Last updated 10 October 2026.

These policies are written in English only. Everything else in the app is in your language.

1. The service. Cardz Studio is a flashcard-based revision app for students, used by a parent or guardian ("you") together with up to four student profiles under a single family account. You are responsible for the account and for supervising how your students use it. Cardz Studio is for people aged 13 and over: student profiles are for ages 13 to 18, and where the law requires a parent’s permission for someone under 16, the parent or guardian account holder gives it.

2. Plans & billing. A Free plan is available (1 student profile, up to 20 cards). Paid plans are billed monthly or annually and include 1 student profile; up to 3 additional student profiles can be added at any time for a small extra fee each, charged on the same billing cycle. Payments are processed securely by Stripe — we never see or store your card details. Prices are shown in your local currency where available.

3. Changing or cancelling your plan. You can add or remove a student profile, or switch between monthly and annual billing, at any time from Settings — changes take effect immediately and any difference is charged or credited automatically (pro-rated) by Stripe. Cancelling stops future billing but keeps your access live until the end of the period you've already paid for; nothing is deleted when you downgrade or cancel. Refunds for time already used are not offered except where required by law.

4. Your content. Any decks, cards, images or notes you or your students create remain yours. You grant us a licence to store and process that content solely to provide the service to you (for example, cloud sync and backup).

5. Fair use. Please don't use Cardz Studio to upload unlawful, infringing or harmful content, or to attempt to disrupt or reverse-engineer the service.

6. Availability. We aim to keep the service available and your data backed up, but we can't guarantee uninterrupted access, and the service is provided "as is" without other warranties. To the extent permitted by law, our liability to you is limited to the amount you've paid us in the 12 months before a claim.

7. Changes. We may update these terms occasionally to reflect changes to the service or the law; continued use after an update means you accept the revised terms. Material changes to pricing will always be flagged in advance.

8. Governing law. Cardz Studio is run by A Roll Media (FZE), a free-zone company registered in Sharjah, United Arab Emirates. These terms are governed by the laws of the Emirate of Sharjah and the federal laws of the United Arab Emirates that apply there. If you use Cardz Studio as a consumer, you keep any mandatory consumer-protection rights you have under the law of the country where you live, and nothing in these terms limits them.

9. Contact. Questions about these terms — reach us via the support link in your account settings.

Last updated 29 September 2026.

These policies are written in English only. Everything else in the app is in your language.

What we collect. Your email address (for sign-in and account recovery); the names/avatars you choose for the parent and student profiles on your account; the decks, cards, images and study activity created inside the app; and basic billing status (plan, renewal date) from our payment provider — never full card numbers, which Stripe holds directly.

Why. To run the service you've signed up for (storing and syncing your decks, sending sign-in codes, processing payments), and nothing beyond that — we don't sell your data or use it for advertising.

Students. Student profiles are created and managed entirely by the parent/guardian account holder; students don't have their own separate sign-in, email address, or account. Cardz Studio is intended to be set up and supervised by an adult, and is for ages 13 and over: we don’t knowingly collect information about anyone younger, and if we learn we have, we will delete it.

Who else sees it. Three processors, all under data-processing agreements: Supabase (secure hosting, sign-in and database storage), Stripe (payment processing), and Anthropic (the AI that drafts flashcards and mind maps, marks typed answers and offers hints and explanations). None is permitted to use your data for their own purposes.

What the AI receives, and what it doesn’t. Only when your student chooses to use an AI feature:

• Making cards or a mind map — the notes text (or a mind-map branch’s text) and — if they attach one — a shrunk copy of that photo. Making cards also sends the questions already in that deck (up to 40) so it doesn’t repeat them.
• Checking an answer, or asking for a hint, an explanation or an easier or harder rewrite — that card’s question and model answer, plus what your student typed. Marking can also include the card’s marking notes (accepted answers, keywords, rubric, marks, command words) and difficulty level, their last couple of typed answers to that same card with how each was marked, and how many times they’ve slipped on it. A mind-map memory check sends the branch names in the same way.
• With every request — a little context so the wording suits them: their age (as a number and an age band), the celebration style set for their profile, the app’s language and, only if you switched the exam countdown on, how many days are left. Where a deck or map is involved, its name and its main folder’s name (or the map’s title) go too. Those names are whatever you typed, so it’s best not to put a student’s full name in them.

It never receives their name, their email, their wider study history or anything about your other students. PDFs and photos are read on the device first; the PDF file itself is never uploaded. Nothing sent to the AI is stored by us beyond a daily count of how many requests an account made, kept for 14 days. A photo is only saved at all if a card you keep actually uses it — and then it is simply part of your student’s own deck.

Where it's stored. Your account data is hosted with Supabase; Stripe may process payment data in other countries with appropriate legal safeguards in place for international transfers.

How long we keep it. For as long as your account is active, plus a reasonable period afterwards in case you return or as required for billing/legal records. You can export a full backup of your decks at any time from Settings, and can ask us to delete your account and data.

Your rights. You can access, export or ask us to delete your data at any time — export is built into Settings; for anything else, contact us via the support link in your account settings.

Cookies. See our separate Cookie Policy below.

Changes. We'll update this policy if what we collect or why ever changes, and note the date at the top.

Last updated 10 October 2026.

These policies are written in English only. Everything else in the app is in your language.

Cardz Studio keeps things simple: we don't use advertising or tracking cookies, and there's no third-party analytics watching you use the app.

What we do use:

• Essential local storage — to keep you signed in, remember your theme and settings, and save your decks locally as a safety net. This is necessary for the app to work and can't be turned off without also turning off sign-in.
• Payment-page cookies — when you subscribe, Stripe's own secure checkout page may set its own cookies to process your payment safely. These are set and controlled by Stripe, not by us — see Stripe's own privacy and cookie policy for details.

Because we don't use optional tracking cookies, there's no cookie-consent banner to click through — the only "cookies" here are the essential ones needed to make the app function, plus whatever Stripe uses on its own checkout page during a purchase.