Privacy Policy

1. Information we collect

We process account details such as your email address, display name, authentication provider, and account identifiers. When you use Kivocard, we also process files and text you submit, decks, flashcards, edits, quiz choices, study activity, usage totals, and account settings.

For paid plans, we receive billing identifiers, subscription status, product, price, renewal, and transaction information from Paddle. Kivocard does not receive or store your full payment-card number.

We may process basic technical and security information such as request timestamps, IP-derived security signals, browser information, errors, and service logs needed to operate and protect the service.

2. How we use information

We use information to authenticate accounts, process study material, generate and save flashcards and AI Quiz choices, provide Play and Quiz features, enforce usage limits, manage subscriptions, support users, prevent abuse, troubleshoot errors, and comply with legal obligations.

3. AI processing and service providers

Material submitted for AI features is automatically processed to provide the requested result. Kivocard uses service providers including Cloudflare for hosting, storage, databases, security, document conversion, and AI processing; Supabase for authentication; Paddle for checkout, subscription management, and payment records; and Google for Google sign-in and website analytics.

These providers process information on Kivocard’s behalf or under their own applicable terms. We do not sell personal information or use it for third-party behavioral advertising.

4. Cookies, analytics, and local storage

Kivocard uses essential cookies and browser storage for authentication, account sessions, security, billing flows, and saved application state. The private Staging environment also uses an essential access cookie.

On the Production website, Kivocard uses Google Analytics to understand page visits and a limited set of product events, such as successful registration or sign-in, deck creation, quiz starts, and the opening of checkout. Google Analytics may process analytics identifiers, page paths, browser and device information, approximate location derived from network information, and event details. Kivocard does not send Google Analytics your email address, name, uploaded material, filenames, deck titles, flashcard content, or internal account identifiers.

Kivocard does not use advertising cookies or Google Analytics for third-party behavioral advertising.

5. Retention and deletion

Account content is retained while your account remains active or as needed to provide the service. You can export your data or request account deletion from Settings. Deleting an account removes Kivocard decks, source files, flashcards, and study history from active application storage, subject to backup cycles and legal obligations.

Billing, fraud-prevention, security, tax, and transaction records may be retained for the periods required by Paddle, financial reconciliation, or applicable law.

6. Sharing and international processing

We share information only with service providers, when you direct us to do so, when required by law, or when necessary to protect Kivocard, its users, or the public. Because Kivocard and its providers operate internationally, information may be processed outside your country with safeguards required by applicable law.

7. Security

We use reasonable technical and organizational safeguards designed to protect information. No online system can guarantee absolute security, so you should use a strong password and keep account credentials private.

8. Your choices and rights

You can update account information, export application data, cancel a subscription, or delete your account through Kivocard. Depending on where you live, you may also have rights to access, correct, delete, restrict, or object to processing, or request data portability. Contact us to exercise a right that is not available directly in the product.

9. Age requirement

Kivocard is intended for people who are at least 16 years old. We do not knowingly provide accounts to children under 16. If you believe a child has provided information contrary to this requirement, contact us.

10. Changes and contact

We may update this policy as Kivocard changes. Material updates will be reflected by a new effective date and, when appropriate, an in-product notice.

Questions or privacy requests can be sent to support@kivocard.app.