Privacy Policy

Effective date: April 4, 2026

1. What we collect

We collect the email address you provide at signup and a hashed password. We also store credit balance and transaction records tied to your account.

When you purchase credits, Stripe processes your payment. We receive a payment confirmation and the amount purchased — we never see or store your card details.

2. What we do not collect

Uploaded PDFs are processed entirely in memory and are never written to disk or stored. Generated flashcards are returned to your browser and not retained on our servers.

3. How we use your data

Your email is used to identify your account and, if needed, to contact you about the service. We do not sell your data or use it for advertising.

4. Cookies

We set one HTTP-only session cookie to keep you logged in. No third-party tracking cookies are used.

5. Third parties

We use Stripe for payment processing and OpenRouter to access AI language models. Your PDF content and highlights are sent to OpenRouter solely to generate flashcards. Consult their respective privacy policies for details.

6. Data retention

Account data (email, credit balance, transaction history) is retained until you delete your account. There is currently no self-serve deletion; contact us via our contact form to request deletion.

7. Security

Passwords are stored as bcrypt hashes. All traffic is encrypted via HTTPS. We take reasonable precautions to protect your data but cannot guarantee absolute security.

8. Changes

We may update this policy. Continued use of Remio after changes constitutes acceptance.

9. Contact

Privacy questions? Use our contact form.