Privacy Policy — Wysdom AI

Wysdom AI (“Wysdom AI,” “we,” “us”) makes a study app for iPhone and iPad. This policy explains what the app collects, where it goes, and what you can turn off.

1. Short version

Your study documents are sent to AI providers so the app can generate questions, flashcards and answer feedback. This is the core of what the app does, and you can turn it off — see Section 3.
We do not sell your personal data, and we do not share your documents with advertisers.
We do measure which ads bring people to the app, using your device’s advertising identifier — only if you allow it when iOS asks.
Your study history stays on your device.

2. Information we collect

2.1 Information you give us

What	Why	Where it is kept
Email address and display name	To create and sign you into your account	Firebase Authentication (Google LLC)
Sign in with Apple identifier	Same, if you use Apple sign-in. If you chose Hide My Email, we only ever see the relay address	Firebase Authentication
Documents you upload (PDF, text, images)	To generate your study material	See Section 3

2.2 Information collected automatically

What	Why	Who receives it
Device model, OS version, app version, locale	Diagnostics and product analytics	PostHog
Product events (screens viewed, uploads started, study sessions, paywall views)	To understand which features are used	PostHog
Install attribution data, IP address, and — only with your permission — the iOS Advertising Identifier (IDFA)	To measure which ads bring students to the app	AppsFlyer, and its advertising partners as described in Section 5
Subscription status, purchase and renewal events	To unlock premium features and manage your subscription	RevenueCat, Apple

2.3 Information we do not collect

We do not collect your contacts, photo library, precise location, health data, or browsing activity in other apps.
Your document filenames and document contents are never sent to our analytics providers. When you upload a file, the analytics event records only the approximate length, the page count, and which extraction method was used — never the file, its name, or its text.
Your study history, scores and streaks are stored on your device only. They are not uploaded to our servers.

3. Artificial intelligence and your documents

Read this section before you upload anything you would not want processed by a third party.

Wysdom AI does not run its own AI models. It sends your material to third-party AI providers, which process it and send back generated study content. Here is exactly what happens.

3.1 What is sent, to whom, and why

When you upload a PDF or image

The file is sent to our backend server (operated by us on Vercel, hosted in the United States).
- Files under 2 MB are sent directly.
- Files of 2 MB or larger are first uploaded to Firebase Storage (Google LLC), and the server is given a temporary link. The app deletes that file from Firebase Storage as soon as processing finishes.
Our server sends the file to Mistral AI (Mistral AI SAS, France) for optical character recognition, using the mistral-ocr-latest model. This is how the app reads scanned pages and images.
Our server deletes the file from Mistral’s systems immediately after the text is extracted.

When you upload a plain text (.txt) file

The text is read on your device. The file itself is not uploaded for OCR.

When study material is generated

The extracted text — or the text of your .txt file — is sent to OpenAI (OpenAI, L.L.C., United States), using the gpt-4.1-nano model, which writes your multiple-choice questions, flashcards, Infinite Scroll and Recall Rush items, and Open Response prompts.
When you answer an Open Response question, your written answer is also sent to OpenAI so it can be graded against the model answer.

3.2 What we do with it

We do not store your documents or their extracted text on our servers after your request is answered. The text is held in memory for the duration of the request only.
We do not use your documents, your answers, or the generated study material to train any AI model.
Our server logs record that a request happened — your account email, a timestamp, and the number of characters extracted. The logs do not contain your document text.

3.3 What the AI providers do with it

OpenAI: we access OpenAI through its API. OpenAI states that API data is not used to train its models by default, and is retained for a limited period for abuse monitoring. See OpenAI’s privacy policy.
Mistral AI: we access Mistral through its API. We delete each uploaded file from Mistral’s systems as soon as processing completes. See Mistral’s terms and privacy policy.

Because these providers are located in the United States and the European Union, uploading a document means it is transferred internationally. See Section 7.

3.4 Turning AI features off

You can switch AI processing off entirely:

Profile → Privacy & Data → AI Features

When AI features are off:

Nothing from your documents is sent to our server, to OpenAI, to Mistral, or to Firebase Storage.
Document upload is disabled, and all five study modes stop working — Multiple Choice, Flashcards, Infinite Scroll, Recall Rush and Open Response. The app cannot generate study material without them.
Your account, your saved study history and your subscription are unaffected.
You can turn AI features back on at any time in the same place.

We want to be direct about this: turning AI off leaves very little of the app working. We offer the choice anyway, because it should be yours to make.

3.5 Accuracy

Questions, flashcards, explanations and answer grading are produced by AI and may be inaccurate, incomplete or wrong. Wysdom AI is a study aid, not an authority. Do not rely on it for medical, legal, financial or safety-critical information, and always check generated material against your source. Grading of Open Response answers is an AI estimate and is not a substitute for your instructor’s assessment.

3.6 Your responsibilities

Do not upload material you do not have the right to upload — copyrighted texts you do not own or license, another person’s confidential information, medical or financial records belonging to someone else, or anything covered by an obligation of confidentiality. Do not use Wysdom AI to cheat on an assessment where doing so is prohibited.

4. Why we process your information

For users in the UK, EU and other regions with equivalent laws, our legal bases are:

Performance of a contract — creating your account, processing your documents into study material, managing your subscription.
Consent — advertising measurement using your device’s advertising identifier, which we request through the iOS App Tracking Transparency prompt. You may withdraw it at any time.
Legitimate interests — product analytics, diagnostics, security, fraud and abuse prevention, in a way we consider proportionate to your privacy.

5. Advertising measurement

If you allow tracking when iOS asks:

We use AppsFlyer to measure which advertisement brought you to the app.
AppsFlyer receives your device’s advertising identifier (IDFA), IP address, and app events such as “signed up,” “uploaded a document,” “started a subscription.”
AppsFlyer forwards conversion signals to the advertising platform the install came from — currently TikTok — so we can measure whether an ad worked. Apple’s SKAdNetwork also reports privacy-preserving, aggregated install and conversion data to advertising platforms.

Your study documents are never included in any of this. Ad partners receive event names and identifiers, never your files or their contents.

If you decline the tracking prompt, no advertising identifier is collected and AppsFlyer cannot link your install to an individual ad.

You can change your choice at any time in iOS Settings → Privacy & Security → Tracking, or from Profile → Ad Tracking in the app.

6. Who we share information with

We share personal information only with the service providers listed below, each of which processes it on our instructions:

Provider	Purpose	Data
Google LLC (Firebase)	Authentication; temporary storage of large uploads	Email, account identifier, uploaded files (deleted after processing)
Vercel Inc.	Hosting our backend server	Requests, including document text in transit
OpenAI, L.L.C.	Generating study content	Extracted document text; Open Response answers
Mistral AI SAS	Optical character recognition	Uploaded PDFs and images (deleted after processing)
RevenueCat, Inc.	Subscription management	Purchase events, subscriber identifier, attribution attributes
AppsFlyer Ltd.	Advertising measurement	Advertising identifier (with consent), IP address, app events
PostHog, Inc.	Product analytics	Device and app metadata, product events
Apple Inc.	App distribution, payment, SKAdNetwork	Purchase and subscription data

We may also disclose information where required by law, to enforce our terms, or in connection with a merger or acquisition (in which case this policy continues to apply to information transferred).

We do not sell your personal information, and we do not share it for cross-context behavioural advertising as those terms are defined under California law.

7. International transfers

Wysdom AI is operated from the United States. Our providers are located in the United States and the European Union. Where we transfer personal data out of the UK or EEA, we rely on the UK International Data Transfer Addendum or the European Commission’s Standard Contractual Clauses.

8. How long we keep information

Data	Retention
Account (email, name)	Until you delete your account
Uploaded documents and extracted text	Not retained after your request is answered; files in Firebase Storage and at Mistral are deleted immediately after processing
Server logs (email, timestamp, character counts — no document text)	Up to 30 days
Product analytics events	Up to 12 months
Attribution data	Up to 24 months
Study history, scores, streaks	On your device, until you delete the app or your account

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal data, to object to processing, and to withdraw consent. To exercise any of these, email wysdomai1@gmail.com.

You can act on most of these directly in the app:

Delete your account and all associated data — Profile → Delete Account. This is immediate and cannot be undone.
Turn off AI processing — Profile → Privacy & Data → AI Features.
Turn off ad tracking — Profile → Ad Tracking, or iOS Settings → Privacy & Security → Tracking.

We will not discriminate against you for exercising any privacy right.

10. Children

Wysdom AI is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email wysdomai1@gmail.com and we will delete it.

Users between 13 and the age of majority in their jurisdiction should review this policy with a parent or guardian.

11. Security

We use HTTPS for all data in transit, authenticated API access tied to your Firebase account, and rate limiting to prevent abuse. Our API credentials are held as server-side environment variables and are never included in the app. No system is perfectly secure, and we cannot guarantee absolute security.

12. Changes to this policy

We will post any changes here and update the “Last updated” date. If a change materially affects how we handle your information — particularly what is sent to AI providers — we will tell you in the app before it takes effect.

13. Contact

wysdomai1@gmail.com

Wysdom AI is operated under the laws of the State of Delaware, United States.