KSUR Services (trading as "Cardemio") is the data controller responsible for the personal data processed through the Cardemio service.
We collect account information (email, name), content you upload (PDFs, decks, cards, comments), usage data (quiz scores, interactions), and technical data (IP address, browser type) to operate and improve the service. Payment and billing information is collected and processed directly by our Merchant of Record, Paddle.com, not by KSUR Services.
We use your data to provide the flashcard and quiz services, generate AI study materials, enable community features, personalize your experience, and communicate with you about your account. Our legal bases for processing are: (a) performance of a contract with you (to deliver the service and manage your subscription); (b) our legitimate interests (to secure, maintain, and improve the service, and to prevent fraud and abuse); (c) your consent (for optional analytics, marketing, or non-essential cookies, where required); and (d) compliance with legal obligations (accounting, tax, and responding to lawful requests).
We do not sell your personal data. We share data with categories of recipients strictly necessary to operate the platform, including: cloud hosting and database providers; AI model providers used to generate study materials; and Paddle.com, our Merchant of Record, which processes payments, manages subscriptions and invoicing, and handles sales-tax compliance and refunds on our behalf. We may also share data with professional advisers and with authorities where required by law. Public decks are visible to all users.
We implement industry-standard technical and organisational measures (encryption in transit, access controls) to protect your data. However, no online service is completely secure. You are responsible for keeping your password confidential.
We use cookies and similar technologies for authentication, preferences, and analytics. You can control cookies through your browser settings.
Subject to applicable law, you have the right to access, correct, delete, export, restrict, or object to the processing of your personal data, and to withdraw consent at any time. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with your local data protection authority.
We retain your data as long as your account is active or as needed to comply with legal, tax, and accounting obligations. You may delete your account at any time, which will remove your personal data and private content. Public decks may remain unless explicitly deleted.
We may update this Privacy Policy periodically. We will notify you of significant changes via email or in-app notice.
For privacy-related questions, contact KSUR Services at support@cardemio.com.