes. For requests concerning analytics, backups, logs, cached content, or provider-held records, email support@repeto.ai. Deleting a Repeto account does not cancel a subscription held with Apple or another billing provider; manage it with that provider.

Your rights

If you’re in the EEA, UK, or another region with data protection law like the GDPR, you have the right to access, correct, export, delete, and object to the processing of your personal data. Most of these are built into the product: you can edit your content in the app, export your decks as Anki .apkg files, and delete your account yourself. For anything else, email us — and you can always lodge a complaint with your local data protection authority.

Contact

Questions about this policy: support@repeto.ai. If we make material changes we’ll update this page and the date above.