Kreen is a Chrome extension that helps medical students turn practice questions into study notes and Anki flashcards. This policy explains what data Kreen handles and why.
What we collect

Account info: your email and password, to create and sign in to your account. Passwords are handled by our auth provider (Supabase) and stored hashed — we never see your plaintext password.
Question content you act on: when you click Generate, make an Exam-style or Cloze card, or click Get a hint, the text you selected or the question text on the current page is sent to our server to draft study material or provide a hint.
Images you act on: screenshots or exhibit images you paste, upload, or capture with Grab open are sent to our server when you ask Kreen to generate notes/cards from them. Images you save with a study item are stored in your account.
Saved study material: notes and cards you choose to save are stored in your account.
Audio reviews you generate: a spoken script of your notes is stored so you can download the file again.
Usage counts: the number of notes you generate, to enforce plan limits.


What we do NOT collect

No general browsing history. Kreen reads page content only when you explicitly use a capture/generation action.
Kreen does not ask for, collect, store, or transmit qbank passwords, cookies, session tokens, or other authentication tokens.
We do not sell or rent your data, and never use your content for advertising.


How your data is used

To generate notes/cards or hints, the question text and any images you submit are sent to OpenAI via our server. Per OpenAI's API terms, API content is not used to train their models.
Saved notes/cards are stored in Supabase under row-level and storage access controls that restrict each record to your own account.
Anki export runs locally via the AnkiConnect add-on — cards go from your browser to your local Anki app, not through our servers.
Telegram recap (optional): if you link a Telegram account to Kreen with a one-time code, our study bot can read the study items saved in your account (notes, tags, and right/wrong outcomes) to send you recaps in Telegram. Nothing is shared until you link, and you can unlink at any time from the bot.


Third parties
Provider Purpose Data shared
Supabase Auth, database + private file storage email, saved study content, usage counts
OpenAI Note/card/hint/report generation content you submit
Telegram (our study bot) Optional recap messages after you link your saved notes, tags, and outcomes
Data retention & deletion

Saved content remains until you delete it in Kreen or ask us to delete it. Email mymainemailken@gmail.com to delete your account and all associated data.
Security

Data is transmitted over HTTPS. Database access is protected by row-level security. The AI provider key is stored on our server and never shipped in the extension.

Kreen's use of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.