Scope and accountability
This policy applies to personal information handled through the Edyex website and its student, professional, guest and contact features. Edyex is accountable for personal information under its control, including information processed by service providers on its behalf.
Information we collect
Account, plan and contact information
Username, name and email when supplied, email-verification status, password hash, two-factor authentication configuration and recovery codes, Free or Advanced plan status, flashcard-generation usage, language and mode preferences, and information submitted through the contact form. Edyex does not receive the rotating codes generated by your authenticator application until you submit one for verification.
Learning and work information
Courses, academic terms, exams, schedules, notes, objectives, flashcards, projects, folders, task descriptions, planned durations and recorded activity.
Files, prompts and audio
Readable text and optional instructions submitted for automatic flashcard generation, generated drafts and approved cards, plus the personal 30-second alarm excerpt that an Advanced user chooses to save.
Technical and notification information
Session cookies and ordinary server information such as IP address, browser, device, request time and diagnostic logs may be processed to deliver and secure the service. For audience measurement, Edyex uses a random anonymous browser identifier to aggregate daily visits without storing the visitor IP address. Successful account connections are also counted without associating an IP address with the event. If you activate locked-screen alerts, Edyex stores the Push subscription endpoint, cryptographic delivery keys, browser information and language needed to send the requested timer alert.
Guest mode keeps student courses and professional tasks separate and stores their names, timer state and totals in the browser session. Clearing browser data or ending the session may remove that information.
In the course reader, PDF viewing remains local in your browser. Word and Markdown documents are processed temporarily for readable-text extraction and then deleted immediately. Annotations are temporary by default and can optionally be kept in local browser storage on that device.
Why we use information
- Create and authenticate accounts and remember language or mode preferences.
- Provide timers, schedules, objectives, flashcards, analytics, exports and recommendations requested by the user.
- Respond to support, feedback, privacy and partnership requests.
- Maintain service reliability, prevent abuse, investigate errors and protect accounts.
- Meet legal obligations and establish, exercise or defend legal rights where permitted.
Edyex limits collection, use and communication to purposes that a reasonable person would consider appropriate in the circumstances. A new incompatible purpose will require notice and, where required, new consent.
Retention and security
Personal information is retained only as long as reasonably necessary for the stated purposes, account administration, legal requirements, dispute resolution and security. Delivered or cancelled timer alerts are removed after 30 days. An inactive Push subscription is removed after 180 days when it has no pending alert. When information is no longer required, it is deleted or anonymized according to applicable procedures and technical constraints, including backup cycles.
Administrative, technical and physical safeguards are selected according to the sensitivity, quantity, use and format of the information. Account safeguards include password hashing, time-limited email links, rate limiting and optional authenticator-based two-factor authentication. Recovery codes are single-use. Users remain responsible for protecting their password, authenticator and recovery codes. No online system can guarantee absolute security.
Consent, cookies and choices
Consent is requested in clear terms when required and may be withdrawn, subject to legal or contractual restrictions and reasonable notice. Withdrawal may prevent certain features from operating.
Locked-screen notifications are optional and separate from timer sound. They are used only for a timer you activate, use generic wording by default to limit information visible on a locked screen, and can be disabled for the current device from the timer notification panel or from browser settings.
Two-factor authentication is optional and can be enabled or disabled from the account profile after the required security checks. Disabling it removes the registered authenticator configuration and recovery codes.
Automatic flashcard generation occurs only when the user selects a document and requests analysis. Users control which generated cards are retained and may edit them before saving.
A PDF opened in the course reader remains local for viewing and annotation. Word and Markdown documents, and PDFs prepared for audio reading, are transmitted only to extract readable text; the upload is then immediately deleted and is not added to the account. Speech is generated by the browser. If you create a flashcard, only the question, answer and selected course are stored in your account.
Essential session and language cookies support authentication, security, guest timers and preferences. Edyex does not currently describe these essential cookies as advertising cookies. Browser settings can block or clear cookies, but doing so may interrupt the service or erase guest information.
Advanced subscriptions renew monthly or annually according to the option selected at checkout. Billing changes and cancellation are managed through the secure customer billing portal, subject to the terms presented at purchase. Authenticated users with a billing profile can also view invoice information and official billing documents in their Edyex payment history.
Access, correction and other rights
Subject to applicable law and exceptions, you may request access to personal information held about you, ask how it is used or communicated, and request correction of inaccurate or incomplete information. You may also ask about retention, authorized access categories and the Privacy Officer.
Depending on the law and circumstances, additional rights may include withdrawing consent, requesting deletion where appropriate, or raising a complaint. Edyex may verify identity and will respond within the period required by applicable law.
Privacy incidents
Edyex maintains a process to assess suspected loss, unauthorized access, use or communication of personal information, reduce harm and prevent recurrence. Incidents presenting the legally defined level of risk will be reported to the competent authority and affected individuals as required, and incident records will be maintained where required.
Questions, requests and complaints
Send privacy questions or requests through the Contact page and identify the request as a privacy matter. Include enough information to locate the relevant account or record, but do not send passwords or unnecessary sensitive information.
Privacy Officer: privacy@edyex.com
Edyex — Québec, Canada
If a concern is not resolved, you may contact the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada, as applicable.
Changes to this policy
This policy may be updated to reflect service, legal or operational changes. The effective date and version will be revised, and prominent notice or renewed consent will be provided when required.