Privacy Policy

This Privacy Policy describes how PaperFlip, LLC (“PaperFlip,” “we,” “us”) collects, uses, and protects information when you use our website at paperflip.ai and our related services (the “Service”).

We wrote this policy to be readable. If anything here is unclear, email us at privacy@paperflip.ai and we'll clarify.

We collect the following categories of information:

Account information

When you sign up, we collect your name, email address, and a one-way-hashed password. If you sign in with Google, we receive your name, email address, and Google account ID from Google — nothing else.

Payment information

Paid subscriptions are processed by Stripe, Inc. Stripe collects your payment card details directly; we never see or store your full card number. We store a Stripe customer ID, your subscription plan, and the status and billing dates of your subscription.

Content you submit

To generate flashcards, you submit source material — YouTube URLs, uploaded PDFs, article URLs, or pasted text. We process this material to extract text and to produce flashcards. The resulting deck (flashcards, source title, and source URL or filename) is stored in your account so you can study it later.

Usage & technical information

When you use the Service we automatically collect standard technical information: your IP address, browser type, device type, pages visited, timestamps, and error logs. This information helps us keep the Service running, diagnose problems, and detect abuse.

We use the information above to:

• Provide the Service — generate flashcards, store your decks, authenticate you, and power study sessions.
• Process payments and manage subscriptions.
• Send transactional emails (account confirmations, receipts, password resets, billing notifications).
• Debug, secure, and improve the Service, including aggregate analytics on feature usage.
• Detect and prevent fraud, abuse, and violations of our Terms of Service.
• Comply with legal obligations.

We do not sell your personal information. We do not use your source content or flashcards to train AI models — not ours, and not our providers'.

We share information with a small set of service providers that help us run PaperFlip. Each processes only what's needed to perform its function:

We may also disclose information if required by law, to protect the safety of users or the public, or as part of a merger, acquisition, or sale of assets (in which case we will notify you before your information becomes subject to a different privacy policy).

We keep your account information and decks for as long as your account is active. If you delete your account, we delete your decks, study sessions, and account details within 30 days. We may retain certain records longer where required for legal, tax, or accounting purposes (for example, invoice records), or where needed to enforce our agreements or resolve disputes.

Technical logs (IP addresses, error logs) are typically retained for up to 90 days and then discarded or aggregated.

We protect your information with industry-standard measures: encrypted connections (HTTPS), encrypted storage at rest, hashed passwords, and scoped access controls. No system is perfectly secure, so we cannot guarantee absolute security, but we take it seriously and will notify you of any breach affecting your account as required by law.

You can:

• Access & update your account information from your settings page.
• Export your decks as CSV from the deck page (Pro plan).
• Delete individual decks at any time from the deck page.
• Delete your account from your settings page. This removes your decks and study history.
• Unsubscribe from non-essential emails via the link in each email. Transactional emails (billing, security) cannot be opted out of while your account is active.

To request a copy of data we hold about you, or if you have any other privacy question, email privacy@paperflip.ai. We'll respond within a reasonable period, typically 30 days.

PaperFlip is not intended for children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, please contact us at privacy@paperflip.ai and we will delete it.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. Most browsers let you block cookies, but blocking essential cookies will prevent you from signing in.

PaperFlip is operated from the United States and the information we collect is processed there and in the other countries where our service providers operate. If you access the Service from outside the United States, you consent to the transfer and processing of your information in the United States and those other countries.

We may update this policy from time to time. If we make material changes, we will notify you by email or via the Service before the changes take effect. The “Effective” date at the top of this page indicates when the current version took effect.

Privacy questions? Email privacy@paperflip.ai. For anything else, hello@paperflip.ai.