Legal document · Updated July 2026
Privacy policy
This policy explains what Kirami Study™ collects, why we use it, and the choices available to you. It is product information, not individualized legal advice.
Privacy nutrition label
A concise summary of the personal data used to run Kirami Study™.
| Data category | What we collect | Purpose | Processors | Retention |
|---|---|---|---|---|
| Account data | Email, profile name, username, authentication/session data | Account access, security, support | WorkOS | While account is active; limited legal/security retention may apply |
| Learning data | Study sets, cards, quiz responses, FSRS statistics, preferences | Provide and personalize learning features | Cloudflare / Neon | Until deleted by you or under our retention controls |
| Uploads and AI prompts | Documents, images, OCR diagrams, prompts, generated study content | Requested storage, OCR, and AI generation | Cloudflare R2, Google Gemini AI, OpenAI, LlamaParse | Until deleted by you or lifecycle cleanup |
| Billing data | Stripe customer and subscription identifiers | Subscription access, cancellations, accounting | Stripe | As required for billing, disputes, and legal obligations |
| Security data | IP-derived security signals, logs, cookie choices | Security, fraud prevention, service operation | Cloudflare, WorkOS | As needed for security and operations |
1. Information we collect
We collect account details, study content, learning activity, device and security information, and billing identifiers supplied by Stripe. We do not store full payment-card numbers.
2. How we use information
We use information to provide flashcards, quizzes, FSRS scheduling, analytics, AI generation, support, fraud prevention, service communications, and legal compliance.
3. AI processing
When you choose an AI feature, the text, document excerpts, or images needed for that request are sent to our supported AI model providers (including Google Gemini API and OpenAI API) and, when selected, LlamaParse. This includes prompts used to generate Simulation Lab timelines. Please do not upload sensitive information that you do not want processed by those providers.
4. Do Not Sell or Share
Kirami Study™ does not sell personal information or share personal data with third parties for cross-context behavioral advertising.
5. Your choices and rights
You may access, correct, export, or delete account information. Account deletion removes Kirami Study™ records, uploaded files, and associated sign-in credentials, subject to limited records we must retain for legal, accounting, fraud-prevention, or dispute purposes. You can cancel an active subscription directly in Account Settings.
6. GDPR rights and lawful bases
For people in the EEA, UK, and other places with similar privacy laws, we process personal data to perform our contract with you, comply with legal obligations, pursue legitimate interests such as security and fraud prevention, and where required, with your consent. You may request access, correction, portability, restriction, objection, or erasure of personal data, and may withdraw consent where processing relies on consent. To exercise these rights or lodge a privacy request, contact contact@kiramistudy.com. You may also complain to your local data-protection authority.
7. Deletion and retention policy
You can permanently delete your account from Account Settings. We then delete account records, active study content, uploaded files, and sign-in credentials from production systems, while retaining only the minimum information needed for legal obligations, billing and tax records, fraud prevention, security, backup rotation, or dispute resolution. We respond to verified deletion requests without undue delay and explain any legally required retention. Deleting your account does not erase content that another user has independently copied into their own account.
8. OAuth data minimization
When you choose Google or another supported sign-in provider, we use only the identity information needed to create and secure your account, such as provider ID, email address, display name, and profile image when supplied. We do not request contacts, mailbox contents, calendars, cloud-drive files, or social-posting permissions for sign-in. We do not collect or retain a date of birth for the age confirmation shown at manual registration.
9. Stripe payment isolation
Stripe processes payment credentials and payment authentication. Kirami Study does not receive or store full card numbers, card security codes, or bank-login credentials. We retain only the Stripe customer, subscription, invoice, and payment-status identifiers necessary to provide access, support billing, prevent fraud, and respond to disputes.
10. Public and educational content
Study sets marked public may be visible to other users. Do not place personal data, student records, confidential course materials, or sensitive information in public sets or AI prompts. You control the content you upload and are responsible for having the rights and permissions to use it.