Privacy Policy

Effective October 22, 2026

1. What we collect ¶

Discito is built to collect as little as possible. Here is the complete list of data that ever leaves your device:

Anonymous crash reports and usage counts (via Sentry)

When the app crashes or freezes, we receive a technical report so we can fix it. The report includes:

• Device model (e.g. "iPhone 17 Pro")
• iOS version (e.g. "26.5")
• Discito version (e.g. "1.0.1 (…)")
• An anonymous per-launch identifier that lets us tell whether two crashes came from the same session
• The stack trace of the crash
• Developer-authored OSLog breadcrumbs (sanitized — user card content, deck names, file paths are never included)

The report does not include any of your cards, decks, review history, search queries, AI prompts, audio, transcripts, or any other content you've created in Discito. Besides crash reports, Discito sends Sentry anonymous usage counts — for example, that onboarding finished, that a paywall was shown, or that a cloud AI request succeeded or why it failed. These counts carry no card content, no text you typed, and no personal identifier. There is no performance tracing and no user-content sampling.

Crash reporting via Sentry runs independently of iOS's Analytics & Improvements toggle. Sentry uses its own crash handler and uploads crash diagnostics directly to Discito's project at sentry.io. Apple's Settings → Privacy & Security → Analytics & Improvements → Share with App Developers toggle gates iOS's built-in MetricKit and Apple's own crash aggregation pipeline, not third-party SDKs like Sentry. Disabling that toggle stops crashes from reaching Apple but does not stop them from reaching Discito via Sentry.

To stop crash uploads to Discito today, the only option is to delete the app. We may add a per-app opt-out in a future release if user demand emerges — until then, the crash data Sentry collects is minimal (see above) and never includes content you've created in Discito.

Aggregate website analytics (via Cloudflare)

We use Cloudflare Web Analytics on discito.app to count page views and see which pages people read. It's server-side only — no cookies are set in your browser and no per-visitor profile is built. We see totals; we never see you.

Apple StoreKit purchase verification

When you buy Discito Pro, Apple's StoreKit framework verifies the transaction with Apple's servers and gives Discito a signed entitlement token. We never see your Apple ID, your payment method, or your billing address. Apple's privacy policy covers the purchase transaction; Discito only receives a yes-or-no answer to "does this user own Pro?"

Cloud AI text and AI credits (only if you turn on cloud AI)

If you turn on cloud AI, the text you give the AI is sent to make your cards and quiz choices, and an anonymous per-app account ID from Apple is used to keep your AI credit balance. Details, including who receives what, are in Cloud AI.

2. What we don't collect ¶

For the avoidance of doubt, Discito does not collect, transmit, or otherwise see:

• The contents of any deck, card, or note you create or import
• Your review history, FSRS scheduling state, streak count, or daily goal progress
• Search queries you type into the app
• Tags you apply to cards
• Lecture audio recordings, transcripts, or any audio captured by the in-app recorder
• AI prompts, AI-generated draft cards, AI-generated images, or any other AI input or output — except, when you turn on cloud AI, the text described in Cloud AI, which passes through our AI server to the AI provider and is not kept
• Your location, contacts, photo library, calendar, or microphone audio (except as routed entirely on-device for lecture capture)
• Your Apple ID, email address, name, phone number, or any other identifier
• Cookies that identify you across browsing sessions on our website

3. Where your data lives ¶

All of your Discito content — decks, cards, images, audio, review history, settings, FSRS state — lives in your iCloud Drive container, identified as iCloud.app.discito.ios. This is a private container inside your own Apple ID; nobody at Discito can see inside it, and Apple does not give us access to it.

iCloud sync is free for every Discito user. It is not a Pro feature. If you have iCloud Drive enabled on your devices, Discito will sync automatically with no setup.

Deleting your data: uninstalling the app removes the local copy from that device. To delete the iCloud copy as well, open iOS Settings → [your name] → iCloud → Manage Account Storage → Discito and tap Delete Data. Because the data lives in your iCloud and not on our servers, only you (or Apple at your request) can delete it — we have no ability to do so on your behalf.

4. AI features ¶

By default, Discito's AI features — card generation from PDFs and pasted text, AI image generation, lecture audio transcription, and smart quiz distractors — run entirely on your device using Apple's Foundation Models, SpeechAnalyzer, and ImagePlayground frameworks. Nothing you give them is uploaded anywhere.

In the lecture capture feature, the optional "Keep source for re-generation" toggle (a Pro feature) saves the lecture's original audio bytes into your iCloud container, so you can regenerate cards from it later. That audio still never leaves your iCloud — it just gets stored in your private container instead of being discarded after transcription.

Cloud AI (optional, off until you turn it on)

Discito can also make cards and quiz choices with cloud AI, which works on any iPhone and usually gives better cards. Nothing is sent until you agree. The first time you start an AI action, Discito asks once — Turn On or Use On-Device — and remembers your answer. You can change it any time in Settings → Cloud AI. With cloud AI off, everything stays on your device as described above.

When cloud AI is on, Discito sends:

• For card generation: the text of the document or pasted passage you chose, or the transcript of your lecture (with the time of each part, so cards can link back to the recording). The audio itself never leaves your device — transcription always happens on your iPhone.
• For quiz choices: the question and correct answer of the card being quizzed, plus up to 20 other answers from the same deck so the wrong choices fit.

The text goes to Discito's AI server (a Cloudflare Worker), which passes it to Anthropic's Claude. If Claude can't answer, the same request goes to Google's Gemini instead. The server does not store the text or the cards it gets back, and it does not log them.

• Anthropic does not use API data to train its models, and deletes it within 30 days by default. See Anthropic's privacy policy.
• Google is used only through its paid Gemini API, which does not use the data to train its models. Discito asks Gemini not to store the request (store: false). See Google's Gemini API terms.

AI credits. To keep your AI credit balance (and count free AI tries), the server stores, per Apple account: an anonymous ID that Apple gives each Apple account for each app (Apple's app transaction ID — it is not your Apple ID or email), your credit balance, and IDs of the purchases and generations that changed it. To confirm requests come from a real copy of Discito, each request also carries an Apple DeviceCheck token, which the server checks with Apple and does not keep. The server asks Apple whether that ID owns Discito Pro or bought a credit pack; Apple does not tell us who you are. We may count, without any of your text, how often cloud AI is used and why a request failed, to keep the service working.

5. Third-party services ¶

The complete list of third parties that touch any Discito data:

• Apple — iCloud (your data storage), StoreKit and the App Store Server API (purchase and AI credit verification), DeviceCheck (confirming cloud AI requests come from Discito), Foundation Models / SpeechAnalyzer / ImagePlayground (on-device AI inference). Apple's handling of this data is covered by their own privacy policy.
• Sentry — anonymous crash and freeze reports, plus anonymous usage counts (no card content). See their privacy policy. System-level opt-out via Settings → Privacy & Security → Analytics & Improvements.
• Anthropic — only if you turn on cloud AI: makes cards and quiz choices from the text described in Cloud AI. See their privacy policy.
• Google — only if you turn on cloud AI, and only when Claude can't answer: the same request, through the paid Gemini API. See the Gemini API terms.
• Cloudflare — web hosting for discito.app, aggregate, server-side, cookieless analytics, and the server that runs cloud AI and keeps AI credit balances. See their privacy policy.

That's the whole list. No advertising networks, no Google Analytics, no Facebook Pixel, no Mixpanel, no Hotjar, no Segment, no Amplitude. We don't sell or rent any data, and we share it with no one beyond the services above.

6. Children ¶

Discito is rated 4+ on the App Store and contains no age-restricted content. Because we don't knowingly collect personal information from anyone — adult or child — we have nothing to specifically remove for users under 13 (United States), under 16 (EEA), or under any other age threshold defined by your local law. If you believe a child has used Discito and you'd like to confirm that no data was retained on our side, please write to us at the address below; the answer will essentially always be "we never had any data to begin with."

7. Your rights ¶

Depending on where you live, you may have the right to access, correct, delete, restrict, or port the personal data a company holds about you (GDPR in the EEA, CCPA in California, similar regimes elsewhere). Because Discito does not collect personal data about you, there is nothing in our possession to access, correct, port, or delete on your request.

Where the underlying data does exist, here is who actually holds it and how to reach them:

• Your decks, cards, and review history are in your iCloud. Manage them via iOS Settings → [your name] → iCloud → Manage Account Storage → Discito.
• Your purchase record is held by Apple. Manage it via iOS Settings → [your name] → Subscriptions / Purchase History.
• Your AI credit balance is held on our cloud AI server, keyed by Apple's anonymous app transaction ID. Purchased credits never expire. To have it deleted, write to us at [email protected] (we'll ask for the purchase receipt so we can find it — we can't otherwise tell which balance is yours).
• Your crash reports are held by Sentry under our account. Write to us at [email protected] with your device model + approximate dates and we'll delete them.

8. Changes to this policy ¶

We may update this policy if our practices change or to clarify wording. When we do, the Effective date at the top will move forward and the new version will be posted here. For any material change — say, if we ever added a new third-party service or started collecting a category of data — we'll show an in-app notice the next time you open Discito, before the change takes effect.

9. Contact ¶

Questions, corrections, or just want to verify a claim on this page? Write to [email protected]. We answer real emails from real people.