1 What this policy covers
This policy describes the information processed when you use AI Flashcard Maker. The product does not have an account-based cloud library. Decks, edits, and spaced-repetition records are saved in IndexedDB in your browser. Interface preferences and the current library location may be saved in browser local storage.
2 Files and AI processing
Supported documents and images are opened and parsed in your browser. Scanned-page OCR, image description, and audio transcription run locally in a compatible browser. The original uploaded file is not sent to our generation endpoint. To create cards, extracted text, OCR text, local image descriptions, and source labels (which can include a filename, page, or section) are sent over HTTPS to our server, then forwarded to a third-party AI service for processing. The service returns generated card text to your browser. The provider and model may change as the service evolves.
Do not submit material that you are not authorized to process or that you do not want handled by the configured AI provider. We have not verified a fixed retention period or training policy for every provider configuration. Check the provider's current terms before submitting sensitive material.
3 Local data and deletion
Decks, card edits, folders, and review scheduling records are stored in browser IndexedDB. Clearing a deck or using Clear local history removes the corresponding app data from this browser. Browser storage can also be cleared in your browser settings. This does not delete information already processed by an AI provider or technical records held by hosting services.
Exports are created on your device. Anki export is ordinary tab-separated front-and-back text with optional tags; the service does not create an .apkg package or native Anki Cloze notes.
4 Product and site analytics
If analytics is enabled, the browser uses a random anonymous visitor identifier that expires after 30 days and a session identifier that expires after 30 minutes. Events can include page path, campaign parameters, referring domain, input type, generation started/succeeded/failed/cancelled, failure stage, and study mode. Events are forwarded through our server to the Snapling analytics service. They do not include uploaded files, extracted study text, card contents, full source URLs, or quiz answers and scores.
The visitor identifier expiry is not the retention period for analytics records. We have not confirmed a fixed deletion period for records held by the analytics service or its database provider.
PVUV, our site analytics service at analytics.kaurispring.org, separately measures public page visits. It may process page URLs and paths, referring pages, campaign parameters, general browser and device information, language and screen size, approximate location, visit duration and scroll depth, Web Vitals, aggregated interaction and form activity, outbound-link destinations, and limited JavaScript error diagnostics. It uses first-party visitor and session identifiers; a visitor identifier can remain for up to 396 days, with sessions renewed after 30 minutes of inactivity. PVUV is enabled only on ai-flashcard.com and www.ai-flashcard.com; f.ai-flashcard.com is not instrumented or collected. PVUV is not loaded on /app or /admin. It does not read form values, uploaded files, extracted study text, flashcard contents, quiz answers, or scores.
5 Service providers and technical records
The site is hosted by Vercel. AI processing uses a third-party service, and the provider or model may change over time. Hosting, AI, and analytics providers process technical request data under their own terms. We have not verified a fixed retention period or training policy for every provider, so check the applicable provider terms before submitting sensitive material.
Our generation application logs are configured to record error categories and HTTP status codes without recording submitted source text or provider response bodies. Avoid placing personal or confidential information in material labels or source content.
6 Cookies, changes, and contact
The service uses essential browser cookies for CSRF protection and the daily generation limit. Product analytics identifiers are stored in browser storage. PVUV uses first-party visitor and session identifiers; a visitor identifier can remain for up to 396 days and a session is renewed after 30 minutes of inactivity. We may update this policy as the service changes; the date above identifies the latest revision.
For privacy questions, contact contact@ai-flashcard.com.