Introduction#
This Privacy Policy explains what LeitnerPlus collects and how that information is used for an MVP learning-card app. It should be reviewed and finalized before a public or paid launch.
Information we collect#
We collect information needed to operate the app, including account information, learning content, uploaded files, review activity, settings, and basic technical information.
Account information#
Authentication may use email/password or Google OAuth through Supabase Auth. We may receive your email address and basic provider metadata needed to sign you in.
Learning content and uploaded images#
Cards, questions, answers, categories, tags, learning spaces, colors, and uploaded question images are stored so you can create, browse, edit, and review your material. Card images are stored in private Supabase Storage buckets and displayed with signed URLs.
Review history and usage data#
LeitnerPlus stores review logs, ratings, due dates, FSRS state, difficulty, stability, repetitions, and lapses so the review system can schedule future study sessions.
Authentication providers#
If Google sign-in is enabled, Google handles the OAuth sign-in step. LeitnerPlus does not require Google client secrets in frontend code.
How we use data#
Data is used to provide authentication, save cards and images, organize spaces and tags, run review scheduling, show dashboard stats, maintain settings, and improve the learning workflow.
Storage and security#
LeitnerPlus uses Supabase PostgreSQL, Supabase Auth, Supabase Storage, and Vercel hosting. Row Level Security is used for app tables. We do not claim end-to-end encryption or specific compliance certifications unless separately documented.
Third-party services#
The app currently relies on Supabase for auth, database, and storage; Vercel for hosting; and Google OAuth if sign-in with Google is enabled.
Cookies/local storage#
Auth sessions use cookies managed through Supabase SSR helpers. Theme preferences may use local storage through next-themes. Some profile preferences may also be stored in the profile settings table if installed.
Data retention#
Data is generally retained while your account exists or while needed to provide the app. When you delete your account in Settings, the account is closed: you are signed out everywhere and can no longer sign in. The closed account’s data is kept so that the account can be restored at your request, until you ask us to erase it.
User choices and deletion requests#
You can edit or delete cards and images inside the app, and delete your account in Settings › Account › Delete account. To have a closed account restored, to have its data erased for good, or for privacy questions, email support at support@leitnerplus.com.
International users#
The services used by LeitnerPlus may process data in different regions. Do not use the app if your local laws or organization rules prohibit this processing.
Visit statistics#
If you accept it in the banner shown on your first visit, the website counts visits with Google Analytics: the pages you open, how far you scroll, outbound links, sign-ins and sign-ups, with your IP address shortened by Google. Google Analytics then sets its own cookies. We use this only to see which pages help; we show no advertising and sell no data. If you decline, or your browser sends Global Privacy Control, nothing is loaded. To change your choice, clear this site's data in your browser and choose again in the banner.
Browser extension#
If you use the LeitnerPlus extension for YouTube and Netflix, the extension privacy page at /extension/privacy explains what it stores, what it sends where, and how to delete that data.
Changes to this policy#
When this Privacy Policy materially changes, LeitnerPlus may require acceptance of a new legal version before continued use of protected app features.
Contact#
For privacy questions, contact support@leitnerplus.com. Email is the contact channel for privacy requests.