Privacy Policy
Last updated: October 20, 2026
In short. Encra has no user account and does not keep your courses on its servers. Your folders, cards, quizzes and notes stay on your device and, if you turn it on, in your iCloud. When you use artificial intelligence, the text of the document involved is sent to Claude (Anthropic) through our relay server, just long enough to generate the answer. Photos you import for a course are read on your device: only the recognized text is sent. The free version shows an advertising banner (Google AdMob) on iPhone and iPad. There are no usage analytics.
1. Who is responsible
Encra is published by Noé Ecoeur, Canton of Jura, Switzerland, the controller of the data described here.
For any question about your data: support@encra.app.
2. What stays on your device
Everything you create in Encra is stored on your device: folders, card decks, quizzes, imported documents (PDF, PowerPoint, text), annotations, timetable and planner, study time and statistics, settings.
Text recognition on photos and scanned pages also happens on your device, using Apple’s built-in tool. Photos you import as the source of a course are not sent anywhere.
3. Sync through iCloud
If you turn on “iCloud Sync” in Encra’s settings, your data is copied to the iCloud Drive storage of your Apple Account, so you can find it on your iPhone, iPad and Mac. This storage is provided by Apple and governed by Apple’s Privacy Policy. Encra’s publisher has no access to your iCloud.
Without iCloud, your data exists only on the device: deleting the app deletes it.
4. Artificial intelligence: what is sent, and where
The AI features (creating cards or a quiz from a course, refining cards, working on part of a course, importing a timetable) use the Claude model from Anthropic. They only run when you start them.
What is sent
- The text of the chosen document or section, its name, and the generation instructions (number of cards, language, level of detail).
- To avoid duplicates, the questions of the cards you already have on those pages.
- Two cases where an image is sent, only when you ask for them:
- “Generate from the image” on a PDF page that is mostly a diagram or figure: the image of that page is sent;
- importing a timetable from a photo or a PDF (in the planner): the image of the timetable is sent so its classes can be read.
The route
The request goes through our relay server (hosted by Vercel), which forwards it to Anthropic and returns the answer to you. The relay server does not store your course content or the AI’s answers: it only passes them through.
Anthropic processes this data to produce the answer, under its Commercial Terms and Privacy Policy. Data sent through its programming interface (API) is not used to train its models; Anthropic may keep it for a limited time, in particular to detect abuse.
Don’t send documents containing sensitive personal information (health, other people’s data…) to the AI: you don’t need it to study.
What the relay server keeps, without your content
To limit abuse and keep each plan within its AI budget, the server keeps a few technical records in a Redis database (Upstash, Europe region):
| Data | Why | Kept for |
|---|---|---|
| Anonymous purchase identifier (created by RevenueCat, see §5) and this month’s AI spending counter | Apply your plan’s AI limit | 40 days |
| The app’s identifier on your device (specific to Encra) and IP address | Limit the number of requests per minute and per day | 24 hours at most |
| Your installation’s App Attest public key | Check, with Apple’s App Attest service, that the request really comes from the Encra app | 1 year |
| Your plan (Free, Essential or Pro), read from RevenueCat | Know which limit to apply | 3 days |
| Identifier of a top-up transaction | Never count the same purchase twice | about 16 months |
The host’s technical logs (errors, IP addresses of requests) are deleted automatically after a short time and never contain the text of your courses.
5. Purchases and subscriptions
Subscriptions (Essential, Pro) and top-ups are bought and paid for through Apple’s App Store. Encra’s publisher never sees your name, email address or payment details.
To know which plan is active on your devices, Encra uses the RevenueCat service. RevenueCat receives an anonymous identifier created by the app (it contains neither your name nor your Apple Account), the purchase information provided by Apple (product, date, renewal, store country) and technical information about the device (model, system version, IP address). See RevenueCat’s Privacy Policy.
6. Advertising (free version, iPhone and iPad)
In the free version, an advertising banner from Google AdMob is shown on the home screen and the library. Never full screen, never during a review, a quiz or while editing a course. There are no ads in Essential and Pro, nor on Mac.
- Where the law requires it (Switzerland, the European Economic Area, the United Kingdom…), Encra asks for your consent before the first ad, using Google’s form.
- iOS then asks whether you allow tracking. If you allow it, Google may use your device’s advertising identifier to show personalized ads. If you decline, ads are not personalized; the app works exactly the same.
- In every case, Google receives technical information (IP address, device model, language, ad views and taps) to serve ads, count them and fight fraud.
You can change your choice at any time in iOS Settings → Privacy & Security → Tracking. See how Google uses information from partner apps.
Encra never sends the content of your courses to Google.
7. What Encra doesn’t do
- No account, no sign-up, no email address requested.
- No usage analytics or audience measurement tools.
- No selling of data.
- No location, no access to your contacts.
The camera is only used when you photograph a course or a timetable.
8. When you write to us
If you contact support by email (including with “Contact us” in the app, which adds your device model and system version), we receive your email address and your message. They are used only to answer you and are deleted once no longer needed, at the latest two years after the last exchange.
9. Legal basis
For people in Switzerland and the European Union: requests to the AI, sync, purchase management and support replies are necessary to provide the service you ask for (performance of a contract); abuse prevention relies on our legitimate interest in protecting the service; personalized advertising relies on your consent, which you can withdraw at any time.
10. Transfers outside Switzerland and the European Union
Anthropic, Vercel, RevenueCat and Google may process data in the United States. These transfers are covered by the safeguards those companies provide (the European Commission’s standard contractual clauses, recognized by Switzerland, or Data Privacy Framework certification).
11. Your rights
You can ask to access, correct or delete your data, or object to its processing, by writing to support@encra.app. Because Encra has no account, we don’t know who you are: the server’s technical data is anonymous and we generally can’t link it to you.
In practice, you stay in control directly:
- deleting a folder, deck or document in the app removes it from the device and, if sync is on, from your iCloud;
- you can erase Encra’s iCloud data in iOS Settings → your name → iCloud → Manage Storage;
- the relay server’s technical data deletes itself after the periods listed in §4.
You can also lodge a complaint with a data protection authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the European Union, the authority of your country.
12. Age
Encra is made for high school and university students. It is not intended for children under 13. If you are under the age of digital consent in your country (16 in most European Union countries), ask a parent before using the AI or accepting personalized ads.
13. Changes
If this policy changes, the new version is published on this page with its date. A significant change (for example a new service receiving data) is also mentioned in the app’s release notes.