Privacy Policy

Last updated 10 October 2026. This is a plain-English policy; it is not a substitute for independent legal advice. It covers Cardz Studio on the web, iPhone, iPad and Android.

1. Who we are

Cardz Studio is run by A Roll Media (FZE), a company registered in the Sharjah Research, Technology and Innovation Park free zone, United Arab Emirates. A Roll Media (FZE) is responsible for your data under this policy. Privacy questions: support@cardzstudio.com.

2. The app vs. this website

The Cardz Studio app is where your family makes and revises flashcards: on the web at app.cardzstudio.com, and as the Cardz Studio app for iPhone, iPad and Android. cardzstudio.com (the site you're on now) is our public marketing website. Sections 3 to 9 cover the app; section 10 covers this website.

3. What we collect in the app

• Account: your email address, for sign-in and account recovery.
• Profiles: the names, avatars and ages you choose for the parent and student profiles on your account, and each profile's study settings.
• What you make: decks, folders, cards, mind maps, and any images, photos, audio clips and voice notes you add to them.
• Study activity: what was studied and when, how each card was rated, streaks and progress.
• Devices: a random ID for each signed-in device, its name (for example "iPad" or "Chrome on Mac") and when it was last used, so you can see and limit where you're signed in.
• Billing status: if you subscribe on our website, your plan and renewal date from our payment provider. We never see or store full card numbers.
• Support messages: the name, email and message you send if you contact us from the app.

The app has no advertising, no tracking across other apps or websites, and no third-party analytics.

4. Why we collect it

To run the service you've signed up for: storing and syncing your decks across your devices, sending sign-in codes, running the AI features when you choose to use them, answering support messages, and processing payments made on our website. Nothing beyond that. We don't sell your data or use it for advertising.

5. The AI features

AI features only run when a student chooses to use one. In the iPhone, iPad and Android apps, the app also asks for permission before the first one. When they do:

• Making cards or a mind map sends the notes text (or a branch's text) and, if one is attached, a shrunk copy of the photo, plus the questions already in that deck (up to 40) so it doesn't repeat them.
• Checking an answer, a hint, an explanation or a rewrite sends that card's question, model answer and marking notes, what the student typed, and their last couple of answers to that same card.
• With every request a little context goes too, so the wording suits them: the student's age (as a number and an age band), their celebration style, the app's language, the deck and folder names, and the exam countdown if you switched it on.

The AI never receives a student's name, your email, their wider study history or anything about your other students. PDFs and photos are read on the device first; a PDF file itself is never uploaded. We don't keep what is sent to the AI, beyond a daily count of requests per account kept for 14 days. If an AI result is ever wrong or inappropriate, use Report next to it in the iPhone, iPad and Android apps, or email us.

6. Students

Student profiles are created and managed by the parent or guardian account holder. Students don't have their own sign-in, email address or account. Cardz Studio is for people aged 13 and over: student profiles are for ages 13 to 18, and we don’t knowingly collect personal information about anyone younger. Where the law requires a parent’s permission for someone under 16, the parent or guardian account holder gives it. If you believe a student under 13 has been added, contact us (see section 12) and we will delete that profile and its data.

7. Who else sees it

Four processors, all under data-processing agreements: Supabase (secure hosting, sign-in and database storage), Anthropic (the AI behind the AI features, as described in section 5), Resend (delivers our emails, such as support replies) and Stripe (payments made on our website). None is permitted to use your data for their own purposes. Apple and Google deliver the mobile apps but don't receive your Cardz Studio data from us.

If you choose to pair your account with a sibling's for the study leaderboard, each of you sees the other's display name and last-7-days study stats (cards reviewed, average confidence, streak). You can unpair at any time.

8. Where it's stored and how long we keep it

Your account data is hosted with Supabase. Our processors may handle data in other countries, with appropriate legal safeguards for international transfers. We keep your data for as long as your account is open. When you delete your account, your data is deleted straight away, except payment records Stripe must keep for tax and accounting law.

9. Your rights

You can access, export, correct or delete your data at any time. Export is built into the app's Settings, and you can delete your account inside the app. Step-by-step instructions, including how to ask us by email if you can't sign in, are at cardzstudio.com/delete-account. For anything else, email support@cardzstudio.com.

10. This website's cookies

The Cardz Studio app carries no advertising or tracking cookies and no third-party analytics — that hasn't changed. This marketing website, which you're reading now, may use a single, consent-gated analytics cookie to understand which pages are useful, so we can improve them. It only loads after you click "Accept" on the cookie banner, and never loads if you click "Decline" or simply ignore it. See our Terms for how the two sites relate.

11. Changes

We'll update this policy if what we collect or why ever changes, and note the date at the top.

12. Contact

Questions about this policy — email support@cardzstudio.com. Cardz Studio is run by A Roll Media (FZE), United Arab Emirates.