Privacy Policy

1. Introduction

This privacy policy describes how EdYouFlow collects, uses, stores and protects your personal data when using our service. By creating an account you automatically accept this policy.

2. Data Controller

EdYouFlow is the data controller for processing your personal data under this policy and applicable data protection laws (GDPR).

3. Personal Data We Collect

We collect the following types of personal data:

Account information: Email address, password (encrypted)
Payment information: Transaction data from payment providers (we do not store card details)
File data: PDFs you upload and generated Anki cards
Communication: Messages you send to us via support or feedback

4. How We Use Your Personal Data

We use your personal data to:

Provide and improve our service
Process your PDFs and generate Anki cards
Manage your account and authentication
Process payments and manage credits
Communicate with you about the service
Comply with legal requirements and regulations
Prevent abuse and ensure service security

5. Legal Bases

We process your personal data based on:

Contract: To fulfill our agreement with you
Legitimate interest: To improve the service and ensure security
Consent: When you explicitly consent to specific processing
Legal obligation: When we must comply with laws and regulations

6. Third‑Party Services and Data Sharing

We share your personal data with the following third parties:

AI providers (OpenAI): We use OpenAI models such as GPT‑4o‑mini to process your uploaded PDFs and generate study cards. Your documents are sent to OpenAI for processing.
Payment providers: To handle payments (Stripe)
Cloud providers: For hosting and storage
Analytics providers: To understand usage and improve the service

All third parties are bound by data protection agreements and may only use your data for specified purposes. OpenAI processes data according to their own privacy policies.

7. Data Storage, Security and Copyright

Retention: We store your personal data as long as your account is active or as required to provide the service. Uploaded files may be stored permanently to enable later access.

Security measures: We use industry standard security measures including encryption, secure servers and access controls. However, we cannot guarantee 100% security.

Copyright and user responsibility: EdYouFlow does not review your uploaded material for copyright. You are responsible for ensuring that everything you upload is used according to ethical and legal frameworks including copyright.

Important about server storage: The files you upload are stored on a server and processed by AI so you can access your PDF and the generated Anki file. In some regions this may be against copyright rules if the server is not owned by the rights holder.

8. Your Rights under GDPR

You have the right to access, rectify, erase, restrict processing, data portability, object to processing, and withdraw consent when processing is based on consent.

To exercise your rights, contact us at the details below or edit your details on your account page.

9. Shared Database and Company Affiliation

When you create an account, and when you continue using the service in either the Swedish or English version, you accept that the database for EdYouFlow.com and StudieVerktyg.se is the same and that both services are operated by Njutrition AB. Your account details, files, and transactions are shared across the platforms and are processed in accordance with this privacy policy and our terms of use.

9. Changes to this Policy

We may update this policy from time to time. Material changes will be communicated via email or on the website. Continued use after changes means you accept the updated policy.

10. Contact Information

For questions about this policy or to exercise your rights, email us at studieverktyg@gmail.com.

Last updated: 10/2/2025