Privacy policy

The operator named at the top of this page decides how your data is used. Contact details are at the bottom of this page.

• Account: email address, display name, a salted hash of your password (never the password), language, timezone and your settings.
• Your study content: topics, plans, cards, notes you paste, exercise attempts and feedback, quizzes, mind maps, memory palaces and coach chats.
• Your activity: review history and ratings, focus sessions and logged time, quota use and streaks.
• Technical data: the devices you are signed in on (IP address and browser name), and a security log of sign-ins, failures, exports and deletions.
• Notifications: your reminder choices and, if you turn push on, the address your browser gives us for it.

We do not keep your card text, notes or chat in application logs.

To make cards, grade answers or answer the coach, we send the text that request needs, such as the topic name, a card, your answer or a note you pasted, to OpenRouter, which passes it to a free third-party model provider.

We never include your email address, name or account number in what we send. Free model providers may log what they receive or use it to improve their models, and we cannot control that. Do not paste confidential material, passwords or other people's personal data. We do not use your content to train models ourselves.

To run your account and the study features you ask for (contract); to keep the service secure, prevent abuse and fix faults (legitimate interest); to send reminders and notices you chose (consent, which you can withdraw in Settings); and to meet legal duties.

We do not sell your data and show no advertising. We use these services to run Master Anything: web and server hosting, the database, an email provider for account emails and reminders, OpenRouter and its model providers (above), and your browser's push service if you enable push. They receive only what they need to do their part.

A share link shows its deck to anyone who has the link; it never includes your schedule, review history or private notes.

Your data stays while your account exists. When you delete your account it is erased from the live system straight away, including share links and the addresses in the security log; copies other people made from your shared decks stay with them. Encrypted backups hold a copy for at most 30 days and then expire. Security logs without personal details may be kept longer.

You can: see and download your data (Settings, Your data); correct it by editing it in the app; delete your account and data (Settings, Your data); object to or withdraw consent for reminders; and ask us a question or complain using the contact below. You may also complain to your local data protection authority.

Master Anything is for people aged 16 and over. We do not knowingly keep data about younger children and delete it when we find it.

We use only what the service needs to work, with no tracking and no advertising. Details are on the cookie page.

Traffic uses HTTPS, passwords are hashed with a slow algorithm, sessions can be ended from Settings, staff accounts need two-factor sign-in, and staff may read your private content only with a written, logged reason. No system is perfectly secure; tell us if you think your account is at risk.

Our hosting and AI providers may process data outside your country, including in the United States. Where the law requires it, they rely on recognised safeguards for such transfers.

If this policy changes in a way that matters, we will tell you in the app first.