Privacy Policy

Our guiding principle is to collect only what we need.

Account information: When you register, we collect your email address and password. Passwords are hashed and cannot be read by us. We use this to identify your account and contact you when necessary.

Content you input: The words, definitions, templates, and parameters you enter when generating flashcards. This is stored in your account to display your generation history and is only used to provide the Service to you.

AI-generated results: Story content, image descriptions, and images generated by AI based on your input. Images are stored on Cloudflare R2. This data belongs to you and is stored only to power the Service.

Billing information: We do not store your card number or full payment details. Payments are processed by Creem. We only retain records of transactions (plan type, amount, date) for accounting purposes.

To provide the Service: Your input is sent to third-party AI model providers to generate content. We avoid including personally identifiable information in prompts wherever possible.

To troubleshoot issues: We may access account data when investigating reported bugs or service errors. We do this only as needed and with care.

When required by law: We will comply with valid legal requests (e.g. court orders). Where legally permitted, we will notify affected users before disclosing their data.

We do not share, sell, or rent your personal data to third parties for marketing or advertising purposes.

ardlex is built on a small set of trusted infrastructure providers. All data is stored in the United Kingdom and European Union.

• Cloudflare — application hosting and image storage (R2).
• Neon — database hosting. Your account data and generation records are stored here.
• Creem — payment processing. Handles all subscription and credit pack purchases.
• AI model providers — third-party AI services used to generate story text, image descriptions, and images from your inputs.

Each of these providers has its own privacy policy and data handling practices.

You have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data via your account settings;
• Delete your account and all associated data at any time;
• Export your data — contact us and we will assist you;
• Object to or restrict certain types of processing.

To exercise any of these rights, please contact us at the email address below.

We retain your account data and generation history for as long as your account is active. When you delete your account, your data is removed from active systems within a reasonable period and purged from backups within 60 days.

Images stored on Cloudflare R2 are deleted when you delete the corresponding flashcard or your account.

We use only essential cookies necessary to maintain your login session and language preference. We do not use tracking, advertising, or analytics cookies.

Our infrastructure is hosted in the United Kingdom and European Union (via Cloudflare and Neon). By using ardlex, you consent to your data being stored and processed in these regions.

ardlex is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will note the date of the last update at the top of this page, and notify you by email for any material changes.

Have questions, concerns, or requests about your data? Please get in touch — we are happy to help.