Privacy Policy

1. Introduction and Data Administrator

This Privacy Policy regulates the processing of personal data for the api.supermemo.com service (hereinafter: “the API Service”). The Administrator of your personal data is SuperMemo World sp. z o.o., with its registered office at ul. Wesoła 3, 60-598 Poznań, Poland, registered under KRS no. 0000027598. We process personal data in accordance with European Union guidelines and the legal acts of the Republic of Poland.



2. Scope of Data Collection

The API Service collects data necessary for the provision of spaced repetition algorithm services and account management. This includes:

  • Registration Data: Email address, first and last name, and business/company details for commercial users.
  • Technical Identifiers: API Keys (unique identifiers for authorization), “ext_learner_id”, and “ext_item_id” sent via API requests to process learning data.
  • Billing and Usage Data: Information regarding “Projects,” usage limits (API calls), and “Wallet” status for managing future billing features.
  • Automatically Collected Data: IP address, device type, operating system, and log data associated with API requests for security, documentation, and statistical purposes.


3. Purpose of Data Processing

Your data is processed for the following purposes:

  • Service Delivery: Providing the algorithms to calculate optimal review intervals for your “User Application”.
  • Optimization: Analyzing API performance and stability to improve the spaced repetition engine.
  • Account Management: Enabling the creation of developer accounts, managing project-scoped keys, payments and monitoring usage limits during.
  • Communication: Sending technical and transactional information, updates on new API functionalities, and responding to support queries.


4. Technical Requirements and “Other Technologies”

The API Service uses IT systems that automatically collect log data associated with the device or server used to access the API. While the API itself primarily uses token-based authentication (API Keys), the associated website (api.supermemo.com) may use Cookies and similar technologies to:

  • Maintain user sessions and store selected preferences.
  • Compile statistics to understand how developers interact with the service.
  • Ensure security by identifying potentially harmful traffic.


5. Sharing of Personal Data

The Administrator may share data with authorized entities in the following cases:

  • Service Providers: entities providing hosting, IT system operations, data storage, and email services (e.g., Firebase, Google Analytics).
  • Payment Processors: data necessary to complete payments may be shared with intermediaries such as Przelewy24.
  • Legal Obligations: authorized state agencies or judicial authorities upon request in accordance with applicable law.


6. User Rights

As a User of the API Service, you have the following rights:

  • Access and Correction: the right to access your processed personal data and demand its update or correction if it is incomplete or false.
  • Right to be Forgotten: the right to request the deletion of your personal data. Please note that deleting your data will result in the permanent deletion of your Account and API access.
  • Complaint: the right to file a complaint with the data protection supervisory authority (the President of the Personal Data Protection Office in Poland).


7. Data Retention

Personal data is processed as long as the User’s account is active. After account deletion, certain data may be stored for a period required by law (e.g., for tax purposes or to handle future claims).



8. Contact Information

For any questions regarding this Privacy Policy or your data, you may contact us:

  • By Email: contact@api.supermemo.com
  • By Mail: SuperMemo World sp. z o.o., ul. Wesoła 3, 60-598 Poznań, Poland

Last updated: 20 April 2026