Privacy Policy

Account information, including your email address, account identifier, sign-in method, account status, and preferences. Our authentication providers process your credentials. If you use a third-party sign-in service, we may receive the profile information that service makes available, such as your name, email address, profile image, and provider identifier.

Study content and activity: the cards, decks, concepts, notes, and tags you create; the variant cards the AI writes from them; study settings and time zone; and ratings, review times, scheduling records, and progress. We derive schedules and progress statistics from this activity.

Communications and preferences, including support requests, feedback, contact details, page URLs, screenshots or voice recordings you choose to submit, email delivery information, and communication preferences.

Technical and usage information, such as IP addresses and derived identifiers, browser and device information, pages visited, service interactions, request times, session information, logs, and error details. This information is collected through the service, our infrastructure providers, and Google Analytics, as described in Section 6.

When you purchase or manage a subscription, Stripe processes your payment details. We receive customer, subscription, transaction, billing, and payment-status information, including payment event records, to administer and troubleshoot billing. We do not receive or store complete payment card numbers or card security codes.

We collect information directly from you, automatically through your use of Kintsugo, and from service providers and other users when you use sharing features. Account and study information is needed for the corresponding features to work; optional feedback and attachments are your choice.

To create and manage your account, keep you signed in, and protect account access.

To run your study schedule, including scheduling reviews, saving ratings, showing progress, and preserving the content you create.

To write variant cards from your founder cards, keep a fresh set of them available, flag cards you repeatedly miss, and keep AI output tied to the card you wrote.

To respond to feedback, support requests, and billing questions; administer subscriptions; and send account, security, billing, and service communications.

To secure the service, prevent abuse, debug issues, maintain reliability, and enforce limits such as rate limits and plan rules.

To diagnose problems and improve the service, including reviewing generation quality and aggregate study patterns.

To comply with applicable law, respond to lawful requests, and establish, exercise, or defend legal claims.

If you opt in, to send product news and announcements. You can unsubscribe at any time as described in Section 9.

We use third-party AI model providers to write variant cards. Generation can start automatically as you study a card and recur as its variant cards are refreshed. We send relevant study material and context, including card text, concepts, deck name and description, deck mode, tags, existing variant cards, and generation instructions. Personal information you include in that material may also be sent to the provider.

AI never grades your answers. You privately decide whether you remembered a card, then rate it Again or Good.

We do not train our own models on your content, and we do not authorize AI providers to use your content to train their models. Providers may retain inputs and outputs for service delivery, security, abuse prevention, or legal compliance under their applicable terms.

We retain generated cards and generation records to operate the service, investigate failures, and review quality. We do not add your account email to generation prompts, and we do not automatically remove personal information you include in study material.

When you remove or edit a variant card, or tell us what is wrong with one, we keep a copy of it, the founder card it was made from, your changes and any reason you picked, so our team can check how well cards are written. After 12 months we delete the copies and keep only a note that it happened and which reason was picked; we delete everything sooner if you delete your account, and never use any of it to train AI models.

Kintsugo is a study tool, not a repository for patient records, protected health information, government identifiers, account passwords, private financial details, or other highly sensitive personal information. Do not include that information in study content, feedback, or attachments.

Medical and dental concepts may be studied without including identifiable patient information. Do not submit another person's personal information unless you have the necessary authority and permissions. Contact us if sensitive information was submitted inadvertently.

We disclose information to service providers as needed for authentication, hosting, storage, AI generation, email, analytics, payments, bot protection, and other service operations. Access by our personnel is limited to people who need it for their work. Professional advisers may receive information where reasonably necessary for legal, accounting, or business advice, subject to confidentiality obligations.

Decks are private by default. If you choose to enable sharing, anyone with the public link can access and download that deck, including personal information contained in the shared material. A recipient can retain a copy in their own account and share it with others. Share only material you intend to make available on that basis.

You may disable your share link to prevent further access through that link. Disabling sharing or deleting your account does not automatically remove copies already downloaded into other accounts or prevent recipients from sharing those copies independently.

We may disclose information when we reasonably believe it is necessary to comply with law or legal process, investigate fraud or security incidents, protect someone's safety or rights, or establish, exercise, or defend legal claims.

Information may be disclosed to advisers and prospective or actual successors in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to confidentiality protections.

We do not sell or rent your personal information or disclose it to outside companies for their own marketing. We do not share your personal information for cross-site behavioral advertising. This does not prevent the sharing you direct when you enable a public deck link.

Certain providers, such as sign-in and payment services, may also process information for their own account, security, or legal purposes under their privacy notices. External sites and services you choose to use are governed by their operators' notices. Contact us for more information about our service providers.

We use cookies and similar technologies to maintain sessions, remember preferences, support security, and operate the service. Some storage lasts for a session; other values persist until they expire, are replaced, or you clear them.

We use Google Analytics to understand how people use Kintsugo and to improve it. Google Analytics uses cookies to collect technical and usage information, such as pages visited and service interactions. We currently use analytics for product improvement, not for advertising, retargeting, or creating advertising audiences. To learn how Google uses this information, see How Google uses information from sites or apps that use our services. You can opt out with the Google Analytics Opt-out Browser Add-on.

We also record review activity and timing to provide study scheduling and progress features.

We do not track activity across unrelated websites for advertising or knowingly permit others to do so through Kintsugo. Our practices do not change in response to browser Do Not Track signals. Our no-sale and no-advertising-sharing practices apply whether or not a Global Privacy Control signal is enabled.

You can manage cookies and site storage through your browser. Blocking or clearing them may affect sign-in, preferences, or functionality and does not necessarily prevent all technical or usage information from being collected. Clearing browser storage does not delete your account.

We take reasonable steps to protect your information, including encrypting data in transit, limiting access to the people who need it to operate Kintsugo, and relying on established hosting and infrastructure providers.

No online service can be perfectly secure. We cannot guarantee that information will never be accessed, disclosed, or lost in a way we did not intend.

If a data breach affects your personal information, we will notify you and the appropriate regulators as required by applicable law, and take reasonable steps to address it.

We generally retain account information and study data until you request deletion. Signing out or discontinuing use does not itself delete your account. On account deletion, we remove your account's cards, decks, study history, and associated study data from our active service records. Copies other users obtained through sharing remain as explained in Section 5.

Retention of other records depends on their nature, the purposes for which they are processed, and applicable requirements. Limited information may be retained as reasonably necessary for support, security, fraud prevention, honoring communication preferences, accounting, legal compliance, dispute resolution, or establishing, exercising, or defending legal claims.

Residual copies may remain in backups or service-provider systems under applicable retention practices. Deletion does not necessarily occur simultaneously in every system.

You can contact us at support@kintsugo.com to request access, export, correction, or deletion of your personal information, including account deletion. You can also change supported content and settings directly in the app.

Depending on your location and the law that applies, you may have rights to confirm processing, access information about collection and disclosure, receive a portable copy, correct or delete information, restrict or object to processing, and withdraw consent where we rely on it. Withdrawal does not affect processing that was lawful before withdrawal. You may also have rights concerning sensitive information, sale or sharing, targeted advertising, and certain profiling or automated decisions.

You may unsubscribe from marketing emails using the unsubscribe link in those messages or by contacting support@kintsugo.com. Unsubscribing from marketing does not stop necessary account, security, billing, or service messages.

These rights are subject to the conditions and exceptions in applicable law. We may request information reasonably necessary to verify your identity and authority, and an authorized agent may submit a request where the law permits. Do not send passwords or sensitive identification documents unless we specifically arrange an appropriate verification method with you.

We will respond within the time required by applicable law and explain any permitted extension or refusal. We do not charge for exercising rights except where the law permits, and will explain any permitted fee in advance. We will not unlawfully discriminate against you for exercising your rights.

For a privacy complaint or to appeal a request decision, email support@kintsugo.com and describe your concern. We will review it and communicate the outcome and any further steps available under applicable law.

You may also complain to your privacy regulator or state attorney general. Where EU or UK data protection law applies, this includes the supervisory authority in the country where you live, work, or believe an infringement occurred, or the UK Information Commissioner's Office.

Deleting information or withdrawing permission needed for a feature may prevent us from providing that feature.

Kintsugo is based in the United States. Your information may be processed in the United States and other countries where our providers operate. Their laws may differ from those where you live.

Where EU or UK data protection law applies, we rely on contract performance for processing necessary to provide requested account, study, sharing, and subscription features. We rely on legitimate interests in operating, securing, supporting, and improving the service where those interests are not overridden by your rights. We also process information where the law requires it. Where we rely on consent, such as for marketing emails, you may withdraw it at any time.

Certain service providers' standard data-processing terms incorporate European Commission Standard Contractual Clauses and the UK Addendum for covered transfers. Contact support@kintsugo.com for information about the locations and safeguards that apply to your information, including how to obtain a copy where applicable.

Kintsugo is intended for learners who are 13 years old or older and is not directed to children under 13. If you are under the age of majority where you live, you may use Kintsugo only as our Terms of Service allow.

We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to Kintsugo, contact support@kintsugo.com. If we learn that we collected personal information from a child under 13, we will take steps to delete it and restrict the account.

We may update this policy as the service or legal requirements change. We will publish the revised policy here and update its effective date. For material changes, we will also provide a prominent notice in the service or notify account holders by email, with advance notice where required by law.