Privacy Policy

Repeto provides AI flashcards and FSRS spaced repetition through its web and mobile apps. It is operated by MATSVEI SHULMAN, Individual Entrepreneur, registered in Armenia (“we”). This policy explains what we collect, why, who processes it, and how to request account and data deletion.

What we collect

• Account data. Email and password sign-in sends your credentials to Repeto. We store a password hash rather than your plaintext password. When you use Apple or Google sign-in, we receive an account identifier and the email or profile details provided by that service. Available sign-in methods depend on the app. A device account lets you use the mobile app without providing an email or name; it still sends an installation identifier to our servers and has a Repeto account ID. Linking a sign-in method later keeps that account and its study data.
• Study data. Your decks, notes, cards, review history, FSRS scheduling state, and study preferences such as your scheduler time zone. These are stored on our servers so they can sync across your devices.
• Content you submit for generation. The terms, text, instructions, links, documents, photos, audio recordings, and videos you choose to submit to generate flashcards. Uploads are stored for processing; generated cards and attached media become part of your study data. Anki imports also upload the file and its card and media content.
• Usage counters. How much of your plan’s allowance (for example AI generations) you have used, so we can enforce plan limits.
• Website and web app analytics. Page paths, calls to action, sign-up steps, campaign parameters, the referring site’s hostname, and basic browser context. We do not send study content, files, form input, email addresses, names, full referring URLs, or session recordings to analytics. Activity recorded with a browser identifier is linked to an opaque Repeto account ID only after a successful sign-in.
• Billing state. Your subscription status, reported to us by Polar (web purchases) or by Apple via RevenueCat (iOS purchases). Android subscription purchases are currently unavailable. We do not receive your card number or full payment details from these billing providers.

How we use it

To run the product: store and sync your decks, generate the cards you ask for, schedule your reviews, enforce plan limits, and answer your support emails, understand which educational pages lead to useful sign-ups, and test product improvements. We process your data to provide and improve the service and to keep it running safely. Specifically:

• We do not sell your personal data.
• We do not show third-party ads.
• Your decks stay private unless you explicitly publish them to the marketplace.

Third parties

• AI providers. Card generation, material processing, research, and automated Marketplace moderation use OpenRouter and the model providers it routes to, currently Google. Groq handles audio transcription. These requests can include your submitted material, deck instructions, or the deck content you publish. Optional pronunciation audio uses ElevenLabs, which receives the text to speak and language settings. Provider retention depends on the service and its configured data controls.
• Image sources. Optional image search sends your search terms to Pexels or Wikipedia. Image previews can load from the source’s servers, which receive the network request, including your IP address. Selected Pexels images can be copied into your deck’s stored media for review and export.
• Sign-in and email services. Apple or Google processes authentication when you choose its sign-in method. Email verification and password-reset messages use Resend, which receives the recipient address and message content.
• Polar. Handles web subscription checkout and billing. Polar processes your payment; we receive your subscription status.
• Apple and RevenueCat. iOS subscriptions are Apple in-app purchases. Apple processes the payment; RevenueCat validates the purchase and tells us your subscription status.
• PostHog. Processes the limited product and acquisition events described above. Automatic click capture, session replay, heatmaps, form/input capture, and IP-based location enrichment are disabled.
• Hosting. Like any online service, Repeto runs on rented server infrastructure; your synced data is stored in our database on those servers.

Notifications and cookies

Review reminders are local notifications scheduled on your device — we don’t operate a push notification server, and reminder scheduling doesn’t leave your device. We use cookies and local storage to keep you signed in, remember preferences like your theme, and retain first/last campaign attribution. Our analytics identifier is a first-party cookie shared between repeto.ai and its app subdomain so a landing-page visit can be connected to a later sign-up. We respect browser Do Not Track and don’t use third-party advertising cookies.

Data security

Connections to the Repeto API use HTTPS. Password sign-in stores a password hash, and the Android app protects stored sign-in tokens with Android Keystore encryption. Study content is processed on our servers and, for AI requests, by the providers involved in that request; it is not end-to-end encrypted.

Retention and deletion

Repeto stores your account and synced study data while you use the service. In the app, open Settings → Delete account (or Delete all data for a device account). You can also request deletion by email without reinstalling the app. Export any decks you want to keep first.

Account deletion removes your account and its private study records, including decks, notes, cards, review history, and usage counters, from the active database. Stored uploads and media are scheduled for separate cleanup. This also applies to device accounts.

Published Marketplace decks are unlisted and their ownership link is removed when you delete your account. Versions already acquired by other people remain available to them. Deletion does not remove copies that other people have already saved or exported.

Shared AI generation caching is currently disabled. The account-deletion process does not clear that separate cache or erase operational backups, service logs, or records held by external providers. Authentication records and storage cleanup records also have separate cleanup processes. For requests concerning analytics, backups, logs, cached content, or provider-held records, email support@repeto.ai. Deleting a Repeto account does not cancel a subscription held with Apple or another billing provider; manage it with that provider.

Your rights

If you’re in the EEA, UK, or another region with data protection law like the GDPR, you have the right to access, correct, export, delete, and object to the processing of your personal data. Most of these are built into the product: you can edit your content in the app, export your decks as Anki .apkg files, and delete your account yourself. For anything else, email us — and you can always lodge a complaint with your local data protection authority.

Contact

Questions about this policy: support@repeto.ai. If we make material changes we’ll update this page and the date above.