Privacy Policy

The data controller is Robin Pluviaux, a French sole trader operating under the trade name Pluviaux, SIREN 948 269 568, established at 104 rue Le Désert, 47200 Montpouillan, France.

For any privacy question or request, contact contact@edu-fiche.com.

• Account and authentication data: email address, name, profile picture, technical identifiers, login method, and data provided by Google or Apple when selected.
• Learning profile: education level, preferences, goals, progress, results, quiz answers, statistics, and learning history.
• Content: courses, documents, images, YouTube transcripts, study sheets, flashcards, quizzes, exams, messages, and other imported or created content.
• Subscription data: plan, status, dates, Stripe identifiers, and the history required for customer management. EduFiche does not receive the full card number.
• Support and communication data: support messages, email address, and relevant communication history.
• Technical and analytics data: IP address, device, browser, viewed pages, clicks, product events, performance, errors, and session recordings with input fields masked.

The document excerpts and instructions needed to provide a requested feature are sent to specialized artificial intelligence and document recognition providers to create study sheets, quizzes, flashcards, exams, and analyses.

Under the contractual terms applicable to the services used by EduFiche, this data is not used to train provider models. Do not upload sensitive data or unnecessary personal data concerning another person.

Courses, derived documents, and study sheets are public by default in order to contribute to the EduFiche library. Other users and visitors may view and share them. Premium subscribers may make their content private.

Before publishing, remove names, contact details, named grades, health information, and any other personal data concerning another person. Deletion from EduFiche cannot guarantee deletion of copies previously made by third parties or indexed by search engines.

• OVHcloud for server and database hosting.
• An S3-compatible object storage service for documents and images.
• Artificial intelligence and OCR providers for requested generations.
• Stripe for payments, subscriptions, refunds, and fraud prevention.
• Plunk for transactional emails and communications.
• PostHog, Contentsquare, and a Umami instance for usage analytics, performance, and session recordings.
• Google, Apple, and YouTube when their authentication or import features are used.
• Authorities or professional advisers where required by law or necessary to establish or defend EduFiche's rights.

Some providers may process data outside the European Economic Area. Depending on the provider, EduFiche relies on an adequacy decision, European Commission standard contractual clauses, or another recognized safeguard. Information about these safeguards may be requested at contact@edu-fiche.com.

• Account, content, and progress: for the life of the account. Account deletion removes active account data and cancels the subscription, except for information that must be retained by law or for a dispute.
• Invoices and accounting documents: 10 years from the end of the relevant accounting year.
• Support requests and contractual evidence: for the time needed to process them and the applicable limitation period.
• Security logs: for a period proportionate to the security purpose, generally no more than 12 months unless an incident occurs.
• PostHog events: the period configured for the project, currently up to 84 months. PostHog session recordings: 30 days.
• Analytics cookies and identifiers: according to their purpose and provider settings, generally no more than 13 months.
• Technical backups: deleted or overwritten under the backup cycle, with restricted access and no routine reuse.

EduFiche uses trackers needed for login, security, and preferences, as well as product and audience analytics tools. PostHog may link browsing on edu-fiche.com with use of app.edu-fiche.com and, after login, with the user account. Session recordings may be created with typed fields masked.

Trackers may be limited or deleted through browser settings. Blocking necessary trackers may prevent login or certain features.

EduFiche is available from age 15. A paid subscription must be purchased by an adult or with the authorization of the minor's legal representative.

Minors should take particular care before publishing a document. A legal representative may contact EduFiche to exercise the minor's rights where permitted by law.

Send requests to contact@edu-fiche.com. Proof of identity may be requested only where there is reasonable doubt. EduFiche normally answers within one month.

You may also complain to the French data protection authority, CNIL, at www.cnil.fr, or to the competent authority in your country.

• Access, correction, deletion, and restriction of processing.
• Objection to processing based on legitimate interests for reasons relating to your situation.
• Data portability where the legal conditions are met.
• Withdrawal of consent for processing based on consent.
• Instructions about personal data after death where French law applies.

EduFiche implements technical and organizational safeguards, including encrypted connections, restricted access, authorization controls, and backups. No system can guarantee absolute security.

This policy may change to reflect service or legal developments. The current date appears above and material changes may be announced in the application or by email.