Privacy Policy

Repeto is an AI flashcard app with FSRS spaced repetition, available as a web app at repeto.ai and as an iOS app. It is operated by the Repeto team (“we”). This policy explains what we collect, why, and what happens to it. The short version: we collect what the product needs to work, we don’t sell it, and you can erase all of it at any time.

What we collect

• Account data. Signing in is passwordless: we verify your email address each time, so there is no password for us to store. On iOS you can also use Sign in with Apple, or skip registration entirely — the app creates an anonymous device account with no personal information attached. Your email and display name are both optional; adding an email later links the same account.
• Study data. Your decks, notes, cards, review history, and FSRS scheduling state. This is the core of the product and is stored on our servers so it can sync across your devices.
• Content you submit for generation. The terms, text, photos, and audio recordings you provide to generate flashcards. Uploads are stored so we can process them and attach the results to your deck.
• Usage counters. How much of your plan’s allowance (for example AI generations) you have used, so we can enforce plan limits.
• Product and acquisition analytics. Page paths, calls to action, sign-up steps, campaign parameters, the referring site’s hostname, and basic browser/app context. We do not send study content, files, form input, email addresses, names, full referring URLs, or session recordings to analytics. Anonymous activity is linked to an opaque Repeto account ID only after a successful sign-in.
• Billing state. Your subscription status, reported to us by Polar (web purchases) or by Apple via RevenueCat (iOS purchases). We never see your card number or full payment details.

How we use it

To run the product: store and sync your decks, generate the cards you ask for, schedule your reviews, enforce plan limits, and answer your support emails, understand which educational pages lead to useful sign-ups, and test product improvements. We process your data to provide and improve the service and to keep it running safely. Specifically:

• We do not sell your personal data.
• We do not show third-party ads.
• Your decks stay private unless you explicitly publish them to the marketplace.

Third parties

• AI model providers. When you generate flashcards, the content you submitted (terms, text, photos, audio) is sent to third-party large-language-model providers to produce the cards; audio recordings are transcribed first. This content is shared only to fulfil your request.
• Pexels. Optional card images are stock photos from pexels.com. We store only the photo’s URL — the image itself loads directly from Pexels’ servers, so when a card shows a photo your device makes a standard image request to Pexels (including your IP address), governed by the Pexels privacy policy. We never copy or redistribute the photos.
• Polar. Handles web subscription checkout and billing. Polar processes your payment; we receive your subscription status.
• Apple and RevenueCat. iOS subscriptions are Apple in-app purchases. Apple processes the payment; RevenueCat validates the purchase and tells us your subscription status.
• PostHog. Processes the limited product and acquisition events described above on our behalf. Automatic click capture, session replay, heatmaps, form/input capture, and IP-based location enrichment are disabled.
• Hosting. Like any online service, Repeto runs on rented server infrastructure; your synced data is stored in our database on those servers.

Notifications and cookies

Review reminders are local notifications scheduled on your device — we don’t operate a push notification server, and reminder scheduling doesn’t leave your device. We use cookies and local storage to keep you signed in, remember preferences like your theme, and retain first/last campaign attribution. Our analytics identifier is a first-party cookie shared between repeto.ai and its app subdomain so a landing-page visit can be connected to a later sign-up. We respect browser Do Not Track and don’t use third-party advertising cookies.

Retention and deletion

Your data is kept for as long as your account exists. Deleting your account — in the app under Settings → Delete account, or by emailing us — permanently erases everything tied to it from our servers: your account, decks, notes, cards, review history, uploads, and usage counters. This applies to anonymous device accounts too. To request deletion of analytics associated with your account, email us at the address below.

Your rights

If you’re in the EEA, UK, or another region with data protection law like the GDPR, you have the right to access, correct, export, delete, and object to the processing of your personal data. Most of these are built into the product: you can edit your content in the app, export your decks as Anki .apkg files, and delete your account yourself. For anything else, email us — and you can always lodge a complaint with your local data protection authority.

Contact

Questions about this policy: support@repeto.ai. If we make material changes we’ll update this page and the date above.