Privacy Policy

Dyscendi — last updated: 12 October 2026

Who runs the app

Dyscendi is operated by Karim Dehouche, doing business as HJTlearning (Human Journey Training Learning).

The person responsible for the protection of personal information, under Quebec's Act respecting the protection of personal information in the private sector, is Karim Dehouche. For any question, or to request access, correction or deletion, write to question@dyscendi.com. We answer within thirty days.

For anything that does not concern your personal information — help, billing, unsubscribing — write to help@dyscendi.com instead. That keeps a support question out of the queue for legal requests.

What we collect

• Your account: your email address, handled by Firebase Authentication. If you choose a password, we never see it. If you sign in with Google or Apple instead, they confirm who you are and pass us the email address of that account — Apple lets you hide it behind a relay address — and Google also passes the name and profile picture of your Google account. No password reaches us.
• Your profile: display name, photo, education level, class and age. All optional except the email address.
• Your content: the decks and cards you create or generate, and the documents and photos you import.
• Your review history: for each card reviewed, the rating, the date and the thinking time. This is what lets the algorithm schedule your reviews.
• Your usage counter: the number of AI-generated cards used since the start of the current month, and the date that month ends, to enforce the free plan cap. Cards made by hand are not counted.
• Your subscription: its status and the payment history reported by the store.

We do not collect your location, your contacts or your address book. Camera and photo library access is used only to import a page of notes or a profile picture, at the moment you ask for it.

Review reminders are off until you turn them on. They are scheduled on your device itself: nothing is sent to us or to anyone else to make them appear.

Why

To run the app: sign you in, keep your cards, schedule your reviews, generate cards from your documents, enforce the free plan limits and manage your subscription. Nothing else.

Who we entrust it to

• Google Firebase (authentication, database, storage, functions) — hosts your account and content. Server-side processing happens in the us-central1 region, in the United States.
• Google Gemini — the document you import is sent to it to draw cards from. It is only sent when you start a generation.
• RevenueCat — validation of subscriptions purchased on the App Store or Google Play.
• Firebase Crashlytics — crash reports. When the app breaks, it receives the error message and stack, your account's internal identifier, the device model and the version of Android or iOS. Never the content of your cards or documents.
• Hostinger — the mail server that carries the welcome message sent when your account is created. Only your address passes through it.

These providers act on our behalf. We do not sell any data and we disclose none to anyone else, except where legally required.

Advertising

The app contains no advertising, on either plan. Revenue comes from the subscription alone.

This holds even though elementary school is no longer among the levels served: in Quebec, secondary school starts at twelve, so section 248 of the Consumer Protection Act — which prohibits commercial advertising directed at children under thirteen — may still apply.

Minors

The app is aimed at high school, college, university and continuing education students. It is not intended for elementary school pupils. Part of that audience is nonetheless under age: if you are under fourteen, a parent's or guardian's consent is required before creating an account. A parent may request access to their child's information, its correction or its deletion, at question@dyscendi.com.

How long

Your data is kept as long as your account exists. Nothing expires on its own: no automatic purge runs, and you decide when to erase. The documents you import therefore stay in place after cards are generated, so you can draw more cards from them later without uploading them again.

Two actions, and they do not do the same thing.

• Settings › Data erases your decks, your cards and your review history. Your account, your profile and the documents you imported stay.
• Settings › Account and profile deletes the whole account: profile, photo, decks, cards, review history, imported documents, usage counters and payment history.

Neither can be undone.

What deletion cannot reach. Three traces live outside our systems, and it would be dishonest to promise you otherwise: the purchase history kept by the store and by RevenueCat, which tax law requires them to retain; crash reports already sent to Crashlytics; and our servers' technical logs, which hold operation identifiers for a few weeks — never the content of your cards or documents.

Your rights

Across Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) gives you the right to access your information, have it corrected and withdraw your consent. If you live in Quebec, the Act respecting the protection of personal information in the private sector also applies, and adds a right to deletion.

The app gives you deletion and consent withdrawal directly, from the settings. For other requests, write to question@dyscendi.com.

Security

Traffic is encrypted in transit. Your content is accessible only to your account: the Firestore and Storage security rules deny access to any other user. Your subscription status can only be changed by our servers, never from the app.

Changes

Any change to this policy will be published on this page, with a new update date.