Privacy Policy

Effective date: July 23, 2026

Suprism (the "Service") values the personal information of its users and complies with applicable laws. This Policy explains what information the Service collects and how it is used, stored, and protected.

1. Personal Information Collected

• At registration — Email address, password (stored only as an encrypted hash; the plaintext is never stored)
• While using the Service — Study data created by the user, such as decks and cards, and study progress
• For paid subscriptions — PayPal subscription identifier (subscription ID). Payment method information, such as card numbers, is handled directly by PayPal and is not collected or stored by the Service.
• Automatically collected — Access logs and cookies may be generated and collected while using the Service.

2. Purposes of Use of Personal Information

• Identifying members, maintaining login sessions, and sending email verification and password reset notices
• Storing study data and synchronizing it across devices
• Verifying and managing paid subscription status
• Operating and improving the Service and preventing fraudulent use

3. Retention Period and Disposal

Personal information is destroyed without delay upon account withdrawal (account deletion). Account deletion may be requested at himacorlife@gmail.com. Information that is legally required to be retained will be kept for the required period before being destroyed. When a Pro subscription expires, study data exceeding the Free plan limits will be retained for 30 days from the expiration date and may then be deleted.

4. Outsourcing of Processing and Third-Party Disclosure of Personal Information

To provide the Service smoothly, we outsource processing to or use the following companies. Other than as described below, we do not disclose personal information to third parties without the user's consent.

• Cloudflare, Inc. — Service hosting and data storage
• PayPal, Inc. — Processing payments for paid subscriptions
• Email delivery service — Sending registration verification and password reset emails
• Google LLC (Google AdSense) — Displaying advertisements (see Section 5 below)

5. Cookies and Advertising

• The Service uses session cookies to maintain login sessions. These cookies are deleted upon logout or expiration.
• The Service may display advertisements through Google AdSense. Third-party advertising providers, including Google, may use cookies to serve ads based on a user's prior visits.
• You can opt out of Google's use of advertising cookies at Google Ads Settings, and you can opt out of personalized advertising cookies from third-party advertising providers at www.aboutads.info.
• You can refuse to store cookies through your browser settings, but doing so may limit the use of certain features, such as logging in.

6. User Rights

Users may at any time request access to, correction of, deletion of, or suspension of processing of their personal information. Requests may be submitted to himacorlife@gmail.com and will be processed without delay.

7. Protection of Personal Information

• All communications are encrypted using HTTPS.
• Passwords are stored only as a non-reversible hash (PBKDF2).
• Session cookies are protected with the HttpOnly and Secure attributes.

8. Changes to This Policy

If this Policy is changed, the effective date and the content of the changes will be announced within the Service.

9. Contact

For inquiries regarding personal information, please contact: himacorlife@gmail.com