Privacy Policy

Our guiding principle is to collect only what we need.

Account information: When you register, we collect your email address and password. Passwords are hashed and cannot be read by us. We use this to identify your account and contact you when necessary.

Content you input: Words, phrases, texts, images, questions, templates, and other inputs you provide when using AI features or managing flashcards. This is stored in your account to provide the Service to you.

AI-generated results: Stories, translations, Q&A answers, lettering, image descriptions, and images generated by AI based on your input. Images are stored on Cloudflare R2. This data belongs to you and is stored only to power the Service.

Billing information: We do not store your card number or full payment credentials. Dodo Payments collects and processes the information needed to complete your purchase. We retain limited transaction records such as the payment ID, credit pack, status, currency, amount, timestamps, and the account associated with the purchase so we can grant credits, process refunds, prevent duplicate fulfillment, provide support, and keep accounting records.

To provide the Service: Your input is sent to third-party AI model providers to generate content. We avoid including personally identifiable information in prompts wherever possible.

To troubleshoot issues: We may access account data when investigating reported bugs or service errors. We do this only as needed and with care.

When required by law: We will comply with valid legal requests (e.g. court orders). Where legally permitted, we will notify affected users before disclosing their data.

We do not share, sell, or rent your personal data to third parties for marketing or advertising purposes.

ardlex uses a small set of infrastructure, payment, and AI service providers. These providers process only the data needed for their role in delivering the Service.

• Cloudflare — application hosting and image storage (R2).
• Railway — processing for comic generation jobs.
• Neon — database hosting. Your account data, credits, and flashcard records are stored here.
• Dodo Payments — merchant of record and payment processing for credit pack purchases, including tax, invoices, refunds, and payment support.
• AI model providers — third-party AI services used for generation, extraction, translation, Q&A, lettering, and related features.

Each of these providers has its own privacy policy and data handling practices.

You have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data via your account settings;
• Delete your account and associated data, subject to records we must or may retain for legal, accounting, security, and dispute purposes;
• Export your data — contact us and we will assist you;
• Object to or restrict certain types of processing.

To exercise any of these rights, please contact us at the email address below.

We retain your account data and generation history for as long as your account is active. When you delete your account, your data is removed from active systems within a reasonable period and purged from backups within 60 days.

Images stored on Cloudflare R2 are deleted when you delete the corresponding flashcard or your account.

Transaction and refund records may be retained after account deletion where reasonably necessary for accounting, fraud prevention, dispute handling, and legal compliance.

We use only essential cookies necessary to maintain your login session and language preference. We do not use tracking, advertising, or analytics cookies.

Our providers may store or process data in the United Kingdom, European Union, United States, and other countries where they operate. The location can vary by provider, feature, and request. By using ardlex, you understand that your information may be transferred and processed outside your country of residence, subject to applicable law and the safeguards offered by those providers.

ardlex is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will note the date of the last update at the top of this page, and notify you by email for any material changes.

Have questions, concerns, or requests about your data? Please get in touch — we are happy to help.