Your privacy at a glance
Your decks are private unless you share them. We use your account details, learning material and progress to run Tivvle. Optional AI features use the material you submit. We do not sell your personal information or use in-app advertising trackers.
Tivvle’s operator details are on our Legal page. For questions or requests, use our support form.
What we collect and why
- Your account: email, account identifier, declared age range and Terms agreement, to provide and secure your account.
- Your learning: decks, cards, ratings, study activity, goals, streaks and challenge results, to save and sync your learning.
- Your plan: trial dates, subscription status and AI usage, to manage access and allowances.
- Support and diagnostics: messages you send us and limited account-linked usage and diagnostic events, including app opens, session duration, feature use, platform, version, timings and error categories, to answer requests and improve reliability. These events exclude card text, uploaded material, passwords and raw error messages.
On your device
Downloaded decks, preferences, unfinished drafts and pending progress may be stored on your device. Unsynced work is not yet saved to your cloud account. Check that it has synced before clearing storage or uninstalling. Read aloud uses your device’s voices and services; availability and offline use depend on your device.
AI and sharing
AI creation is optional. Your submitted text, images or text extracted from supported PDFs go to OpenAI to create draft cards. The original PDF is not sent. Avoid confidential or sensitive personal information, and check generated answers before saving.
Before creating a shared-deck link, we also send its content to OpenAI for a safety check. We reject detected web links rather than opening or checking their destinations. People with your link can view the shared content. Copies they save belong to their accounts and may remain after you delete your original or account.
Safety checks
Automated checks can block unsuitable AI or shared content. We retain limited account-linked records of blocked checks, including their time, source, categories and review status, without copying the checked content into those records. Normal studying does not scan your private decks. The same checks apply to adults and teenagers.
A flag can be wrong and does not automatically ban an account. Serious or repeated flags may prompt a review and feature restrictions; existing saved decks and progress are not deleted by those restrictions. Use the support form to report a concern or appeal a decision.
Who processes information
Supabase provides authentication and cloud storage; our main database is in Ireland. OpenAI processes AI and sharing-check submissions. Website and email providers handle the connection details or messages needed to deliver and protect the service. Apple and Google handle downloads and purchases under their own privacy notices.
Providers may process information outside the UK, including the EEA and United States. Where required, data-processing agreements and approved transfer safeguards apply. You can ask us about the safeguards relevant to your information.
Our reasons for using information
We use information to fulfil our contract with you by providing your account and chosen features; for legitimate interests in security, reliability, preventing misuse and answering enquiries; and to meet legal obligations. Optional marketing emails require separate consent, which you can withdraw without affecting your account.
You can object to legitimate-interest processing. We do not make solely automated decisions about you with legal or similarly significant effects.
How long we keep information
- Accounts and saved learning: while you use the account, until you delete it or the relevant data. We do not automatically delete inactive accounts.
- AI drafts: server drafts expire after 24 hours. Saved cards and local drafts are separate; usage records remain as needed to manage allowances. OpenAI response storage is disabled, but its standard abuse-monitoring logs may retain submitted content for up to 30 days, subject to exceptions in its data controls.
- Diagnostics and shared-link records: normally 90 days. Limited account-deletion reporting retains account references and masked-email fields for up to 90 days.
- Safety records: reviewed after 90 days, rather than automatically deleted. Restrictions and related decisions remain as needed to manage the restriction or a case.
- Support, complaints and privacy requests: reviewed 12 months after closure, deleting what is no longer needed unless an unresolved case or legal reason requires longer retention.
Account deletion removes the live account and its owned cloud learning data. Backups, security and administrative records may remain separately as needed for recovery, legal obligations or disputes. It does not remove other users’ saved copies or cancel a store subscription.
Your choices and rights
Through our support form or Settings & Help, you can request access or a portable copy, correction, deletion, restriction, or object to how information is used. Rights depend on the circumstances. We record requests and may check ownership; never send passwords or sign-in codes.
We aim to reply to routine support within 48 hours. Privacy requests normally receive a response within one month, subject to applicable identity checks and lawful extensions, which we explain. You can complain directly to the Information Commissioner’s Office.
Age and privacy
Tivvle is for people aged 13 and over. We ask for an age range, not your full birthday, and apply high-privacy defaults to adults and teenagers. Report suspected under-13 accounts or safety concerns through the support form.
Website and emails
The public website does not use visitor analytics or advertising trackers. Browser storage caches public plan details; hosting providers also process connection records. Support forms send information when you submit them.
Using Tivvle or contacting support does not sign you up to marketing. Marketing emails require a separate opt-in and an unsubscribe option.
Updates
We update this notice when our practices change and explain significant changes through an appropriate service notice. Use the support form if anything is unclear.