Privacy Policy

Who we are

highyield.cards (“we,” “us”) is a tool that turns documents you provide into Anki flashcard decks. This policy explains what data we handle when you use the service at https://highyield.cards, and the choices you have.

What we collect

• Account information. If you sign in, our authentication provider Clerk collects your email address and, if you provide it, your name. We use this to identify your account and apply your plan limits.
• Documents you upload or paste. When you generate a deck, the text of your document is sent to our server and then transmitted to Google’s Gemini API to produce the flashcards. We process your document in memory to build your deck and do not store its contents on our servers after your request completes. Google’s handling of API inputs is governed by its Gemini API terms.
• Payment information. Purchases are processed by Stripe. We never see or store your card number. We keep a record of your plan or purchase credits, tied to your account ID (or, for guest purchases, your IP address).
• IP address. We use your IP address to enforce free-tier rate limits and, if you are not signed in, to associate purchases and credits with you. These records are stored in Upstash Redis.
• Usage analytics. We use Vercel Analytics, a cookieless, privacy-focused analytics service that collects aggregated page-view data. It does not track you across sites or build a profile of you.

Cookies

We only use strictly necessary cookies: session cookies set by Clerk to keep you signed in, and cookies set by Stripe during checkout for payment security and fraud prevention. We do not use advertising or analytics cookies, which is why you don’t see a cookie banner.

How we use your data

• To generate your flashcard decks — the only thing we do with your documents.
• To operate accounts, plans, purchase credits, and rate limits.
• To process payments and apply refunds.
• To understand aggregate usage of the site (anonymous analytics).

We do not sell your personal data, and we do not use your documents to train AI models.

Service providers

We share data only with the providers needed to run the service:

• Clerk — authentication (email, name, session cookies).
• Google (Gemini API) — document text, to generate flashcards.
• Stripe — payment processing (email, payment details).
• Vercel — hosting and anonymous analytics.
• Upstash — storage of rate-limit, plan, and credit records.

Data retention

• Document text: processed in memory, not retained after your deck is generated.
• Generated decks: downloaded to your device; we do not keep a copy.
• Rate-limit records: expire automatically (typically within a month).
• Account and purchase records: kept while your account is active.

Your rights

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us via the contact form and we will respond within 30 days.

Children

The service is not directed at children under 13, and we do not knowingly collect personal data from them.

Changes

If we make material changes to this policy, we will update the date above and, where required, notify you on the site.

Contact

Questions about this policy? Reach us through the contact form.