1. Introduction
This privacy policy describes how Retentium collects, uses, stores and protects your personal data when using our service. By creating an account you automatically accept this policy.
2. Data Controller
Retentium is the data controller for processing your personal data under this policy and applicable data protection laws (GDPR).
3. Personal Data We Collect
We collect the following types of personal data:
- Account information: Email address, password (encrypted)
- Payment information: Transaction data from payment providers (we do not store card details)
- File data: PDFs you upload and generated flashcards
- Communication: Messages you send to us via support or feedback
4. How We Use Your Personal Data
We use your personal data to:
- Provide and improve our service
- Process your PDFs and generate flashcards
- Manage your account and authentication
- Process payments and manage credits
- Communicate with you about the service
- Comply with legal requirements and regulations
- Prevent abuse and ensure service security
- Personalize your experience (e.g. study recommendations, default settings based on your usage)
- Improve our AI models and flashcard generation quality (including anonymized or aggregated usage patterns)
- Analyze usage to improve the product, fix bugs, and prioritize features
- Develop new features that better match how you use the service
5. Legal Bases
We process your personal data based on:
- Contract: To fulfill our agreement with you
- Legitimate interest: To improve the service and ensure security, including personalization, analytics, research on usage patterns, and quality improvement of flashcard generation and study features
- Consent: When you explicitly consent to specific processing
- Legal obligation: When we must comply with laws and regulations
6. Service Improvement and Personalization
We use your data to make the service more useful for you by:
- Personalization: Using your preferences (e.g. AI model choice, language, study history) to tailor your experience and recommendations
- Quality improvement: Analyzing anonymized or aggregated patterns (e.g. how users rate cards, study schedules) to improve flashcard generation and spacing algorithms
- Product development: Understanding usage patterns to prioritize features and fix issues
- Service reliability: Using technical data to monitor performance and stability
We do not use your personal content (e.g. card text, chat messages) to train third‑party AI models unless we obtain your explicit consent.
7. Third‑Party Services and Data Sharing
We share your personal data with the following third parties:
- AI providers: We use multiple AI providers to process your uploaded PDFs, generate study cards, and power chat features. Depending on your choice, your documents may be sent to one or more of: Google (Gemini), Meta (Llama), OpenAI (GPT), and Anthropic (Claude). You can choose which AI model to use in your account settings or when customizing each job.
- Payment providers: To handle payments (Stripe)
- Cloud providers: For hosting and storage
- Analytics providers: To understand usage and improve the service
All third parties are bound by data protection agreements and may only use your data for specified purposes. Each AI provider processes data according to their own privacy policies.
8. Data Storage, Security and Copyright
Retention: We store your personal data as long as your account is active or as required to provide the service. Uploaded files may be stored permanently to enable later access.
Security measures: We use industry standard security measures including encryption, secure servers and access controls. However, we cannot guarantee 100% security.
Copyright and user responsibility: Retentium does not review your uploaded material for copyright. You are responsible for ensuring that everything you upload is used according to ethical and legal frameworks including copyright.
Important about server storage: The files you upload are stored on a server and processed by AI so you can access your PDF and the generated Anki file. In some regions this may be against copyright rules if the server is not owned by the rights holder.
9. Your Rights under GDPR
You have the right to access, rectify, erase, restrict processing, data portability, object to processing, and withdraw consent when processing is based on consent.
To exercise your rights, contact us at the details below or edit your details on your account page.
10. Shared Database and Company Affiliation
When you create an account, and when you continue using the service in either the Swedish or English version, you accept that the database for Retentium.com and StudieVerktyg.se is the same and that both services are operated by Njutrition AB. Your account details, files, and transactions are shared across the platforms and are processed in accordance with this privacy policy and our terms of use.
11. Changes to this Policy
We may update this policy from time to time. Material changes will be communicated via email or on the website. Continued use after changes means you accept the updated policy.
12. Contact Information
For questions about this policy or to exercise your rights, email us at hi@retentium.com.
Last updated: 2/28/2026
Related Documents
Also read our Terms of Use for information about service usage and limitations of liability.