Privacy Policy

1. Introduction

Revu ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use Revu, a spaced repetition learning platform.

TL;DR: Your study data is yours. We only process what is necessary to provide the service.

2. Information We Collect

2.1 Study Data

Revu stores your study data, including:

• Flashcard decks and cards (content, tags, metadata)
• Study history and review logs
• Scheduling state (intervals, difficulty, stability)
• User preferences and settings
• Attached media files

2.2 Account Information

When you create an account, we collect:

• Email address
• Display name (optional)
• Authentication tokens
• Plan/subscription status

2.3 AI Feature Usage (Optional)

When you use AI-powered features (deck generation, card rewriting), we process:

• Content you submit for AI processing (text, PDFs, notes)
• Generated flashcards and explanations
• Usage metadata (token counts, model used)

Important: AI processing is performed server-side via Supabase Edge Functions. We do not train models on your data or share it with third parties beyond our AI service provider (Anthropic Claude).

2.4 Analytics and Diagnostics

We do not collect analytics, telemetry, or crash reports. Revu does not phone home.

3. How We Use Your Information

• Study Data: Used for study sessions, scheduling, and analytics within the platform
• Account Information: Used for authentication, subscription management, and account recovery
• AI Content: Processed to generate flashcards, rewrite content, or provide explanations as requested
• Payment Information: Processed by our payment provider (Stripe). We never see your full credit card details

4. Data Storage and Security

4.1 Cloud Storage

Your data is encrypted in transit (TLS 1.3) and stored in Supabase's PostgreSQL database hosted on AWS in the United States.

4.2 Data Retention

We retain account information and data for as long as your account is active. Deleted accounts and associated data are permanently removed within 30 days.

5. Data Sharing and Third Parties

We share your information only in the following circumstances:

• Supabase: Database and authentication services (account data)
• Anthropic: AI processing for card generation features (only content you submit)
• Stripe: Payment processing for subscriptions (payment information only)
• Legal Requirements: When required by law or to protect our rights

We do not sell, rent, or trade your personal information to third parties.

6. Your Rights and Choices

6.1 Data Access and Export

You can export all your study data at any time. Data is exported in human-readable JSON format with full fidelity.

6.2 Data Deletion

You can delete your account and all associated data from Settings. Deleted accounts are permanently removed within 30 days.

6.3 Opt-Out of AI Features

AI features are optional. You can use Revu without ever using AI-powered card generation.

7. Children's Privacy

Revu is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at privacy@revu.cards.

8. International Data Transfers

Your data may be transferred to and processed in the United States where our servers are located. By using Revu, you consent to this transfer.

9. California Privacy Rights (CCPA)

California residents have the right to:

• Know what personal information is collected, used, shared, or sold
• Delete personal information held by us
• Opt-out of the sale of personal information (we do not sell data)
• Non-discrimination for exercising CCPA rights

To exercise these rights, email privacy@revu.cards with "CCPA Request" in the subject line.

10. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure (right to be forgotten)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time

To exercise these rights, contact privacy@revu.cards. You also have the right to lodge a complaint with your local data protection authority.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this page. We will notify you of material changes by:

• Posting a notice on the platform
• Sending an email to your registered email address (if applicable)
• Updating the version date at the top of this policy

Continued use of Revu after changes indicates acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: