Reviso Privacy Policy

Last updated: June 14, 2026

Contact: studywithreviso@gmail.com
Website: https://abhishek-roshan-000.github.io/Reviso-landingPage/privacy

1. Introduction

Reviso (referred to as "we", "us", or "our") is an AI-powered flashcard study application. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the Reviso app (the "App").

By downloading, installing, or using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use the App.

This policy complies with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, and is aligned with international best practices including the General Data Protection Regulation (GDPR) where applicable.

2. Information We Collect

2.1 Information you provide directly

Account registration data. When you sign in using Google Sign-In, we receive the following information from your Google account through Firebase Authentication:

• Your email address
• Your display name (as set in your Google account)
• Your profile photo URL
• A unique Firebase User ID (UID) assigned to your account

Content you create. You may create and store within the App:

• Flashcard decks (names, descriptions, optional icon images)
• Individual flashcards (front-side text and back-side text)
• Answers you type when reviewing cards
• Profile images (selected from your device's photo gallery or camera)
• Your school or institution name (optional, entered in your profile settings)

2.2 Information generated automatically by your use

Study behaviour and progress. As you use the App to study, we automatically record:

• Number of cards reviewed per day
• Your ratings on each card (Again, Hard, Good, Easy)
• Scheduling data computed by the spaced-repetition algorithm (FSRS), including review intervals, stability scores, and difficulty scores
• Your review streak and daily goal progress
• Timestamps of when each review took place

Answer text submitted for AI scoring. When you use the AI-powered answer-scoring feature, the following information is sent from your device to our backend server and then to a third-party AI service provider (currently NVIDIA NIM via build.nvidia.com and OpenRouter):

• The question (front side) of the flashcard
• The reference answer (back side) of the flashcard
• The answer you typed

Important: Your study content — including card text, answers, and images — is sent to our AI provider (NVIDIA NIM / OpenRouter) only for the purpose of generating scores or creating flashcards. We do not use your content to train or improve AI models. Each AI provider's data handling practices are governed by their own privacy policy (see Section 4). We recommend that you do not include sensitive personal information in your flashcard content.

Flashcard generation from images. If you use the image-to-flashcard feature, the image you select is encoded as base64 data and sent to our backend and then to the AI provider (NVIDIA NIM / OpenRouter). No image data is permanently stored by us — it is used only to generate the flashcard content and is then discarded.

App preferences. We store the following preferences locally on your device:

• Theme preference (light / dark / system)
• Notification reminder time and frequency
• Daily review goal
• First-launch flag (to show onboarding)
• Cached study streak count

Note: School name, daily goal, and reminder preferences are synced to Cloud Firestore so they persist across devices. You can update or clear them at any time in Profile.

2.3 Information collected by third-party SDKs

Google AdMob. The App uses Google AdMob to serve advertisements. AdMob automatically collects:

• Device advertising identifiers (Google Advertising ID on Android, IDFA on iOS)
• IP address
• Device model, operating system version, and app version
• Ad interaction data (impressions, clicks, video completion events)

This data is collected and processed by Google in accordance with Google's Privacy Policy.

Firebase SDKs. The App integrates Firebase Core, Firebase Authentication, and Cloud Firestore. These SDKs automatically collect:

• Instance ID (a unique identifier for your app installation)
• Operating system version and device model
• App version

Firebase data is processed by Google in accordance with Firebase's privacy documentation.

Backend hosting (Railway). Our backend server is hosted on Railway. Standard HTTP server logs containing IP addresses, request timestamps, and request paths are generated as part of normal server operation.

3. How We Use Your Information

We use the information collected for the following purposes:

• To provide the core study experience. Your flashcards, decks, and study data are stored locally on your device so you can review cards, track your progress, and schedule future reviews using the spaced-repetition algorithm.
• To enable AI answer scoring. When you request an AI evaluation of your answer, your card's question, reference answer, and your typed answer are sent to our backend and then to one of our AI service providers (NVIDIA NIM or OpenRouter). The score is returned to you and displayed within the App. This text is not permanently stored by us beyond the duration of the request. AI providers may process data according to their own policies (see Section 4).
• To generate flashcards from images. When you use the image-to-card feature, your image is temporarily processed by the AI service to create flashcard content. The image is not stored permanently.
• To manage the credit system. Your credit balance is stored securely on our backend server. Credits are consumed when you use AI features and can be replenished by watching rewarded ads.
• To process ad rewards. When you voluntarily choose to watch a rewarded ad, your account is credited with in-app credits after the ad completes successfully.
• To schedule study reminders. Your notification preferences (time, frequency, daily goal) are stored locally to send you local push notifications as requested.
• To authenticate your account. Your Firebase authentication data is used to verify your identity when communicating with our backend server.
• To show advertisements. AdMob uses your device advertising ID and app usage signals to serve relevant advertisements within the App.
• To improve app performance and fix bugs. Aggregated, non-personal usage patterns may be reviewed to improve the App's functionality.

4. Information Shared With Third Parties

We share your personal information with the following third-party service providers only as necessary to provide the App's functionality. We do not sell your personal data to any third party.

We may also disclose your information if required to do so by law, regulation, or legal process (for example, in response to a court order or government request).

5. Advertising

The App displays advertisements served by Google AdMob. We use two types of ad formats:

• Interstitial ads — Full-screen ads that appear at natural transition points between card reviews, with frequency limits to minimise disruption.
• Rewarded ads — Optional video ads that you may voluntarily choose to watch in exchange for in-app credits (5 credits per ad). You are shown a clear opt-in prompt describing the reward before the ad plays. You can decline without any consequence to your use of the App.

AdMob may use your device's advertising identifier to serve ads that are relevant to your interests (personalized ads). You can control personalized advertising as follows:

• Android: Open Google Settings → Ads → Opt out of Ads Personalization.
• iOS: Open Settings → Privacy & Security → Tracking → disable "Allow Apps to Request to Track."

If you opt out of personalized ads, you will still see ads, but they may be less relevant to you.

6. Data Storage & Security

Where your data is stored:

• On your device (local storage): Most of your study data — flashcards, decks, review history, daily statistics, and app preferences — is stored locally on your device in a SQLite database (flashlearn.db) and in SharedPreferences. Profile images are saved to your device's application documents directory. This data never leaves your device unless you explicitly use a feature that transmits it (such as AI scoring).
• On Firebase servers: Your Firebase authentication credentials are managed by Google's Firebase Auth service. User settings (school name, daily goal, reminder preferences) are synced to Cloud Firestore.
• On our backend server (Railway): The backend server processes AI scoring requests and manages the credit system. It does not permanently store your flashcard content, answers, or images — it passes data to the AI provider (NVIDIA NIM or OpenRouter) and returns the result.

Security measures:

• All communication between the App and our backend uses HTTPS encryption.
• Authentication to the backend is secured using Firebase ID tokens (JWTs).
• Firestore access is governed by Firebase Security Rules, limiting access to authenticated users.
• The backend admin endpoint (for credit management) is protected by an API key verified using constant-time comparison.

No system is 100% secure. While we implement industry-standard security measures, we cannot guarantee the absolute security of your data. You are responsible for keeping your device and Google account credentials secure.

7. Data Retention

Credit data. Your credit balance, managed by our backend server, is retained while your account remains active. Credits are refreshed on a schedule determined by the server (typically every 24 hours). There is no automatic deletion of credit records.

Study and flashcard data. Your flashcards, decks, review history, and daily statistics are stored locally on your device. This data is retained until you manually delete individual items (decks, cards) or uninstall the App.

Account data. The App currently does not offer an in-app "delete account" feature. If you wish to have your account and associated data deleted, please contact us at studywithreviso@gmail.com. We will process your deletion request within 30 days. Deletion will remove your Firebase Auth record, your Firestore credit data, and any other backend-stored data associated with your account.

Local data on uninstall. When you uninstall the App, all locally stored data (SQLite database, SharedPreferences, profile images) is automatically removed from your device. Data stored on our backend (Firebase credits, auth records) is not automatically deleted on uninstall — you must request deletion as described above.

8. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to access: You may request a copy of the personal data we hold about you by contacting us.
• Right to rectification: You may correct inaccurate data. Most of your data can be edited directly within the App (e.g., flashcard content, deck names, profile information).
• Right to deletion ("right to be forgotten"): You may request deletion of your account and associated data by emailing us at studywithreviso@gmail.com. We will process your request within 30 days.
• Right to opt out of personalized advertising: You can disable personalized ads through your device settings as described in Section 5 above.
• Right to withdraw consent: If you have consented to a data-processing activity, you may withdraw your consent at any time. Please note that withdrawing consent for data processing that is essential to the App's functionality may prevent you from using certain features.

To exercise any of these rights, please contact us at studywithreviso@gmail.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

9. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. The App does not include an age gate or ask for the user's age during onboarding.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at studywithreviso@gmail.com. We will take steps to delete the information promptly.

If you are a parent or educator using this App with minors, please review this policy and contact us before use. The App does not set tagForChildDirectedTreatment on its ad requests, which means ads shown may not be filtered for child-appropriate content.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by one or more of the following methods:

• Displaying an in-app notice or prompt
• Updating the "Last updated" date at the top of this policy
• Sending an email notification (if we have your email address) where feasible

We encourage you to review this Privacy Policy periodically. Your continued use of the App after any changes to this policy constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• App: Reviso
• Email: studywithreviso@gmail.com
• Website: https://abhishek-roshan-000.github.io/Reviso-landingPage/privacy