Privacy Policy for Tidbit
Last Updated: June 18, 2026
Tidbit (“we,” “us,” or “our”) operates the Tidbit mobile application (“App”). This Privacy Policy explains what information we collect, how we use it, and your choices.
When you create an account, we collect:
- Email address (email/password sign-up) or Apple-provided identifier (Sign in with Apple; we may receive a relay email if you hide your email)
- User ID assigned by our authentication provider (Supabase Auth)
- Profile data you provide: display name, school affiliation, graduation year, avatar (if added), and onboarding preferences
Learning and Usage Data
- Study progress: tidbits viewed, flashcard responses, spaced-repetition scheduling, deck study sessions, and mastery statistics
- Preferences: notification settings, selected decks/categories, quiet hours, and theme choices
- Some of this data is stored on your device (AsyncStorage). Summary stats and notification preferences may also sync to our cloud database so your account works across devices.
User-Generated Content (UGC)
If you use social features, we store content you create or share:
- Flashcard decks and cards (including decks shared with class groups)
- Activity posts and deck votes in class feeds
- Group chat messages
- Reports you submit about other users’ content
Device and Technical Data
- Push notification tokens and device platform (iOS/Android) to deliver notifications
- App version and basic diagnostic logs
- Subscription status via RevenueCat (linked to your account user ID and store receipt data; we do not receive your full payment card details)
When you use AI deck generation or Snap-a-Page, we process:
- Text prompts and pasted notes you submit
- Photos you choose to upload for flashcard extraction
These are sent to our server and processed using third-party AI services. We use this data only to generate flashcards for you and enforce usage limits. Do not upload images containing personal information you do not want processed.
Safety and Moderation
- Block lists (users you have blocked)
- Content reports and moderation actions taken by you or our moderators
We use collected information to:
- Provide account sign-in, cloud sync, and core study features
- Deliver push notifications according to your preferences
- Enable class groups, shared decks, feeds, chat, voting, and related social features
- Process subscriptions and restore purchases
- Generate AI flashcards when you request them
- Enforce community guidelines, respond to reports, and improve safety
- Respond to support requests
- Maintain, secure, and improve the App
We do not sell your personal information.
Data Storage and Retention
- Local storage: Much of your study progress and preferences live on your device.
- Cloud storage (Supabase): Account profiles, social content, notification tokens, synced preferences, usage stats, blocks, and reports.
- Deletion: You can delete your account in Settings → Delete Account, which removes your account and associated server data through our deletion process. Some information may be retained briefly in backups or as required by law.
Data Sharing
We share data only with service providers that help us operate the App:
| Provider |
Purpose |
| Supabase |
Authentication, database, and file storage |
| Expo |
Push notification delivery |
| RevenueCat |
Subscription management and purchase validation |
| Apple |
Sign in with Apple and in-app purchases (iOS) |
| OpenAI (via our server) |
AI flashcard generation from your prompts and optional photos |
These providers process data under their own privacy policies and our instructions for providing the service.
We may disclose information if required by law or to protect the rights, safety, and integrity of users and the App.
Your Rights and Choices
You can:
- Access and update profile information in the App
- Disable notifications in Settings
- Block users and report content in the App
- Delete your account in Settings (permanent)
- Manage subscriptions through Apple ID / Google Play settings
- Contact us with privacy questions or requests at kushald@berkeley.edu
Depending on where you live, you may have additional rights (such as access, correction, or deletion under GDPR or CCPA). Contact us to exercise those rights.
Data Security
We use industry-standard measures including HTTPS, encrypted storage on supported platforms, and access controls on our database. No method of transmission or storage is 100% secure.
Children’s Privacy
The App is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact us and we will delete it.
International Users
Our services are operated from the United States. If you use the App from other regions, your information may be transferred to and processed in the U.S.
Changes to This Policy
We may update this Privacy Policy from time to time. We will post changes at this URL and update the “Last Updated” date. Material changes may also be communicated in the App when appropriate.
- Email: kushald@berkeley.edu
- Subject: Tidbit App Privacy Policy Inquiry
Third-Party Privacy Policies
- Supabase: https://supabase.com/privacy
- Expo: https://expo.dev/privacy
- RevenueCat: https://www.revenuecat.com/privacy
- Apple: https://www.apple.com/legal/privacy/
- OpenAI: https://openai.com/policies/privacy-policy
See also: Terms of Service