Privacy Policy

Last updated: 5 August 2026

Who we are

Retainory ("we", "us") publishes the Retainory app for iOS. You can reach us at support@retainory.com.

What stays on your device

The following never leaves your iPhone. We cannot see it, and we have no copy of it:

• Your study objectives and subjects
• Your flashcards and their contents
• Review history, ratings, and scheduling state
• App settings and preferences

Because there is no account and no server-side copy, deleting the app deletes this data permanently. There is no backup or restore on our side.

What is sent to us

Material you submit for flashcard generation

When you ask Retainory to generate flashcards from a PDF or from text you paste, that content is sent to our server, which forwards it to Google's Gemini API to produce the cards. This happens only when you explicitly start a generation.

We process this content in memory to fulfil the request. We do not write it to a database or to disk, and it is not associated with you or with any identifier that we can trace back to you. Google's handling of the content is governed by their terms — see Service providers below.

Please don't submit material you consider sensitive or confidential, or material you don't have the right to share.

Anonymous usage events

The app sends us events describing how features are used — for example, that an onboarding step completed, or that a generation succeeded or failed. These events contain:

• A random identifier generated when you install the app (an "installation ID"). It is not your Apple ID, your device ID, or your advertising identifier, and it is not linked to your identity.
• The name of the event, which flow it belongs to, whether it succeeded or failed, timestamps, and internal request IDs.

These events do not contain your notes, your flashcards, or their contents. We use them only to find broken flows and to understand which features are used. Reinstalling the app generates a new installation ID, which severs any link to prior events.

Device integrity checks

To stop automated abuse of the flashcard generation service, the app uses Apple's App Attest. Your device produces a cryptographic attestation proving the request came from a genuine, unmodified copy of Retainory. We store the resulting public key identifier. It contains no personal information and cannot be used to identify you or your device outside this service.

What we never do

• We do not track you across other apps or websites.
• We do not show ads.
• We do not sell or share your data with data brokers.
• We do not use third-party analytics, attribution, or advertising SDKs.
• We do not ask for your contacts, photos, or location.

Service providers

We use a small number of providers to run the service. They process data only to deliver it on our behalf:

• Google Cloud (Cloud Run) — hosts our server and stores its operational logs.
• Google Gemini API — generates flashcards from material you submit.
• Apple — distributes the app and provides App Attest. Any App Store data Apple collects is governed by Apple's privacy policy, not this one.

How long we keep things

• Material submitted for generation: processed in memory and discarded once your flashcards are returned. It is not retained.
• Usage events and server logs: retained for up to 30 days, then deleted automatically.
• App Attest key identifiers: retained while the app remains installed and in use.

Your choices and rights

Because we hold no account and no profile, most data-subject requests resolve simply:

• Deletion. Deleting the app removes all your study data, since it exists only on your device. Deleting and reinstalling also discards your installation ID, so any earlier usage events can no longer be connected to your new install.
• Access. If you believe we hold data about you and want a copy or its deletion, email support@retainory.com. Please note that because usage events carry only a random installation ID, we generally have no way to link any record to you as an individual, and so may be unable to identify data as yours.

If you are in the EEA or UK, our legal basis for processing generation content is performance of our agreement with you, and for usage events it is our legitimate interest in maintaining and improving the app.

Children

Retainory is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

International transfers

Our servers are operated in the United States. If you use Retainory from elsewhere, the limited data described above is processed there.

Changes to this policy

If we change this policy, we will update the date at the top of this page. Material changes will also be surfaced in the app before they take effect.

Contact

Questions about this policy: support@retainory.com.