Paper TigerGuided active recallHome

Privacy

What Paper Tiger stores, what is optional, and what stays out of analytics.

Last updated: 30 June 2026. This notice explains how Paper Tiger handles account, study, privacy, and product data.

Essential account data

Sign-in, security, saved study work, progress, settings, and privacy records are needed to run the app.

Optional analytics

Product analytics are separate. You can accept them, reject them, or change your account setting later.

Study content stays out

Analytics are designed not to contain transcripts, answers, source text, audio, names, emails, or free-text study content.

The short version

You need some data processing to have an account. Optional analytics are separate. Product analytics are meant to show whether the app works, not to inspect your study content.

Company and Controller

These are the registered company details behind Paper Tiger.

Paper Tiger is operated by Paper Tiger Learning Technologies Ltd, a company registered in England and Wales under company number 17308917. Registered office: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF.

Where Paper Tiger decides why and how personal data is processed, Paper Tiger Learning Technologies Ltd acts as the data controller for that processing.

167-169 Great Portland Street5th FloorLondonW1W 5PF

Account Basics

These are the records Paper Tiger needs to provide the study app.

Who this notice covers

This notice applies to people who visit, request access to, create an account for, or use Paper Tiger. Paper Tiger is a study tool for conceptual learning and active recall, operated by Paper Tiger Learning Technologies Ltd. It should not be used with sensitive real-world personal material or study materials you do not have the right to use.

Personal data we collect

  • Account details such as email address and sign-in records.
  • Study setup choices, selected modules, plans, review schedule, settings, and preferences.
  • Learner-created study content such as typed transcripts, saved attempts, AI feedback, progress records, flashcards, and issue reports.
  • Operational records such as privacy requests, consent records, security/audit records, API usage and quota records.
  • Optional product analytics if you choose to turn analytics on.

How we use it

  • provide the learning app, including topic selection, grading, progress, review queues, flashcards, exports, and account settings
  • keep the app secure, prevent abuse, maintain audit records, and troubleshoot errors
  • process privacy requests, support requests, and account administration
  • improve the product using optional analytics only where you have opted in
  • operate payment or subscription features if those features are enabled for your account

Account Terms and Analytics Choice

Creating and using an account requires essential service data processing for sign-in, security, saved study progress, privacy choices, troubleshooting, and account administration. If you do not want Paper Tiger to process that essential service data, you should not create an account.

Optional product analytics are separate from the account terms. You can accept or reject analytics when the cookie banner appears, review the account-level choice during setup, and change it later in Settings.

Cookies and Browser Storage

The service-choice record is there so Paper Tiger can remember what you picked.

We use essential cookies and similar browser storage for sign-in, session refresh, security, and remembering service choices. These are needed for the app to work.

Optional product analytics are off unless you choose to turn them on. We do not use advertising cookies, marketing pixels, or session replay tools.

If you reject optional analytics, Paper Tiger stores that choice so the app can respect it. If you later turn analytics on or off in Settings, your account-level choice is updated as well.

Product Analytics

This is the clearest split: what happens if you accept, and what happens if you reject.

If you opt into analytics, Paper Tiger may record limited product usage events such as feature use, routes, study modes, and coarse learning-flow events. Analytics events are designed not to contain transcripts, answers, source text, audio, images, names, emails, or free-text study content.

You can turn analytics off in Settings. Missing consent or an essential-only choice means optional analytics should not be saved.

Accept analyticsReject optional
  • page and route use through Vercel Web Analytics, with private join links sanitised
  • coarse study-session activity such as study surface, active/idle/visible duration bands, and whether the app is installed as a PWA
  • learning-flow events such as opening a topic, completing a primer, submitting a blurt, grading success/failure, review queue use, flashcard creation, and calendar connection
  • coarse grading and calibration information such as score bands, transcript length bands, attempt mode, model name, prompt/answer-key version, and error codes
  • coarse voice/transcription reliability information such as audio duration bands, transcription latency bands, retry bands, transcript length bands, model name, and error codes
  • setup and preference changes such as study intent, role, experience level, study context, time pressure, preferred learning style, and whether the change came from onboarding or Settings
  • issue-report metadata such as report type, target type, severity, page type, and related topic or module code
  • optional Vercel Web Analytics does not load
  • first-party product analytics events are not saved to the analytics events table
  • study-session heartbeat, active/idle duration, learning-flow, transcription, calibration, feature-use, and issue-report analytics are not saved
  • your browser or account still stores the essential choice needed to honour your rejection and avoid repeatedly showing the banner
  • core app records you create, such as account data, study transcripts, grades, progress, flashcards, settings, privacy requests, and support reports, may still be stored because they are part of the service rather than optional analytics

What Analytics Never Records

Paper Tiger product analytics are intended to measure whether the app works, not to inspect what you wrote or said. Analytics events are blocked from including:

  • typed transcript or answer text
  • answer-key text, source excerpts, textbook/course-pack extracts, or learner free text
  • raw audio, waveform data, word-level confidence, audio URLs, or image URLs
  • names, email addresses, support-message text, or other free-text personal details
  • raw prompts, raw AI output, or raw feedback text
  • exact duration values, keystrokes, edit history, click coordinates, DOM selectors, clickstream, session replay, or second-by-second timelines

AI Processing

AI is used for learning support, not professional advice.

Paper Tiger sends learner submissions and relevant answer-key context to server-side AI services when needed for grading, transcription, feedback, or related learning features. OpenAI API calls are made from the server. API keys are not exposed to the browser.

AI feedback may be incomplete or wrong. You should review it as study support, not as professional, regulated, or personalised advice.

Service Providers

We use service providers to operate the app, including:

  • Supabase for authentication, database storage, and related backend services.
  • OpenAI for server-side AI grading, transcription, and structured feedback features.
  • Vercel or the deployment host for app hosting, logs, and operational delivery.
  • Stripe for payment or subscription processing if billing features are used.

Data Retention

Study records are kept while your account is active so Paper Tiger can show progress, review queues, previous attempts, and flashcards. Some security, audit, billing, and accountability records may be retained where needed for legitimate operational, legal, or compliance reasons.

Your Choices and Rights

The practical controls live in Settings once you have an account.

You can use Settings to export your data, record privacy requests, manage optional consent, and request deletion of account and study data. Depending on where you live, you may also have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data.

Security

Paper Tiger uses access controls, server-side API handling, row level security patterns, and secret-hygiene controls to protect the app. No internet service can guarantee perfect security.

Contact

For privacy questions or requests, use the privacy tools in Settings if you have an account. If you do not have an account, contact the Paper Tiger team through the access or support channel provided to you.