← Back to Home

Privacy Policy

Last updated: November 5, 2025

1. Introduction and Acceptance

Welcome to Stryatom ("we," "us," "our," or "the Service"). This Privacy Policy governs your use of our spaced repetition learning platform. By accessing or using Stryatom, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

If you do not agree with any part of this Privacy Policy, you must immediately discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address for authentication
  • OAuth Profile Data (Optional): If you sign in with Google or Twitter, we receive your name and profile photo from those providers
  • Learning Content: Text content of flashcards (front and back), deck names, and folder organization you create
  • Study Performance Data: Spaced repetition algorithm metrics including review timestamps, difficulty ratings, interval calculations, and streak tracking
  • User Preferences: Theme selection and interface settings

2.2 Automatically Collected Information

  • Authentication Tokens: Stored locally in your browser to maintain your session
  • Profile Images: We may query Gravatar (a third-party service) using a hash of your email to retrieve your profile picture if available

2.3 Automatically Collected Data and Tracking

We and our third-party partners may automatically collect information about you and your device, including:

  • Device identifiers, IP addresses, and browser information
  • Usage data, clickstream data, and interaction patterns
  • Approximate location based on IP address only, if needed for fraud prevention
  • Advertising identifiers and cross-device tracking data
  • Information from cookies, pixels, web beacons, and similar technologies
  • Data collected from third-party sources and data brokers

3. How We Use Your Information

We may use your information for the following purposes:

  • Providing, operating, and maintaining the Service
  • Authenticating your account and maintaining secure access
  • Storing and syncing your learning content across devices
  • Calculating spaced repetition schedules and tracking study performance
  • Improving, personalizing, and expanding the Service
  • Understanding and analyzing usage trends and preferences
  • Developing new features, products, and services
  • Communicating with you about updates, security alerts, and administrative messages
  • Preventing fraud, abuse, and ensuring compliance with our Terms of Service
  • Complying with legal obligations and enforcing our rights

We reserve the right to use aggregated, anonymized, or de-identified data for any lawful purpose, including analytics, research, advertising, marketing, and monetization. We may also use your information to:

  • Display targeted advertisements based on your interests and behavior
  • Create user profiles for advertising and marketing purposes
  • Share insights with advertisers and business partners
  • Monetize the Service through advertising and partnerships

Turn off personalized ads by contacting us. For AI training (e.g., improving spaced repetition), we use anonymized data only.

4. Data Storage and Security

We implement commercially reasonable security measures to protect your data. However, you acknowledge and agree that:

  • No method of transmission over the Internet or electronic storage is 100% secure
  • We cannot guarantee absolute security of your data
  • You use the Service at your own risk
  • We are not liable for any unauthorized access, loss, or disclosure of your information

You are solely responsible for: Maintaining the confidentiality of your account credentials, any activity under your account, and backing up your own data.

In case of a data breach, we will notify affected users as required by law. If a breach happens, we'll investigate and notify you if your data's affected.

5. Third-Party Services

We use the following third-party services:

  • Google OAuth (Optional): If you choose to sign in with Google, Google may collect sign-in data per their privacy policy
  • Twitter/X OAuth (Optional): If you choose to sign in with Twitter, Twitter may collect sign-in data per their privacy policy
  • Gravatar (Automattic): We query Gravatar using a hashed version of your email to retrieve profile pictures. No personally identifiable information is sent. Gravatar Privacy Policy

Important: We do not share your flashcard content, study data, or any personal information with these services beyond what is necessary for authentication and infrastructure.

6. Data Sharing and Disclosure

We may share your information in the following circumstances:

  • Service Providers: With third-party vendors, contractors, and service providers who perform services on our behalf (e.g., hosting, analytics, advertising, marketing, customer support, data enrichment)
  • Business Transfers: In connection with any merger, sale of company assets, financing, acquisition, or transfer of all or a portion of our business to another company
  • Legal Requirements: When required by law, subpoena, court order, or legal process, or to establish, exercise, or defend legal claims
  • Protection of Rights: To protect our rights, property, safety, or that of our users or the public, including fraud prevention and security purposes
  • With Your Consent: When you explicitly authorize us to share your information
  • Aggregated Data: We may share anonymized, aggregated, or de-identified data for any lawful purpose, including with advertisers, partners, and data brokers
  • Advertising Partners: With advertising networks, demand-side platforms, and marketing partners to deliver targeted advertisements
  • Business Partners: With partners for joint marketing initiatives, co-branded services, or other business purposes

We reserve the right to share information as necessary to operate, maintain, and improve the Service.

7. Your Rights and Limitations

Subject to applicable law and our operational requirements, you may have certain rights regarding your data:

  • Access: You may access your data through your account interface, subject to technical limitations
  • Modification: You may edit content you have created, though we may retain previous versions
  • Deletion: You may request account deletion, subject to our retention policies and legal obligations

Important Limitations:

  • We may take up to 30 days (or longer if legally required) to process deletion requests
  • We may retain certain data for legal, security, fraud prevention, or backup purposes
  • Deleted data may persist in backups for up to 90 days
  • We may retain anonymized or aggregated data indefinitely
  • Some data may be technically impossible to delete from all systems
  • We reserve the right to refuse deletion requests that would compromise system integrity or violate legal obligations

No Guarantee of Data Recovery: Once deleted, we cannot guarantee recovery of your data. You are responsible for maintaining your own backups.

CCPA/GDPR users: Opt-out of data sales/sharing via email request.

8. Data Retention

We retain your data for as long as necessary to provide the Service and for our legitimate business purposes:

  • Active Accounts: Data is retained as needed for business purposes while your account remains active
  • Inactive Accounts: We may retain data from inactive accounts for operational purposes
  • Deleted Accounts: Data may be retained for up to 90 days in backups and archives
  • Legal and Compliance: We may retain data as required by law, regulation, legal process, or to establish, exercise, or defend legal claims
  • Fraud Prevention: We may retain data necessary to prevent fraud, abuse, or violations of our Terms
  • Aggregated Data: Anonymized and aggregated data may be retained indefinitely

We reserve the right to determine retention periods at our sole discretion based on business needs, legal requirements, and operational considerations.

9. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.

By using the Service, you represent and warrant that you are at least 13 years of age. If you are under 18, you represent that you have obtained parental or guardian consent to use the Service.

10. Cookies and Tracking Technologies

We may use cookies, web beacons, pixels, local storage, and similar tracking technologies to:

  • Essential Functions: Authentication, session management, and security
  • Preferences: Remember your settings and preferences
  • Analytics: Understand how users interact with the Service
  • Advertising: Deliver relevant advertisements and measure ad performance
  • Personalization: Customize content and features based on your activity

Third-party service providers (including advertising networks and analytics providers) may also use tracking technologies to collect information about your activity on the Service and across other websites and services. We do not control these third-party technologies.

By using the Service, you consent to our use of cookies and tracking technologies. Most browsers allow you to control cookies through settings, but disabling cookies may limit your ability to use certain features.

11. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States and other jurisdictions where data protection laws may differ from those in your country.

By using the Service, you explicitly consent to the transfer of your data to any country where we or our service providers operate. You acknowledge that different countries may have different privacy protections, and you waive any claims arising from such transfers.

We are not responsible for the privacy practices of any third-party infrastructure providers or the laws of jurisdictions where data is stored.

12. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time, in our sole discretion, with or without notice. Changes will be effective immediately upon posting to this page, as indicated by the "Last updated" date at the top.

Your continued use of the Service after any changes constitutes your acceptance of the revised Privacy Policy. It is your responsibility to review this Privacy Policy periodically. If you do not agree to any changes, you must immediately stop using the Service.

We may, but are not obligated to, notify you of material changes via email or through the Service.

13. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE SHALL NOT BE LIABLE FOR ANY DAMAGES ARISING FROM:

  • If someone hacks your info
  • Lost or messed-up data
  • Any hacks or leaks
  • Stuff our partners do
  • If you don't keep your password safe
  • If others misuse your info

We're not responsible for data loss or breaches beyond our control—always back up your stuff. You use the Service at your own risk and agree to hold us harmless from any claims related to privacy or data security.

14. Regional Compliance

If you are located in the European Union, California, or other jurisdictions with specific privacy laws, you may have additional rights under applicable law. To exercise such rights, contact us at the email below.

We reserve the right to verify your identity and jurisdiction before responding to requests. We may charge a reasonable fee or refuse requests that are excessive, repetitive, or manifestly unfounded.

15. Contact Us

If you have questions about this Privacy Policy, you may contact us at:

Email: support@stryatom.com

We will make reasonable efforts to respond to inquiries, but we do not guarantee response times or resolution of all requests. We reserve the right to refuse requests that are unreasonable, repetitive, or require disproportionate technical effort.