Privacy Policy

1. Who we are

[[Company legal name]] ("Adki", "we", "us") runs the Adki add-on for Anki and the Adki website. We decide how your personal information is used. You can reach us at support@adki.app or [[Postal address]].

2. What we collect

Account details. Your email address and a scrambled (hashed) version of your password. If you sign in with Google, we also store your Google account id.

Profile. Your date of birth, country, postal code and gender.

Review data from the add-on. For each card you answer while earning is on, the add-on sends:

• a one-way fingerprint (SHA-256 hash) of the note's id and of the card's id, and of the deck's name;
• which answer button you chose, how long the card was on screen, and when you answered;
• whether Anki's auto-advance answered the card, whether you pressed a key or clicked during the card, whether the Anki window was active, and whether a survey interrupted the card.

The add-on never sends the text, images or sound on your cards, and it never sends your collection.

Device and network. A random id the add-on creates when it is installed, your IP addresses, your browser or add-on version, and when you were last active.

Earnings and payouts. The survey completions and reversals our survey partners report, your balance history, the payout method and destination you choose (for example, a PayPal email address), and your payout history.

Ads. Our ad server records when an ad was shown to your install and whether it was clicked.

Tax details. If you live in the US and your payouts approach the IRS reporting threshold, we will ask for the details on a W-9 form.

3. How we use it

• To match you with surveys and credit your rewards.
• To check that earnings come from real study by a real person, and to stop fraud before money is paid out.
• To pay you, through our payout provider.
• To count ad views and clicks for sponsors. Sponsors receive totals, never your identity.
• To send you emails about your account, such as sign-in links and payout updates.
• To meet legal and tax obligations.

4. Our legal bases (UK)

If you are in the United Kingdom, we rely on:

• contract, to run your account and pay you;
• legitimate interests, to prevent fraud and keep Adki secure;
• consent, to send review data and to share your profile with survey partners (you give this during setup, and you can withdraw it at any time, although earning then stops);
• legal obligation, for tax and accounting records.

5. Who we share it with

• Survey partners, such as BitLabs. We give them a random user id and your date of birth, gender, postal code and country, so they can match surveys to you. When you open a survey, your device connects to the partner directly, so the partner also sees your IP address and browser details. The partner's own privacy policy covers your survey answers.
• Our payout provider (Tremendous). Your name, email address, payout destination and the amount.
• Our email provider (Resend). Your email address and the emails we send you.
• Our hosting providers (Railway and Vercel). They store and serve our systems.
• Authorities, when the law requires it.

We do not sell your personal information for money. Under some US state laws, giving profile details to survey partners can count as a "sale" or "sharing". You can stop it by withdrawing consent to partner sharing, which also stops surveys.

6. How long we keep it

• Review data: 24 months.
• Money records (credits, reversals, payouts, tax details): 7 years, for tax and accounting.
• Everything else: while your account is open. When you close it, we delete the rest within 90 days, except what we must keep to prevent fraud or meet the law.

7. Where it is stored

Our systems are hosted in the United States. If you are in the United Kingdom or Canada, your information is transferred there with the safeguards the law requires.

8. Your rights

You can ask to see, correct, download or delete your information, object to how we use it, or withdraw a consent. Email support@adki.app. We answer within one month.

If you are unhappy with our answer, you can complain to the Information Commissioner's Office (UK) or the Office of the Privacy Commissioner of Canada. If you live in a US state with a privacy law, you have the rights that law gives you, and we will not treat you differently for using them.

9. Age limit

Adki is only for adults 18 and over. If we learn that an account belongs to someone younger, we close it and delete its information.

10. Security

Passwords are stored hashed, sign-in tokens are stored hashed, and all traffic is encrypted in transit.

11. Changes

If we change this policy in a way that matters, we will tell you by email or in the add-on before the change takes effect.