Decked.

Privacy Policy

Effective date: October 31, 2026 · Last updated: November 1, 2026

Decked ("Decked", "we", "us") is a free study app that turns your notes and photos into spaced-repetition flashcards, forecasts exam-day recall, and keeps your calendar, tests, homework, and GPA in one planner. This policy explains exactly what data Decked collects, why, where it is stored, and how you can remove it.

1. Who we are

Decked is an independently operated application. You can reach the operator at reyanshfire24@gmail.com for any privacy question or request.

2. Data we collect and why

Data	Why we need it
Account data: email address, display name, and a securely hashed password.	To create your account, sign you in, and keep your study data tied to you.
Study content: notes, uploaded photos, flashcard decks and cards, review history, exam dates, and AI-generated study sets.	To schedule reviews with FSRS, forecast exam-day recall, and show your progress.
Planner data: calendar events, tests, homework, courses, grades, and the high school you select.	To power the calendar, test, homework, and GPA tools.
Google Calendar data (optional): the events on calendars you choose to connect, requested with the read-only scope `https://www.googleapis.com/auth/calendar.readonly`.	Only to show those events next to your tests and homework inside Decked.
Technical data: browser storage preferences such as theme, font size, and your selected school.	To remember your settings on your device.

3. Google user data

Limited Use disclosure. Decked's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Decked requests Google Calendar access only when you press Sync calendars and choose Google.

What we request: read-only access to calendar events (calendar.readonly). Decked cannot edit, create, or delete events in your Google Calendar.
Why we request it: to display your Google Calendar events inside the Decked calendar so your class schedule, tests, and homework appear together.
How it is handled: events are fetched directly from Google in your browser using a short-lived access token that is kept in memory and discarded when you close the tab. A copy of the events is saved in your browser's local storage so the calendar still renders on reload.
What we never do: we do not sell Google user data, do not use it for advertising, do not use it to train machine-learning models, and do not transfer it to third parties except as needed to run Decked's own features or as required by law.
Human access: no person at Decked reads your Google Calendar data. It is not reviewed by humans except for security, abuse, or legal compliance, or with your explicit consent.
Revoking access: disconnect Google inside Decked at any time, or remove Decked's access from your Google Account permissions. Existing copies can be removed by clearing the app's browser storage or deleting your account.

4. AI features

When you ask Decked to generate a study kit, the notes, topic, or photo you provide are sent to our backend and to a third-party AI model provider (NVIDIA NIM) solely to produce the summary, key terms, outline, and questions returned to you. We do not use your content to train models, and AI providers receive it only for that request.

5. Where data is stored

On our backend: account and study data are stored in Convex, our database and serverless backend provider, hosted in the United States.
On your device: planner data (calendar events, tests, homework, grades, selected school, and uploaded school programs) is stored in your browser's local storage. It stays on that device unless you export it.
File storage: photos you attach are stored in Convex file storage so the AI features and your notes can use them.
Hosting: the web app is served by Cloudflare.

6. Sharing

We do not sell, rent, or trade your personal data. We share data only with the service providers listed above that are required to operate Decked (Convex for backend and storage, Cloudflare for hosting, NVIDIA NIM for AI generation), or when required by law. These providers may process data only on our instructions.

7. Retention and deletion

Account and study data are retained while your account exists.
You can permanently delete your notes and decks from Settings → Data. Deleting a deck also deletes its cards and study history; uploaded images are removed after their last note or card reference is deleted.
You can clear planner data stored on your device by clearing Decked's site data in your browser settings.
To delete your account and remaining backend data, email reyanshfire24@gmail.com. We will act on verified deletion requests within 30 days.

8. Security

Passwords are hashed, traffic is encrypted in transit with HTTPS, and access to data is scoped to the signed-in account. No online service can guarantee absolute security, but we work to protect your data and to fix issues quickly.

9. Cookies and local storage

Decked does not use advertising cookies or third-party trackers. It uses browser local storage for your session and preferences, and the Google OAuth flow uses Google's own endpoints. You can clear this data at any time in your browser settings.

10. Children

Decked is intended for high school and college students. It is not directed to children under 13, and we do not knowingly collect data from children under 13. If you believe a child under 13 created an account, contact us and we will delete it.

11. Your choices and rights

Access, correct, or delete your data through the app or by email.
Disconnect Google Calendar whenever you want.
Use Decked without connecting Google; every other feature still works.

12. Changes to this policy

If this policy changes materially, we will update the effective date and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.

13. Contact

Questions about this policy or your data: reyanshfire24@gmail.com.