Privacy Policy

Myto ("Myto", "we", "us") provides a browser extension and web app that let you capture highlights and screenshots from things you read online, and turn them into AI-generated quizzes for spaced-repetition review. This policy covers the Myto extension, the Myto web app, and usemyto.com.

1. Information we collect

Account information

When you sign up, we collect your email address and, if you sign in with Google, your name and profile photo. Authentication is handled by Firebase Authentication (a Google service); we never see or store your password in plain text.

Content you capture

Myto's core function is saving content you deliberately choose to capture. This includes:

Highlights: text you select from a webpage, plus the surrounding article content, used to generate quiz questions.
Annotations: notes you write attached to a highlight.
Screenshots: image regions you select from a page or video, plus any caption (written by you or generated by AI from page context).
Collections and tags: labels and groupings you create to organize your captures.
The source URL, title, and favicon of the page each capture came from.

The Myto extension's content script is present on pages you visit so that highlighting and screenshot tools are available when you want them, but it does not record or transmit anything from a page unless you actively capture it. We do not track your general browsing history.

Quiz and learning activity

We store the quiz questions generated from your captures, your answers, whether they were correct, and the resulting spaced-repetition schedule (via the FSRS algorithm). We also store gamification data: streaks, streak freezes, and XP.

Usage analytics

The Myto web app uses Firebase Analytics to understand aggregate product usage (e.g. which features are used, session length). This does not include the content of your captures. The browser extension does not use Firebase Analytics or any other analytics SDK.

Payment information

If you purchase a subscription, payment is handled by Paddle.com, our payment processor and merchant of record. Paddle collects your billing name, address, and country directly, to process the transaction and calculate any sales tax or VAT owed - Myto does not receive or store this billing address information, and never receives or stores your full card number. We only receive your subscription status and a Paddle customer/subscription ID, which we use to manage your access to Myto.

2. How we use your information

To provide the core service: storing your captures and generating quizzes from them.
To send your highlighted text and article context to an AI provider (currently Google's Gemini models) so quiz questions can be generated. Screenshot captions may also be AI-generated from surrounding page context.
To schedule your quiz reviews and track your streak, XP, and progress.
To send you account emails: verification, password reset, and (if enabled) daily digest reminders about due quizzes.
To maintain and improve the reliability and performance of Myto.
To enforce our Terms of Service and keep the product secure.

We do not sell your personal information or your captured content to anyone.

3. Where your data is stored

Captures, quiz data, and account records are stored in a Postgres database we operate. Screenshot images are stored in Cloudflare R2. Because we rely on Google's infrastructure for authentication, analytics, and AI generation, and Cloudflare's infrastructure for image storage, your data may be processed on servers located outside your country of residence, including in the United States.

4. Data retention

We keep your account and captures for as long as your account is active. If you delete your account, we delete your personal data and captures within a reasonable time, except where we're required to retain records for legal or accounting purposes.

5. Your rights and choices

You can access, edit, or delete individual captures, tags, and collections directly in the Myto web app at any time.
You can request a copy of your data or full account deletion by emailing us (see Contact below).
If you're located in the EU/UK or California, you have additional rights under GDPR or the CCPA respectively, including the right to access, correct, delete, or port your data, and to object to certain processing. We'll honor these requests regardless of where you're located.
You can revoke the extension's access at any time by removing it from your browser.

6. Cookies and local storage

The Myto web app uses browser local storage to keep you signed in. The extension uses local IndexedDB storage to keep your sign-in session active across its popup and background service worker. We don't use third-party advertising cookies.

7. Children's privacy

Myto is not directed at children, and you must be at least 13 years old to use it. We do not knowingly collect personal information from anyone under 13. If you believe a child has created an account, contact us and we'll delete it.

8. Third-party services we use

Firebase (Google): authentication, and product analytics in the web app.
Cloudflare R2: storage for screenshot images.
Google Gemini: AI generation of quiz questions and screenshot captions from your captured content.
Paddle.com: payment processing and billing, once enabled for your account.

Each of these providers processes data only as needed to provide their service to us, under their own privacy and security commitments.

9. Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS) and access controls on our infrastructure. No method of transmission or storage is 100% secure, so we can't guarantee absolute security.

10. Changes to this policy

We may update this policy as Myto evolves. If we make material changes, we'll notify you by email or with a notice in the app. The "last updated" date at the top of this page always reflects the current version.

11. Contact

Questions about this policy or your data? Email us atsupport@usemyto.com.