← Back to home

Privacy Policy

Last updated: May 23, 2026

1. General

FlashAI (the "Service"), operated by East and West LTD (the "Operator"), is committed to protecting user privacy. This policy explains what data is collected, how it is used, and how it is stored. The policy is drafted in accordance with the Israeli Privacy Protection Law, 5741-1981, and the European GDPR.

2. Data We Collect

When you use the Service, we collect:

  • Registration data: email address, display name, and profile picture (when signing in via Google);
  • Uploaded content: PDF files and documents you upload for processing;
  • Usage data: generated flashcards, study progress, and actions taken in the Service;
  • Technical data: IP address, browser type, operating system, device identifiers, and anonymous analytics via Vercel Analytics;
  • Cookies: functional cookies used to maintain login state and user preferences.

3. Use of Data

Collected data is used solely for:

  • Providing the Service, account management, and processing user requests;
  • Running AI models to generate flashcards;
  • Improving the Service and analyzing usage patterns;
  • Communication with users about the Service (e.g. updates, notifications);
  • Information security and abuse prevention.

4. Sharing With Third Parties

The Operator does not sell or trade user data. Limited sharing may occur with professional service providers, strictly for the purpose of operating the Service:

  • Supabase — for data storage and user authentication;
  • Vercel — for site hosting and traffic analytics;
  • Google OAuth — for identity verification via Google accounts;
  • AI providers (such as Anthropic / OpenAI) — for content processing and flashcard generation.

All such service providers are bound by confidentiality agreements and strict information-security standards.

5. Information Security

The Operator employs reasonable, industry-standard security measures to protect data, including TLS encryption in transit (HTTPS), password hashing, and strict access controls. Absolute security cannot be guaranteed; users should also take reasonable steps to protect their own accounts.

6. User Rights (GDPR / Israeli Privacy Law)

By law, users have the following rights:

  • Right of access — request a copy of personal data held about you;
  • Right to rectification — request correction of inaccurate data;
  • Right to erasure("right to be forgotten") — request deletion of all personal data;
  • Right to object — object to certain types of processing;
  • Right to portability — receive your data in a structured format and transfer it to another service.

To exercise any of these rights, contact us via our contact page.

7. Data Retention

User data is retained for as long as the account is active. Upon account deletion, data is removed from our systems within 30 days, except for data the Operator is legally required to retain.

8. Cookies and Tracking Technologies

The Service uses functional cookies to manage authenticated sessions and store user preferences (such as accessibility settings). We also use Vercel Analytics to collect anonymous usage data. You can block cookies via your browser settings, but doing so may degrade Service functionality.

9. Changes to This Policy

The Operator may update this Privacy Policy from time to time. Material changes will be displayed on the site; we recommend reviewing this page periodically.

10. Contact

For any question, request, or to exercise your privacy rights, contact us via our contact page or by email at eastandwestltd2021@gmail.com.