Privacy Policy

Last updated: June 1, 2026

1. Who We Are

Deckify is operated by Zasu OÜ, a company registered in Estonia. Our service is available at deckify.ee. You can contact us at zazzislab@gmail.com.

2. What Data We Collect

  • Account data: email address and display name when you register.
  • Content you create: flashcard decks, notes, and study data stored in your account.
  • Usage data: AI generation counts, study session statistics, and streak data.
  • Public profile: if you play the brain games, your display name and high scores are shown on public leaderboards visible to other users.
  • Feedback: if you submit feedback, we store your message and (optionally) a screenshot you attach, along with the page URL and browser type.
  • Payment data: subscription status and billing details managed by Stripe. We do not store your card details.
  • Technical data: a hashed IP address (used only for rate limiting — we never store your raw IP), browser type, and pseudonymised product analytics via Google Analytics (loaded only if you accept analytics cookies). We never send your name, email, or study content to Google Analytics.

3. How We Use Your Data

  • To provide and improve our service.
  • To process payments and manage your subscription.
  • To send transactional emails (account verification, password reset).
  • To enforce usage limits and prevent abuse.
  • To understand aggregate, pseudonymised usage statistics and improve the product.

4. AI Processing

Text you submit for AI-powered flashcard generation, summaries, and MCQ tests is sent to third-party AI providers (Anthropic). Do not submit sensitive personal information in your study materials. AI providers process your input according to their own privacy policies.

5. Data Sharing

We do not sell your personal data. We share data only with:

  • Firebase / Google: authentication, database, and hosting.
  • Stripe: payment processing.
  • Anthropic: AI content generation.
  • Google Analytics: pseudonymised event statistics (page views and feature usage). Loaded only after you accept analytics cookies; never includes your name, email, or study content.

6. Data Retention

Your data is retained as long as your account is active. You may request deletion of your account and all associated data by emailing us. Anonymised usage statistics may be retained indefinitely.

7. Your Rights (GDPR)

As an Estonian company, we comply with GDPR. You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Object to or restrict processing of your data.
  • Data portability.

To exercise these rights, contact us at zazzislab@gmail.com.

8. Cookies

We use essential local storage to keep you logged in and remember your preferences. Analytics cookies (Google Analytics) are only set if you click “Accept” on our cookie banner — if you decline, no analytics cookies are loaded. You can change your choice at any time by clearing your browser storage, and you can disable cookies entirely in your browser settings.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by updating the date at the top of this page.

10. Contact

Zasu OÜ · Estonia · zazzislab@gmail.com