Privacy Policy

Myto ("Myto", "we", "us") provides a browser extension and web app that let you capture highlights and screenshots from things you read online, and turn them into AI-generated quizzes for spaced-repetition review. This policy covers the Myto extension, the Myto web app, and usemyto.com.

1. Information we collect

Account information

When you sign up, we collect your email address and, if you sign in with Google, your name and profile photo. Authentication is handled by Firebase Authentication (a Google service); we never see or store your password in plain text. We also store your browser's timezone against your account, so your streak follows your local calendar days rather than UTC. It updates automatically when your browser's timezone changes.

Content you capture

Myto's core function is saving content you deliberately choose to capture. This includes:

• Highlights: text you select from a webpage, plus the surrounding article content, used to generate quiz questions.
• Annotations: notes you write attached to a highlight.
• Screenshots: image regions you select from a page or video, plus any caption (written by you or generated by AI from page context).
• Notes: free-form notes you write about a page or on their own, used to generate your private quiz questions. When you write a note about a page from the extension, the page's text is sent along with it.
• Collections and tags: labels and groupings you create to organize your captures.
• The source URL, title, and favicon of the page each capture came from.

The Myto extension's content script is present on pages you visit so that highlighting and screenshot tools are available when you want them, but it does not record or transmit anything from a page unless you actively capture it. We do not track your general browsing history.

Your Feed

We store the sites you follow in your Feed. Only when you choose to follow a site, with the Follow button in the extension's popup or "Follow this site in Myto" from its menu, does the extension send that page's address (without its query string or fragment) and the feed links the page lists to Myto, which looks up the site's feeds so you can follow one. When you open a post from your Feed, the extension (on a site you've turned Myto on for) reports that you opened it, how long you spent reading it and how far down the page you got, and we use that only to choose what your Feed shows you.

Quiz and learning activity

We store the quiz questions generated from your captures, your answers, whether they were correct, and the resulting spaced-repetition schedule (via the FSRS algorithm). We also store gamification data: streaks, streak freezes, and XP.

Usage analytics

The Myto web app uses Firebase Analytics to understand aggregate product usage (e.g. which features are used, session length). This does not include the content of your captures. The browser extension does not use Firebase Analytics or any other analytics SDK.

Payment information

If you purchase a subscription, payment is handled by Paddle.com, our payment processor and merchant of record. Paddle collects your billing name, address, and country directly, to process the transaction and calculate any sales tax or VAT owed - Myto does not receive or store this billing address information, and never receives or stores your full card number. We only receive your subscription status and a Paddle customer/subscription ID, which we use to manage your access to Myto.

2. How we use your information

• To provide the core service: storing your captures and generating quizzes from them.
• To send your highlighted text and article context to an AI provider (currently Google's Gemini models) so quiz questions can be generated. Screenshot captions may also be AI-generated from surrounding page context.
• To schedule your quiz reviews and track your streak, XP, and progress.
• To send you account emails: verification, password reset, and (if enabled) daily digest reminders about due quizzes.
• To maintain and improve the reliability and performance of Myto.
• To enforce our Terms of Service and keep the product secure.

We do not sell your personal information or your captured content to anyone.

3. Where your data is stored

Captures, quiz data, and account records are stored in a Postgres database we operate. Screenshot images are stored in Cloudflare R2. Because we rely on Google's infrastructure for authentication, analytics, and AI generation, and Cloudflare's infrastructure for image storage, your data may be processed on servers located outside your country of residence, including in the United States.

4. Data retention

We keep your account and captures for as long as your account is active. When you delete your account, we delete your personal data, captures, quiz history and synced notebooks straight away, except billing records our payment provider must keep for legal and accounting purposes. What deletion removes and keeps is set out in full.

5. Your rights and choices

• You can access, edit, or delete individual captures, tags, and collections directly in the Myto web app at any time.
• You can delete your account, and everything in it, yourself at any time: in Settings in the web app or Myto Notes, on the Me tab in the Myto phone app, or at app.usemyto.com/delete-account (how account deletion works). If you can't sign in, email us (see Contact below) and we'll delete it for you.
• You can request a copy of your data by emailing us, and Pro accounts can export their library from Settings.
• If you're located in the EU/UK or California, you have additional rights under GDPR or the CCPA respectively, including the right to access, correct, delete, or port your data, and to object to certain processing. We'll honor these requests regardless of where you're located.
• You can revoke the extension's access at any time by removing it from your browser.

6. Cookies and local storage

The Myto web app uses browser local storage to keep you signed in. The extension uses local IndexedDB storage to keep your sign-in session active across its popup and background service worker. We don't use third-party advertising cookies.

7. Children's privacy

Myto is not directed at children, and you must be at least 13 years old to use it. We do not knowingly collect personal information from anyone under 13. If you believe a child has created an account, contact us and we'll delete it.

8. Third-party services we use

• Firebase (Google): authentication, and product analytics in the web app.
• Cloudflare R2: storage for screenshot images.
• Google Gemini: AI generation of quiz questions and screenshot captions from your captured content.
• Paddle.com: payment processing and billing, once enabled for your account.

Each of these providers processes data only as needed to provide their service to us, under their own privacy and security commitments.

9. Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS) and access controls on our infrastructure. No method of transmission or storage is 100% secure, so we can't guarantee absolute security.

10. Changes to this policy

We may update this policy as Myto evolves. If we make material changes, we'll notify you by email or with a notice in the app. The "last updated" date at the top of this page always reflects the current version.

11. Contact

Questions about this policy or your data? Email us atsupport@usemyto.com.