Privacy Policy
Effective Date: March 10, 2026
This Privacy Policy describes how Deemoo AI ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you use the Deemoo AI mobile application and website (collectively, the "Service"). By using the Service, you consent to the practices described in this policy.
Deemoo AI acts as the data controller for the personal information processed through the Service. For privacy inquiries, contact us at hello@deemoo.ai.
1. Information We Collect
1.1 Account Information
When you create an account, we collect your email address for authentication. We do not collect or store passwords. You may optionally provide a display name.
1.2 Learning Profile
During onboarding, we collect learning preferences to personalize AI-generated content:
- Learning subjects (up to 3 selected topics)
- Learning goal (exam prep, casual learning, professional development, or homework)
- Education level (middle school through self-learner)
- Preferred daily study duration
- Preferred language (12 supported languages)
- Timezone (auto-detected from your device for notification scheduling)
1.3 Uploaded Content
When you upload study materials (text, PDFs, URLs, images, audio, or video), we store the original files, extract text content, and generate AI-derived flashcards, quizzes, and topic summaries. All uploaded content and generated materials are associated with your account.
1.4 Study Activity
We collect in-app learning activity data to provide and improve the Service:
- Study sessions (start and end time, study mode, scores)
- Card-by-card progress (new, learning, or known status; review count)
- Quiz answers (selected answer, whether correct or incorrect)
- Card view counts
- XP earned, level, streaks, and achievement unlocks
1.5 Device Information
- Device identifier — a randomly generated identifier created on your device for biometric login functionality. This is not a hardware identifier and cannot be used to identify your device outside of the Service.
- Push notification token — a unique token used to deliver notifications to your device.
- Platform — whether you are using iOS or Android.
1.6 Information We Do Not Collect
- Passwords
- IP addresses
- Device manufacturer, model, or operating system version
- GPS or precise location data
- Contacts, calendar data, or photos (except files you explicitly upload)
- Browsing history
We do not use behavioral analytics, session replay tools, or advertising trackers in the Service.
2. Legal Basis for Processing
We process your personal information under the following legal bases as defined by the General Data Protection Regulation (GDPR) and similar laws:
- Contractual necessity — processing your uploads, generating study materials, tracking your learning progress, and authenticating your identity are required to deliver the Service you have agreed to use.
- Consent — we obtain your consent before sending push notifications. You may withdraw consent at any time by disabling notifications in your device settings.
- Legitimate interest — we process limited data for service improvement, security, and fraud prevention, where such processing does not override your fundamental rights and freedoms.
- Legal obligation — we may process data to comply with applicable laws, regulations, or legal proceedings.
3. How We Use Your Information
- Provide, maintain, and improve the Service
- Process your uploads through AI to generate flashcards, quizzes, and topics
- Authenticate your identity
- Send transactional communications (authentication codes, welcome emails, subscription notifications)
- Deliver push notifications with your consent (study reminders, streak alerts, new cards ready, achievement unlocks)
- Manage your subscription and entitlements
- Monitor and prevent abuse, fraud, or unauthorized access
4. Third-Party Services and Data Recipients
We engage third-party service providers who act as data processors on our behalf to help us operate the Service. We do not sell your personal information. These providers are contractually obligated to use your data only as necessary to provide services to us and in accordance with this Privacy Policy.
The categories of third-party service providers we use include:
- AI service providers — process extracted text from your uploads and your learning profile to generate flashcards, quizzes, and topic analysis. Also used for image recognition and audio/video transcription. Your email address and account identifiers are not shared with AI service providers.
- Cloud storage providers — store your uploaded files securely.
- Email delivery providers — receive your email address to deliver authentication codes and transactional emails.
- Push notification providers — receive your device's push notification token to deliver notifications on iOS and Android.
- Subscription management providers — process subscription events (purchases, renewals, cancellations, expirations) to manage your in-app subscription.
- Translation service providers — receive text content when you request translation of study materials into another language.
You may contact us at hello@deemoo.ai to request a current list of our specific third-party service providers.
5. International Data Transfers
Your personal information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from those in your jurisdiction.
Where required by applicable law, we implement appropriate safeguards for international data transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission or other legally recognized transfer mechanisms.
6. Data Retention
We retain your personal information for as long as your account remains active or as needed to provide the Service. Temporary data such as authentication codes are automatically deleted shortly after use or expiry.
To request deletion of your account and all associated data, please contact us at hello@deemoo.ai. We will process verified deletion requests within 30 days.
7. Data Security
We implement industry-standard technical and organizational measures to protect your personal information, including encryption of data in transit and at rest, cryptographic hashing of authentication credentials, and secure cloud storage for uploaded files.
While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
8. Children's Privacy
The Service is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@deemoo.ai. If we learn that we have collected personal information from a child under 13, we will promptly delete their account and data.
9. Community Features and Published Content
You may choose to publish study decks to a community feed. Published decks are visible to all Deemoo AI users, and your author identity is attached to published content. Other users may clone your published decks for their own study. You can hide or unpublish your decks at any time.
Please be mindful of the information you include in published decks, as this content becomes publicly accessible within the Service.
10. Your Privacy Rights
All Users
Regardless of your location, you may:
- Request access to the personal information we hold about you
- Request correction of inaccurate personal information
- Request deletion of your account and associated data
- Request a copy of your data in a portable format
EU/EEA/UK Residents (GDPR)
If you are located in the European Economic Area or United Kingdom, you also have the right to:
- Restrict or object to the processing of your personal information
- Withdraw consent at any time where processing is based on consent
- Lodge a complaint with your local data protection supervisory authority
- Not be subject to decisions based solely on automated processing that produce legal effects
California Residents (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know what personal information is collected, used, and disclosed
- Request deletion of your personal information
- Opt out of the sale or sharing of your personal information (we do not sell personal information)
- Non-discrimination for exercising your privacy rights
To exercise any of these rights, contact us at hello@deemoo.ai. We will respond to verified requests within the timeframes required by applicable law.
11. Do Not Track Signals
Our Service does not track users across third-party websites and therefore does not respond to Do Not Track (DNT) signals. Our website analytics are entirely cookieless and do not collect personally identifiable information.
12. Cookies and Tracking Technologies
Our website uses privacy-focused, cookieless analytics that do not collect personal data. The Deemoo AI mobile application does not use cookies, tracking pixels, or third-party advertising trackers.
13. Data Breach Notification
In the event of a data breach that affects your personal information, we will notify affected users without undue delay. Where required by applicable law, we will notify the relevant supervisory authorities within the legally mandated timeframes. Notifications will include the nature of the breach, the types of data affected, and the measures taken to address and mitigate the breach.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify users of material changes through the app or by email. The "Effective Date" at the top of this policy indicates when it was last revised. Your continued use of the Service after any changes constitutes acceptance of the updated policy.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Deemoo AI
Email: hello@deemoo.ai