This notice explains how Tuón handles personal information, wherever you are. It is written to meet the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), since that is where Tuón started and where most of its infrastructure runs — and we apply the same notice, the same rights, and the same account controls to every account regardless of country. If your own country gives you additional rights, this notice does not reduce them.
What we collect
What you give us
- Account — your email address, and your password if you did not sign in with Google. Passwords are handled by Firebase Authentication and are never visible to us.
- Profile — your display name, country, education level, and strand, subjects, or degree program you choose during setup. Country decides which curriculum helpers and payment methods you see; nothing else in the app reads it.
- Study content — the notes you write or paste, text extracted from PDFs, Word documents, or photos you import, cards brought in from an Anki deck, and the flashcards and quizzes generated from any of that.
What the app produces
- Review history — how you rated each card and when it is next due. This is what makes spaced repetition work.
- Usage counters — how many study sets you have generated this month, so we can apply your plan’s limit.
What we do not collect
We do not use advertising trackers, we do not build advertising profiles, and we do not read your notes except as needed to generate the study materials you ask for.
Most imports stay on your device
When you import a PDF or a Word document, the file is read in your browser and never uploaded. When you import an Anki deck, it is unzipped and read the same way — entirely in your browser, including any cards it contains. In every one of these cases, only the text you keep in the note or the resulting flashcards is saved, and only that text is later sent for AI generation. The original file never leaves your device.
A photo is the one exception, and it is a real one: reading handwriting needs the AI’s vision, so a photo you import is sent to Anthropic to be read into text. It is shrunk and compressed in your browser first, used once to produce that text, and not stored by us afterward.
Who else processes your data
- Google (Firebase) — authentication and database. Your account and study content are stored here.
- Anthropic — the AI that writes your flashcards and reads your imported photos. A note’s text is sent when, and only when, you press “Generate study set”; a photo is sent when, and only when, you import one. Your name, email, and review history are never sent.
- PayMongo — payment processing for students paying from the Philippines (GCash, Maya, and PH-issued cards). We never see or store your card or wallet details; PayMongo handles them directly and tells us only whether the payment succeeded.
- RevenueCat and Stripe — payment processing for students paying from anywhere else, by card. Same rule: we never see your card details, only whether the payment succeeded.
- Vercel — hosting. Standard server logs, which may include IP addresses.
These providers process data on our instructions. Because they operate internationally, your data may be processed outside the Philippines and outside your own country.
Why we are allowed to hold it
- To provide the service you asked for — we cannot show you your notes without storing them.
- Your consent — for optional things such as reminder emails, which you can withdraw at any time.
- Our legitimate interest — keeping the service secure and preventing abuse.
Students under 18
Tuón is built for Senior High School and college students everywhere, so we expect many of our users to be minors, wherever they are signing up from. If you are under 18, please review this notice with a parent or guardian before creating an account. A parent or guardian may contact us at any time to see, correct, or delete their child’s information.
This is an attestation, not a verification: the account holder tells us a guardian has agreed, and we record that answer, but we have no way to confirm a guardian’s identity at this scale. If your country sets its own age of consent for an information service, that age applies to you in addition to the question we ask.
How long we keep it
Your account and study content are kept until you delete them. Deleting your account removes your profile, notes, study sets, and review history from our database. Backups and provider logs may persist for a short period afterwards before being overwritten.
Your rights
Under the Data Privacy Act you have the right to:
- be told what we hold about you, and get a copy of it;
- correct anything inaccurate;
- have your data erased;
- take your data elsewhere in a usable format;
- object to certain processing, or withdraw consent;
- complain to the National Privacy Commission if you believe your rights have been infringed.
The first four are built into the app: Settings lets you download everything we hold and delete your account outright. For anything else, email us.
Security
Access is enforced at the database level, not just in the app: our security rules make one student’s notes unreadable by any other account, and those rules are covered by an automated test suite. Traffic is encrypted in transit.
No service can promise perfect security. If a breach affects your personal data, we will notify you and the National Privacy Commission as the law requires.
Sharing a study set
Sharing is off by default. When you turn it on for a set, anyone holding that link can view its cards — the link is not listed or searchable anywhere. Turning sharing off revokes access immediately. Your notes, your other sets, and your review history are never shared.
Changes
If we change this notice materially we will tell you in the app before the change takes effect.
Contact
Questions, requests, or complaints: hello@tuon.app.