Privacy policy
Last updated: October 31, 2026
This English version is provided for convenience. The French text is the reference.
Réviser is a spaced-repetition app. It can be fed by the artificial intelligence assistant you already use (Claude, ChatGPT, Cursor…), through a connector. This page explains what data we process, why, with whom, for how long, and how to exercise your rights under the General Data Protection Regulation (GDPR).
1. Data controller
Emile METRAL. Contact: [email protected]. For any question about your data, or to exercise your rights, write to this address.
2. What Réviser does, and does not do, with AI
Réviser itself calls no generative AI model. Neither the app's server nor its connector (the "MCP server") sends your data to an AI provider. Cards created automatically come from your assistant, under your own account with that provider.
Your relationship with your AI provider (Anthropic, OpenAI or another) is separate from ours. The provider is the first to process the content of your conversations, before anything reaches Réviser. That processing is governed by its own terms and privacy policy, which you accepted with it; it is not covered by our commitments and we have no contractual control over it. We only receive what your assistant chooses to send to the connector.
The only AI component run by us is voice transcription (the Whisper model), used when you answer a card out loud. It runs on our own servers: the recording is sent to no third party, it is transcribed and then deleted immediately, without being kept.
Listening to a card's pronunciation uses your browser's speech synthesis, without going through our servers. Réviser prefers a voice built into the device; when the browser only offers an online voice (for example some Chrome voices), the text of the card being read is sent to the browser vendor's service, under its own terms.
3. Data processed, purposes and legal bases
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, name, account ID (managed by Clerk) | Create your account and sign you in | Performance of the contract (Art. 6(1)(b)) |
| Themes, cards, lessons, review history, reminder settings | Provide the review service | Performance of the contract (Art. 6(1)(b)) |
| Content created by your AI assistant through the connector | Automatic capture of what is worth reviewing | Consent (Art. 6(1)(a)), given and withdrawn in the settings |
| Audio recordings of your spoken answers | Transcription, then immediate deletion | Consent (Art. 6(1)(a)), given and withdrawn in the settings |
| Notification subscription (technical address provided by your browser) | Send you review reminders | Consent (browser permission), which you can withdraw at any time |
| Result of the age check (adult or not, and date of the declaration); the date of birth you enter is not kept | Keep the service for adults only | Legitimate interest (Art. 6(1)(f)) |
| Connector tokens (stored as an irreversible hash), timestamps of your consents | Secure access and prove your choices | Performance of the contract; duty to demonstrate consent (Art. 7(1)) |
| Technical logs (account ID, IP address, requests, without card content), error reports, usage counters | Security, abuse prevention, free plan quotas, bug fixing | Legitimate interest (Art. 6(1)(f)) |
Our logs and error reports never contain the content of your cards or your email address. We use no advertising or audience measurement tools, and sell no data.
Sensitive data
Cards are free text, often taken from a private conversation with your assistant. They may therefore contain, without our being able to detect it, sensitive information (health, opinions, religious beliefs, sexual orientation…). We do not analyze them and use them for no purpose other than showing them in your reviews. Avoid putting this kind of information in them; you can delete a card, or your whole account, at any time.
4. Recipients and processors
Your data is accessible only to you and, to maintain the service, to the data controller. It passes through the following providers:
| Provider | Role | Location and safeguards |
|---|---|---|
| Hetzner Online GmbH | Hosting of the servers and the database | European Union (Falkenstein, Germany) |
| Cloudflare, Inc. | Secure routing of traffic to our servers (encrypted tunnel): sees requests pass through, content included, without keeping them. Storage of backup copies, encrypted before upload (Cloudflare R2) | United States: EU–US Data Privacy Framework, supplemented by standard contractual clauses |
| Grafana Labs (Grafana Cloud) | Monitoring: access logs (IP address, page requested, date), the app's technical logs, service availability | European Union region |
| Clerk, Inc. | Authentication and account management, including authorization of AI connectors | United States: EU–US Data Privacy Framework, supplemented by standard contractual clauses |
| Functional Software, Inc. (Sentry) | Technical error reports | Data hosted in the European Union (Germany) |
| Your browser's notification service (Google, Mozilla or Apple) | Deliver reminders, if you turn them on; the content of notifications is encrypted | Chosen by your browser, under its own terms |
Your AI provider is not our processor: see section 2.
5. Retention periods
- Account data and content: as long as your account exists. You can delete each item one by one, or the whole account from the settings; deletion is then immediate and permanent.
- Audio recordings: not kept, deleted as soon as the transcription ends.
- Backups: a copy of the database is made every day and kept on a rotation (7 daily, 4 weekly, 6 monthly backups), on the server and, encrypted, at Cloudflare R2. Deleted data may therefore remain in these backups for up to 6 months, unused, before disappearing from them too.
- Access logs (IP address, page requested, date) and technical logs: 14 days.
- Error reports: 30 days at most.
6. Your rights
You have the following rights over your data:
- Access and portability: the "Export my data" button in the settings gives you all your content in a reusable JSON file.
- Rectification: edit your cards in the app, and your account information in your profile.
- Erasure: "Delete my account", in the settings.
- Withdrawal of consent: AI capture and audio processing are turned off separately in the settings, without deleting the account. Withdrawal does not affect processing already carried out.
- Objection to and restriction of processing, and the right to set instructions for what happens to your data after your death.
For any right you cannot exercise directly in the app, write to [email protected]. We answer within one month. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr/en/complaints), or with the authority of the country where you live.
7. Audience
Réviser is for adults only (18 and over). A date of birth is asked at first sign-in; only the result is kept. If it shows you are under 18, access is refused and only that refusal is recorded on the account, with no other data; you can ask for the account to be deleted at any time.
8. Security
Traffic is encrypted (HTTPS). Connector tokens are never stored in clear text, only allow reading and adding content (never changing or deleting it), and can be revoked at any time. Each account's data is strictly isolated from the others.
9. Changes
This policy may change. In case of a significant change, you will be told in the app before it takes effect. The date of the last update is shown at the top of this page.