Privacy Policy

We collect information you give us, information created as you study, and limited technical information needed to run the service.

• Account information, such as the name and email address you submit and the credentials used to sign in.
• Study material you add, including uploaded notes, pasted text, topics, and flashcards you create or edit.
• Learning progress, such as which material you have reviewed and the progress stored for your account.
• Technical data such as IP address, browser type, device type, and the time and path of a request, which servers may record in ordinary logs.
• Messages you send us, for example a question about this policy.

You choose what to put into notes and flashcards. Do not include information you do not want stored, or sent to the providers described in this policy.

If you create an account, we collect the details the registration form asks for, typically a name and an email address, together with whatever is required to authenticate you. We use that information to create the account, sign you in, keep your study material and progress with that account, and reply if you contact us about the account.

[Authentication details: how sign-in works, and whether a password is stored only as a hash or an identity provider is used, should be stated here before this section is treated as a description of the live service.]

Please use an email address you control. You are responsible for keeping the account details you submit accurate.

When you upload notes, paste text, or create and edit flashcards, we receive that content. A flashcard may include a question, an answer, and any other field the product offers. We store it so you can return to it, review it, and keep progress against it.

[Uploaded file handling: which file types are accepted, whether an original file is stored or only extracted text, and how long an unused upload is kept, should be stated here.]

We do not sell your notes or flashcards. You are responsible for the material you submit. Do not add content you do not have the right to use. Avoid putting sensitive personal information into study material if you do not want it stored and, when you generate flashcards, processed by an AI provider.

When you ask Publisher to generate flashcards, we send the text you provide — such as pasted notes, text taken from an upload, or a topic you enter — to a third-party AI service so it can return study material. We send that content to produce the flashcards you requested. We do not sell it.

If you save generated flashcards, we store them with your other study material, in the same way as cards you write yourself.

[AI provider and data practices: the provider’s name, a link to its terms and privacy policy, how long it keeps a request, and whether prompts are used to train models, should be stated here. This draft does not name a vendor and does not promise that a provider deletes prompts.]

Generated material can be inaccurate, incomplete, or similar to text that already exists. It is not medical, legal, financial, or other professional advice. Review it before you rely on it. Do not submit information you are not comfortable sending to a third-party AI service.

We use cookies and similar storage where they are needed to operate the service, for example to keep a session signed in. This draft does not describe them as an advertising tool.

[Cookie list: each cookie or similar technology, who sets it, its purpose, and how long it lasts, should be listed here. Do not publish cookie names until they match the service.]

Your browser may also store values such as a session token or an unsaved draft. That storage stays on your device until you clear it or the product removes it.

[Cookie consent: if a consent banner or preference control is required where the service is offered, describe it here. This draft does not assume one exists.]

If you block cookies that the service needs in order to keep you signed in, parts of the product that require an account may not work.

We may use ordinary server logs, such as IP address, browser type, the time of a request, and the page or API requested, to keep the service reliable, diagnose failures, and investigate abuse. This draft does not describe those logs as an advertising profile, and it does not say that personal information is sold.

[Analytics tools: name any product analytics or measurement service, what it collects, and the choice you have. If none is used, say that here. This draft does not assume a vendor.]

If that description changes, this policy will be updated.

Other companies help us run Publisher. They may process the information described in this policy for that purpose:

• An AI provider, which receives the text you submit when you generate flashcards and returns the generated material.
• Hosting and storage providers, which run the application and store account and study data, and which may process technical logs.
• [Subprocessors: add any other provider, such as email delivery, error monitoring, or payments, or delete this item if there are none.]

These providers process information under their own terms or under an arrangement with us. We do not control their independent practices, and this policy does not speak for them. [The provider list, and links to their privacy policies, should be completed before publication.]

Account records, stored study material, and saved learning progress are kept so the service can show them to you. Some information, such as a session or an unsaved draft, may remain only in your browser.

[Storage locations: the providers and the countries or regions where information is stored should be stated here.]

We keep personal information for as long as we need it to provide Publisher, and for a further period where we need it for security, to resolve a dispute, or to meet a legal obligation. Specific periods are not set in this draft.

[Retention schedule: how long accounts, study material, logs, and backups are kept, and when they are deleted or de-identified, should be stated here.]

[Account deletion: whether you can delete an account in the product or only by contacting us, and what is deleted or kept, should be stated here.] To ask about deletion, contact [contact email]. This policy does not promise a particular response time. Information that exists only in your browser stays there until you clear it. Information sent to an AI provider is handled under that provider’s policy, which we do not control.

We intend to protect personal information with measures appropriate to a study application, including limiting access to stored data and serving the service over HTTPS where the deployment is configured that way. Credentials should not be stored in plain text.

[Security controls: confirm the controls that are actually in place, such as password hashing, encryption at rest, and access logging, before describing them as facts.]

No method of transmission or storage is completely secure. This policy does not guarantee that unauthorized access will never occur. If you believe your account has been used without permission, contact [contact email].

Depending on where you live, you may have rights to access personal information we hold about you, correct it, delete it, receive a copy, or object to or restrict certain processing. You may also have a right to complain to a regulator. Those rights, and any exceptions, depend on the law that applies. This draft does not list them as promises.

[Privacy rights and regional addenda: add the rights, legal bases, and response times that apply, including any notice required for a particular region, after legal review. Do not name a statute here until that review is done.]

To make a request, email [contact email]. We may need to confirm that the request comes from you. We may decline a request where the law allows it, for example where fulfilling it would affect someone else’s privacy or where the information has to be kept. Where we decline, we will tell you the reason if the law requires it.

Publisher is not directed to children. We do not intend to collect personal information from children.

[Minimum age: state who may use the service, and any parental-consent rule that will apply. Do not publish an age until it has been confirmed for the places where the service is offered.]

If you are a parent or guardian and you believe we have personal information from a child in a way the law does not allow, email [contact email]. We will review the request and delete the information if we confirm that we should not have it.

Publisher can be used from more than one country. We and our providers may process information in countries other than the one where you live. Those countries may have different data-protection rules.

[International transfers: name the countries or regions where information is processed, and any transfer mechanism the law requires, after legal review.]

This section does not ask you to agree to a transfer as a legal basis. Whether a transfer is allowed, and on what terms, depends on applicable law and should be confirmed before this policy is published.

We may update this policy when the product changes or when this draft needs to be corrected. When we do, we will change the “Last updated” date at the top of this page. The version on this page is the current version.

[Change notice: state how a material change will be communicated, for example a notice in the product or an email, once that process exists.]

If you continue to use Publisher after an update, the updated policy is the one that describes the service from then on, to the extent the law gives continued use that effect. If you do not agree with an update, stop using the service and contact us about your account.

Questions about this policy, and requests about your personal information, can be sent to [contact email].

[Legal entity name and postal address, if they will be published, should be added here.]

Please include the email address on your Publisher account if you have one, so we can find the right records. We use the message to respond to the request.