Privacy Policy

Effective date: May 13, 2026

What We Collect

• Email address — used for authentication and account management.
• Hashed password — stored securely; we never store your plaintext password.
• Flashcard answers, scores, and session timestamps — used to power spaced repetition scheduling and show you your progress.
• IP address — collected transiently for rate limiting only. Not stored long-term.

How We Use It

• Authentication and account security.
• Grading your answers via AI and scheduling future reviews.
• Improving the product (aggregated, anonymized usage patterns).

Third Parties

• OpenAI — your answers may be sent to OpenAI's API for grading. OpenAI's privacy policy applies to that data.
• Google Gemini — your answers may be sent to Google's Gemini API for grading. Google's privacy policy applies to that data.
• Firebase / Google — used for Google OAuth sign-in if you choose that option.
• Railway — our hosting provider. Your data resides on Railway-managed infrastructure.

Data Retention

We retain your data until you request account deletion. To delete your account and all associated data, email us.

Your Rights

You have the right to access and delete your personal data. Email us and we will fulfill your request within 30 days.

We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to any third party.

Contact

Privacy questions? Email us at hello@grind-interview-questions.com.