Effective date: May 15, 2026

Privacy Policy

This policy explains what we collect, how we use it, and what choices you have.

Who We Are

Kintsugo is a web-first spaced repetition app for concept mastery, operated by Kintsugo LLC, a Florida limited liability company. Kintsugo LLC is the data controller responsible for the information described in this policy. We process and store data in the United States. For privacy questions or requests, contact us at hello@kintsugo.com.

1. Information We Collect

Account and sign-in information, such as your email address, authentication method, referral or beta access details, and account status.

Study content you create — your cards and decks, the notes and tags on them, the AI-generated practice versions of your cards, and your study settings.

Review activity needed to schedule your practice, including your ratings, when each card is next due, timing data, and your progress over time, which we also use in aggregate to improve scheduling.

Feedback and support information you choose to send, including notes, page URLs, screenshots, voice notes, and related email metadata.

Beta application and referral information, such as name, email, learner stage, referral source, and your short answer about study tools.

Security, rate-limit, and operational data, such as IP-derived hashes, request windows, browser/session information, cookies, local storage values, logs, and error information.

Billing information if paid billing is enabled. Payment details are handled by our payment processor; we store only the billing metadata needed to manage plan status.

2. How We Use Information

To create and manage your account, keep you signed in, and protect account access.

To run your study schedule, including scheduling reviews, saving ratings, showing progress, and preserving the content you create.

To generate practice variants of your cards, keep a fresh set of them available, flag cards you repeatedly miss, and keep AI output tied to the original card you wrote.

To respond to feedback, support requests, beta applications, referrals, and billing questions.

To secure the service, prevent abuse, debug issues, maintain reliability, and enforce limits such as rate limits and plan rules.

To understand aggregate product patterns, such as which study flows are confusing or which scheduler changes improve learning outcomes, without trying to identify individual learners in those aggregate summaries.

3. AI-Generated Study Variants

We use third-party AI model providers to generate study variants from the original cards you write. When variants are generated, we send the card's text, its concept and deck, tags, existing variants, and the settings needed to produce a useful prompt.

AI never grades your answers. You privately decide whether you remembered a card, then rate it Again or Good.

We do not train our own models on your content, and we do not allow your content to be used for an AI provider's model training. We use AI to create study prompts for your account, not to turn your study material into training data.

4. Sensitive Information

Kintsugo is for studying concepts. It is not designed to store patient records, protected health information, government IDs, passwords, private financial details, or other highly sensitive personal data.

Medical and dental students can use Kintsugo to study medical concepts, but should not put real patient information or clinical records into cards, feedback, screenshots, or voice notes.

5. How We Share Information

We share information with service providers only as needed to run Kintsugo. These may include an authentication and database provider, hosting provider, AI model provider, email provider, OAuth provider, storage provider, and payment processor if paid billing is enabled. We can provide our current list of these providers on request.

We may share information if required by law, to protect Kintsugo or our users, to investigate abuse or security issues, or as part of a business transaction such as a merger, acquisition, financing, or asset sale.

We do not sell your personal information. We do not share your personal information for cross-site behavioral advertising.

6. Cookies, Local Storage, and Tracking

We use cookies and similar storage when they are needed for the service, such as keeping you signed in, maintaining secure sessions, saving theme preference, storing a temporary application draft, remembering lightweight UI state, and protecting against abuse.

Kintsugo has no ads, and we do not use third-party tracking analytics or retargeting pixels.

Learning data is different from advertising analytics. We record review activity and timing because that is how the study system works, and we may review aggregate product metrics to improve Kintsugo.

7. How We Protect Your Information

We take reasonable steps to protect your information, including encrypting data in transit, limiting access to the people who need it to operate Kintsugo, and relying on established hosting and infrastructure providers.

No online service can be perfectly secure. We cannot guarantee that information will never be accessed, disclosed, or lost in a way we did not intend.

If a data breach affects your personal information, we will notify you and the appropriate regulators as required by applicable law, and take reasonable steps to address it.

8. How Long We Keep Information

We keep information for as long as needed to provide your account, operate the product, respond to support requests, maintain security, meet legal obligations, resolve disputes, and improve Kintsugo in aggregate.

Some operational data, such as temporary tickets or rate-limit windows, is intended to be short-lived. Other data, such as decks, concepts, review history, settings, and billing status, remains while your account needs it.

If you ask us to delete information, we will handle the request by email and may retain limited information when required for legal, security, fraud-prevention, accounting, or backup reasons.

9. Your Choices and Requests

You can contact us at hello@kintsugo.com to request access, export, correction, or deletion of your personal information.

We may need to verify your identity before acting on a request. We will respond in a reasonable time and explain if a request cannot be completed fully because of legal, security, or operational limits.

Self-serve privacy controls are planned as a follow-up feature. Until then, email is the request path.

10. Children

Kintsugo is intended for learners who are 13 years old or older. We do not knowingly collect personal information from children under 13.

If you believe a child under 13 has provided personal information to Kintsugo, contact us at hello@kintsugo.com and we will take reasonable steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy as Kintsugo changes. If the changes are material, we will take reasonable steps to notify users, such as updating this page, changing the effective date, or sending an in-app or email notice when appropriate.