Edukeen

Privacy Policy for Edukeen

Last Updated: October 15, 2026

Edukeen ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our study application on the web and in our mobile apps for Android and iOS (together, the "Service"). The Service allows users to upload PDFs or YouTube video links to generate flashcards for studying. Please read this policy carefully. If you do not agree with this policy, please do not use the Service.

1. Information We Collect

We collect information you provide directly, information collected automatically, and information from third parties.

a. Information You Provide

  • Account Information: When you create an account, we collect your name and email address. If you sign up with Google or Facebook, we also store a link to the profile picture of that account.
  • User Content: When you upload PDFs or YouTube video links, we collect that content to generate flashcards.
  • Payment Information: If you subscribe to a Standard or Premium plan, your payment details are collected by the store or processor you pay through: Stripe on the website, Google Play in the Android app, or the App Store in the iOS app. We do not receive or store your card details.
  • Communications: If you contact us (e.g., for support), we collect your messages and contact details.

b. Information Collected Automatically

  • Usage Data: We collect data about your interactions with the Service, such as pages visited, features used, and flashcard generation.
  • Device Information: We collect device details like IP address, browser type, operating system, and device identifiers.
  • Cookies and Tracking: We use cookies and similar technologies (e.g., via Google Analytics) to improve the Service, analyze usage, and personalize your experience. See Section 2 (Cookies and Tracking) for details.

c. Third-Party Data

  • Google Analytics: We use Google Analytics to collect anonymized data about Service usage (e.g., page views, session duration).
  • PostHog: We use PostHog (PostHog Inc., with data hosted in the EU region) as a processor for product analytics, session replay, error reports and feature flags, on the website and in the mobile apps. PostHog receives usage events, the screens you view, and device and app information (such as platform, app version and language). When full analytics is active, it also receives a pseudonymous user ID. IP addresses are used only to work out an approximate location (country and city) and are then discarded. We do not send your email address, name or learning content (such as card and material text) to PostHog.
  • Stripe: If you make a payment, Stripe provides us with transaction details (e.g., payment status) but not full payment information.
  • RevenueCat: For subscriptions bought through Google Play or the App Store, we use RevenueCat (RevenueCat, Inc.) as a processor to verify purchases and keep your subscription status up to date. RevenueCat receives your pseudonymous user ID and the store's purchase records (product, price, dates and status), but not your payment details.
  • Supabase: We use Supabase to store user data, which may include your account information and uploaded content.
  • Google OAuth: If you sign up or sign in using Google, we receive your name, email address, and profile picture from Google to create and authenticate your account.
  • Facebook OAuth: If you sign up or sign in using Facebook, we receive your name, email address, and profile picture from Facebook to create and authenticate your account. We do not access your Facebook posts, friends list, or other social data.
  • Apple OAuth: If you sign up or sign in using Apple, we receive your name and email address (or a private relay email address, if you choose to hide your email) from Apple to create and authenticate your account. Unlike Google or Facebook, Apple does not provide a profile picture.

2. Cookies and Tracking

We use cookies and similar technologies to enhance your experience and analyze Service performance. Cookies are small files stored on your device. We use:

  • Essential Cookies: Necessary for the Service to function (e.g., maintaining your session).
  • Analytics Cookies: Via Google Analytics, to understand usage patterns (e.g., which features are popular).
  • Consent: For users in the European Union, we obtain your consent for non-essential cookies via a cookie consent banner, as required by GDPR. You can manage cookie preferences through your browser settings.
  • Product Analytics and Session Replay: With PostHog we measure how the Service is used, collect error reports, and use feature flags to switch features on or off, on the website and in the mobile apps. Where full analytics is active, we may also record sessions (a replay of how you use the interface). Input fields and the content you create or study are masked in recordings. Session recordings are kept for 30 days.
  • Analytics by Region: In the EEA, the United Kingdom and Switzerland (and whenever we cannot determine your country), we use anonymous cookieless statistics by default: no identifier is stored on your device and your activity is not linked to your account. Full analytics (a pseudonymous user ID, session replay and personalized feature flags) starts only after you opt in, through the cookie banner on the website or the switch on the welcome screen and in the profile settings of the mobile apps. Elsewhere, analytics is on by default and you can switch it off in the settings at any time. Google Analytics follows the same country rule: outside these regions its storage is allowed by default, inside them only after you accept.
  • Withdrawing Consent: You can withdraw your consent or opt out at any time, using the cookie banner and settings on the website or the switch in the profile settings of the mobile apps. After that, only anonymous cookieless statistics are collected. Withdrawal does not affect processing carried out before it.

3. How We Use Your Information

We use your information to:

  • Provide and improve the Service (e.g., generate flashcards, personalize content).
  • Process payments and manage subscriptions via Stripe on the website and via Google Play or the App Store in the mobile apps, with RevenueCat managing app store subscriptions.
  • Communicate with you (e.g., support responses, Service updates).
  • Analyze usage via Google Analytics to enhance functionality.
  • Comply with legal obligations under GDPR and other laws.
  • Send marketing communications, such as promotional emails about new features or plans, to your email address (you may opt out at any time; see Section 7).
  • Analyze product usage, errors and session recordings via PostHog to improve the Service.

4. How We Share Your Information

We do not sell your personal information or share it with third-party sites for their own marketing or other purposes. We may share information with:

  • With Service Providers: With third parties like Supabase (storage), Stripe and RevenueCat (payments and subscriptions), and Google Analytics (analytics), under strict confidentiality agreements.
  • Analytics Processor: PostHog processes analytics data on our behalf and only for our purposes.
  • For Legal Compliance: To comply with legal obligations, respond to lawful requests, or protect our rights.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.

5. Data Storage and International Transfers

Your information is stored on Supabase servers, which may be located outside the EU (e.g., in the United States). We use secure storage practices and comply with GDPR for international data transfers.

Analytics data processed by PostHog is hosted in the EU region.

6. Data Deletion and Your Rights

a. Data Deletion (All Users)

Any user of the Service, regardless of location, may request that we delete their personal data and account. To request deletion:

  • Email us at [email protected] with the subject line "Data Deletion Request," including the email address associated with your account, or
  • On the website, go to Settings and select "Delete Account"; in the mobile app, go to Profile and select "Delete Account".

Upon a verified request, we will delete your account information and personal data from our systems within 30 days, except where we are required to retain certain information (e.g., transaction records) for legal, tax, or fraud-prevention purposes. Once deleted, this data cannot be recovered.

b. Additional Rights for EU/EEA Users

Under GDPR, users in the European Union and European Economic Area additionally have the right to:

  • Access or correct your personal data.
  • Restrict or object to data processing.
  • Request data portability.
  • Withdraw consent for non-essential cookies.

To exercise these additional rights, contact us at [email protected]. We will respond within 30 days, as required by law.

7. Your Choices

  • Account: Update your account via account settings.
  • Cookies: Manage cookie preferences via your browser or our consent banner (for EU users).
  • Analytics: Opt in to or out of analytics through the cookie banner on the website or the switch in the profile settings of the mobile apps.
  • Marketing: Opt out of promotional emails by clicking the unsubscribe link.

8. Data Security

We use reasonable technical and organizational measures (e.g., encryption, access controls) to protect your data. However, no system is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is intended for users aged 13 and older. We do not knowingly collect data from users under 13. If we learn we have collected such data, we will delete it.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or a website notice.

11. Contact Us

For questions or to exercise your rights, contact us at:

Omicron Software P. S. A.

KRS: 0001225004

NIP: 5783183739

REGON: 544060699

ul. Stanisława Sulimy 1, 82-300, Elbląg, Poland

[email protected]

For support contact us at [email protected]
Funded by the European Union