Data and Privacy

What data Neurako stores

Account data:

• Email address and authentication credentials (hashed password, OAuth tokens if applicable)
• Account preferences and settings
• Subscription status and billing identifiers

Deck and card data:

• All deck titles, descriptions, and card content you create or import
• Review history: every card rating, timestamp, and session duration
• FSRS state per card: stability, difficulty, and scheduling parameters calculated from your reviews

Tutor memory:

• Conversation context that the AI tutor stores to provide continuity across sessions
• This is stored in your account and can be reviewed or cleared at any time from Settings → AI Settings

Analytics events:

• Anonymized product usage events: feature interactions, session lengths, navigation patterns
• These events do not include the content of your cards or messages
• Collected via PostHog

External services that process your data

Neurako uses third-party services to operate. The following services process data as part of normal product function:

Supabase Database and authentication provider. Your account credentials, card content, deck data, and review history are stored on Supabase's servers (Postgres). Authentication (email/password) is handled by Supabase Auth.

Google Gemini AI processing. When you use any AI feature — text-to-cards generation, image capture, audio transcription, or the AI tutor — the content you submit (text, images, audio) is sent to Google's Gemini API for processing. Google processes this data according to Google's API terms and privacy policy.

LangCraft Speech API Optional roleplay pronunciation assessment. When you enable pronunciation feedback, your session recording is sent to LangCraft for phoneme-level scoring. Neurako processes audio in memory and does not persist raw recordings — only derived pronunciation scores are stored with your session report.

OpenRouter Optional routing of AI requests to supported model providers.

Resend Transactional and (where consented) lifecycle email delivery.

Expo / EAS Building, signing, and delivering the Neurako mobile apps.

Apple and Google In-app purchases (the stores are merchant of record) and Sign in with Apple / Google.

PostHog Product analytics. Anonymized usage events are sent to PostHog's EU cloud to help Neurako's team understand how features are used and identify issues. Events are anonymized and do not include card content. Analytics are collected only after you opt in.

RevenueCat Subscription and in-app purchase management. RevenueCat handles entitlement tracking and billing state for mobile subscriptions (App Store and Google Play) and communicates with the payment processor.

Stripe Payment processing for web subscriptions and token pack purchases.

Vercel Web application hosting. The Neurako web app (app.neurako.com) is hosted on Vercel's infrastructure.

Cloudflare CDN, security, and performance layer for the web app and API. Cloudflare Turnstile (bot protection) is used on authentication forms.

Railway API server hosting. The AI and backend API runs on Railway's infrastructure.

What Neurako does not do

• Does not sell your personal data or card content to third parties
• Does not share your card content with other users unless you explicitly publish a deck as public
• Does not use your card content to train AI models (beyond standard API usage governed by provider terms)

AI features and your content

When you use AI generation, image capture, the voice tutor, or roleplay pronunciation feedback:

1. The content you submit (text, an image, audio) is sent to Google Gemini and/or LangCraft via the Neurako API, depending on the feature
2. The provider processes the content and returns generated cards, a tutor response, or pronunciation scores
3. The generated card content or derived report data is stored in your Neurako account
4. Original input files (images, audio) are not stored permanently after processing — they are handled transiently and not retained in Neurako's database (pronunciation keeps only numeric/IPA report data)

If you are studying sensitive material (medical records, personal financial information, confidential work documents), be aware that content submitted to AI features is processed by Google.

Account deletion

You can delete your account at any time:

1. Open Settings (web: sidebar → Settings; mobile: Profile tab → Settings)
2. Go to Account
3. Select Delete Account
4. Confirm the deletion. This action is permanent and cannot be undone.

Account deletion removes your profile, decks, card data, review history, and tutor memory. Some data (such as billing records) may be retained for the period required by law or payment processor requirements. See the privacy policy for specifics.

Cookies and browser tracking

The Neurako web app uses:

• Session cookies: required for authentication. These are functional and cannot be opted out of while signed in.
• PostHog analytics: collects anonymized usage events. You can opt out of analytics tracking in Settings → Account.

The marketing site (neurako.com) uses essential session and Turnstile security cookies, a NEXT_LOCALE language cookie, and opt-in PostHog/Vercel analytics; see the cookie notice on that site.

Your rights

Depending on your jurisdiction, you may have the right to:

• Access the data Neurako holds about you
• Request correction of inaccurate data
• Request deletion of your account and data (see above)
• Object to certain types of processing

To exercise these rights or ask questions about your data, contact Neurako at the address listed in the privacy policy at neurako.com/privacy.

Related reading

FAQ

Answers to common questions about Neurako — plans, features, privacy, and account management.

Pricing and Plans

Neurako's Free and Pro plans, AI token packs, and billing details.