Privacy Policy

1. The Demo vs. Your Account

You can try the starter demo deck without an account; your cards and study progress remain stored on your device in your browser. To create cards, import decks, and save progress across devices, you sign in with your email. Once signed in, Jolito works offline on your device and syncs changes to the cloud when connected.

2. What We Collect & Store

Email: Used for passwordless sign-in and administrative join notifications.

Decks & Study Progress: Stored locally on your device (IndexedDB) and, when signed in, synced to your cloud database so your cards and reviews are backed up across devices.

Feedback & Communications: If you send in-app feedback, we receive your message and email address to follow up.

Aggregate Anonymous Demographics: To understand platform adoption and community distribution, Jolito records anonymous daily aggregate metrics (device form factor, operating system, browser, country, and study engagement tier). We never track individual browsing activity, store IP addresses, or use persistent tracking cookies; daily uniqueness is computed with a monthly-rotating cryptographic hash, and we honor Do Not Track and Global Privacy Control signals.

3. Third-Party Services & AI Processing

To provide audio pronunciations, AI card suggestions, and cloud synchronization, Jolito relies on third-party service providers:

Speech Synthesis: To generate pronunciation audio and enable responsive playback, card words and study phrases are processed by cloud text-to-speech services.

AI Language Models (Card Suggestions): When requesting AI suggestions while creating cards (such as example sentences or memory aids), card text is processed by cloud AI inference providers. Your flashcard practice and spaced repetition reviews run privately on your device without AI.

Cloud Hosting & Database: When you sign in, your account and study progress are stored and synchronized using managed cloud database and hosting providers.

Email Delivery: In-app feedback messages and administrative notifications are routed through transactional email delivery services.

Current Providers (subject to change as our infrastructure evolves): Microsoft Speech Services (pronunciation audio), Cloudflare (AI suggestions & edge hosting), Supabase (cloud database & auth), and Resend (transactional email).

4. Data Export & Account Deletion

You can export your complete deck to a JSON file anytime under Manage deck → Backup & export.

To permanently delete your cloud data, tap Cloud sync → Delete cloud account & data in the app. We immediately and permanently delete your user record, cloud decks, feedback, and signup notification records from our servers. Emails already delivered to the maintainer’s inbox are not removed automatically.

5. Open Source & Contact

Jolito is open-source (Apache-2.0), created by Steffen Smolka. You can reach me at a@joli.to.

See our acknowledgements for the open-source projects and creators that power Jolito.