Privacy policy

What we collect

Account: your email address, and a password if you choose to set one. Passwords are stored only as hashes by our authentication provider. If you sign in with a magic link, we hold no password at all.

Study activity: which cards you review, how you rate them, the review schedule that produces, your streak and daily goal, cards you save, notes you write, and answers you draft. This is the product; without it we cannot schedule your reviews or show your progress.

Payments, on the website only: if you subscribe to Pro, Stripe processes the payment. We receive a customer reference and the status of the subscription. Card details never reach our servers and are never stored by us.

Technical: our hosting providers keep standard server logs, including IP address and request time, for security and debugging.

We do not collect your name, contacts, location, photos, or device identifiers for advertising. Neither the app nor the website includes advertising networks or third-party analytics SDKs.

How we use it

To run the service: sign you in, schedule your reviews, sync progress between your devices, show your progress, unlock Pro content you have paid for, and answer support requests.

We do not sell personal data, and we do not use it for advertising.

Where it is kept

Your account and study data are stored by Supabase, our database and authentication provider, in the United States. The website is hosted by Vercel. Payments are handled by Stripe. Each of these processes data only to provide its service to us.

On your device, the app keeps your sign-in session in the system keychain, a queue of reviews made while offline until they have synced, and your deck filter preferences.

Retention and deletion

We keep your data while your account exists. Delete your account from the Account screen in the app or from Settings on the website. This permanently removes your account and all of your study data, and cancels any subscription. It cannot be undone.

Data stored on your device is removed when you sign out or delete the app. Server logs are kept for a limited period and then discarded.

Sharing

We share personal data only with the providers named above, only so they can provide their service to us, and when the law requires it. We do not share it with advertisers or data brokers.

Children

IB Reps is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it.

Your choices

You can use the free cards without an account, in which case we collect nothing about you beyond server logs.

You can delete your account and all of its data yourself at any time, as described above. To ask for a copy of your data, or with any other question about it, contact us at the address below.

Changes

When this policy changes, the effective date at the top changes with it. If a change matters to you, we will say so in the app or by email before it takes effect.

Contact

Write to support@ibreps.com.