Privacy policy

Last updated October 4, 2026

The short version: we collect what we need to run Ace — your account, the material you upload, and how you study. We use it to build your questions and run the app. We don't sell your data or use it for advertising, and you can delete everything from inside the app at any time.

This policy explains how Ace ("Ace", "we", "us") handles information when you use the Ace iPhone app and acenow.app. Questions: support@acenow.app.

Who is responsible

The controller under the GDPR is Waqas Baloch, Hamburger Straße 119, 24558 Henstedt-Ulzburg, Germany. Email: support@acenow.app. See also the imprint.

What we collect

  • Account information: your email address and, if you sign in with Apple or Google, the basic profile details those services share (such as your name). If you use Sign in with Apple's "Hide My Email", we receive a relay address.
  • Content you upload: files (PDF, slides, Word, ePub, text) and YouTube links, plus the study sets, chapters and questions created from them.
  • Study activity: your answers, scores, progress, duels, friend connections and scheduled study sessions.
  • Purchase status: which plan you have and when it renews, as reported by Apple (iPhone) or Lemon Squeezy (web). We never see your card details.
  • Calendar access (optional): if you connect Google Calendar, a token that lets Ace add and remove the study sessions you schedule. It's stored on our servers only and never sent to the app.
  • Usage and diagnostics: basic information about how the app is used and when it fails (for example, which screens are opened, and error reports), and device information such as model and OS version.

How we use it

  • To create your account and sign you in.
  • To turn your material into study questions and show them to you — and, in a duel, to the friend you invited.
  • To run duels, friend connections and the study calendar.
  • To manage your subscription and free trial, and send the trial reminder.
  • To keep Ace secure, fix bugs and improve the product.

We do not sell your personal information, share it for advertising, or use your uploads for anything other than providing Ace to you.

Who processes your data

We use a small number of service providers who process data on our behalf, under contracts that limit how they can use it:

ProviderPurpose
SupabaseAccounts, sign-in, database and file storage
Google Cloud (Vertex AI, Gemini models; Cloud Run in Belgium, EU)Running the Ace servers, reading your material and generating questions. Under Google Cloud's terms, this data isn't used to train Google's models.
HostingerHosting this website (pages, images and scripts; server logs such as IP addresses for security)
AppleSign in with Apple and App Store subscriptions
Lemon SqueezySubscriptions bought on the website: payment, tax, billing and invoices (merchant of record)
GoogleGoogle sign-in and optional Google Calendar sync
PostHog (EU)Product analytics and diagnostics

When you add a YouTube link, Ace retrieves that video's captions from YouTube to build your questions.

What other people see

Your uploads are private. When you invite a friend to a duel, they see the questions from the study set you chose, your display name and your score — not your original files. Friends you connect with can see your display name.

Keeping and deleting your data

We keep your data while your account is active. You can delete your account at any time in the app: open your profile and tap Delete account. This permanently removes your account, uploaded files, study sets, progress, friend connections and duels. Backups are overwritten on a rolling basis. Deleting your account does not cancel an App Store subscription; cancel that in your iPhone settings.

Security

Data is encrypted in transit. Access rules are enforced in the database itself, so one user's data can't be read by another, and we regularly test those rules. No system is perfectly secure, but we take protecting your data seriously.

Your rights

Depending on where you live (for example under the GDPR or the CCPA), you may have the right to access, correct, delete or export your personal data, and to object to or restrict certain processing. Email support@acenow.app and we'll respond within the time the law requires. You can also complain to a data protection authority — for example the one where you live, or ours: the Independent Centre for Privacy Protection Schleswig-Holstein (Unabhängiges Landeszentrum für Datenschutz, ULD), Kiel.

Children

Ace is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has given us information, contact us and we'll delete it.

Changes

If we make significant changes we'll update the date above and, where appropriate, tell you in the app.

Contact

Email support@acenow.app.