Privacy by design

Information we process

We process your account email and sign-in identifiers; card prompts, answers, decks, tags, sources, and scheduling state; typed review responses and review timestamps; connected-app grants; and basic subscription status. Stripe processes web payment details. Apple or Google processes mobile purchases, and RevenueCat provides Retri with the resulting product, entitlement, store, subscription-status, and renewal information. Retri does not store card numbers.

How we use it

We use this information to authenticate you, sync and schedule your learning cards, provide review history and statistics, manage plan limits and billing, prevent abuse, secure the service, troubleshoot failures, and respond to support requests. We do not sell personal information or use learning content for advertising.

Service providers

Retri relies on Supabase for authentication and database hosting, Railway for application hosting, Stripe for web subscription billing, RevenueCat for mobile subscription entitlements, Apple or Google for applicable mobile purchases, Resend for account email delivery, and the AI or MCP client you choose to connect. Those providers process information only as needed to provide their part of the service under their own terms and privacy commitments.

How it is protected

Every learning-data row is owned by a Supabase Auth user. Row-level security prevents one account from reading or changing another account’s data. Retri uses encrypted network connections, scoped access tokens, and server-only billing credentials. No online service can guarantee absolute security.

Local storage and logs

The site stores your sign-in session and appearance preference in your browser. Our hosting and infrastructure providers may retain limited request, security, and error logs, such as timestamps, IP addresses, and device or browser details, for operations and abuse prevention.

Retention

We retain account and learning data while your account is active or as needed to provide the service. Deleted cards and review history are removed from the active database; limited backups, billing records, security logs, or records required for legal and accounting purposes may remain for a reasonable period.

Your controls

You can delete individual cards, permanently delete all learning data, revoke connected-app access, cancel a paid plan, or ask us for help accessing, correcting, exporting, or deleting account information. Depending on where you live, you may have additional privacy rights.

Contact and changes

Email hello@getretri.com with a privacy request or question. We may update this policy as Retri evolves; material changes will be posted here with a new effective date.