Last Updated: 11 September 2026.
SAVE ALL LTD (“Gizmo”, “we”, “our”, or “us”) respects your privacy and are committed to protecting it through our compliance with this Privacy Notice (“Notice”). We provide our users and customers (“Customer(s)”, “you”, “your”) with flashcards and productivity tools as a part of our Services (as defined below). We are committed to being transparent in our handling and processing of Personal Data in accordance with applicable privacy and data protection laws. Personal Data means information that relates to a particular individual that is identifiable (whether directly or indirectly), such as the individual’s name, postal address, email address, or telephone number (“Personal Data”).
This Notice describes our practices for collecting, using, maintaining, protecting, disclosing and otherwise processing your Personal Data through https://www.gizmo.ai (our “Website”), our Gizmo mobile application (“App”), any associated software, applications or platforms including social media pages or accounts (together with the Website and App, the “Service(s)”) or anywhere this Notice is posted as well as through any offline interactions.
Please read this Notice carefully to understand our policies and practices regarding your information and how we will treat it. If you wish that we do not use your information in the ways described in this Notice, agree with our terms, your choice is not to use our Services. This Notice may change from time to time (see Changes to Our Privacy Notice) so please check this page regularly including the Last Modified Date at the top of this Notice, to ensure that you are viewing the most current version of this Notice.
Gizmo does not knowingly collect or solicit Personal Data from children under the age of 13, unless permitted by law. Users under the age of 13 are prohibited from accessing or using the Services.
If we learn that a child under the age of 13 has provided us with Personal Data, we will take any necessary actions in accordance with applicable law.
We collect several types of information from you and about users of our Services, such as Personal Data when you sign up for an account (“Account”) on our Services, when you use our chat services or when we check your age, or information relating to your flashcards. We may also collect information related to how you use our platform, which helps us improve our Services. We use information that we collect about you or that you provide to us, including any Personal Data, to generally provide you with our Services, improve our Services and to provide you with customer support.
Please see the table below for more details about our collection and use of your Personal Data.
Account Data:
How / When Your Personal Data is Collected
Purpose for Personal Data Collection
Educational Data:
How / When Your Personal Data is Collected
Purpose for Personal Data Collection
Payment Data:
How / When Your Personal Data is Collected
Purpose for Personal Data Collection
User Contributions:
How / When Your Personal Data is Collected
Purpose for Personal Data Collection
Age Check Documents:
How / When Your Personal Data is Collected
Purpose for Personal Data Collection
Please note that along with the reasons listed above, we may also use your Personal Data for the purposes disclosed at the time you provide your information, and as otherwise permitted with your consent.
The Personal Data you provide to us is provided on a voluntary basis. However, if you do not provide this to us, you may be unable to create an Account, use some or all of our Service or effectively communicate with us or other Customers.
As you navigate through and interact with our Services, we, and our third-party service providers, including analytics and third-party content providers, may automatically collect certain information from you whenever you access or interact with the Services:
Usage Information:
Purpose for Collection of Personal Information
Device Information:
Purpose for Collection of Personal Information
Geolocation Information:
Purpose for Collection of Personal Information
Age Check Records:
Purpose for Collection of Personal Information
We, as well as third parties that provide content, advertising, or other functionality on the Services, may use cookies, pixel tags, local storage, and other technologies (“Tracking Technologies”) to automatically collect information through our Services. Tracking Technologies are essentially small data files placed on your computer, tablet, mobile phone, or other devices that allow us to record certain pieces of information whenever you visit or interact with our Site and Services. Depending on the specific Tracking Technology, we, our online data partners, or vendors may use Tracking Technologies to associate these activities with other Personal Information they or others have about you, including by association with your email or online profiles. We (or service providers on our behalf) may then send communications and marketing to these emails or profiles.
We will automatically use Tracking Technologies that are essential to make our Services work properly when you visit our Website. If you are visiting our Website from the UK or Europe, we will only use non-essential Tracking Technologies if you have consented to such use by indicating your preference using our pop-up tool on our Website.
A pixel tag (also known as a web beacon) is a piece of code embedded on the Website that collects information about users’ engagement on that web page. The use of a pixel allows us to record, for example, that a user has visited a particular web page or clicked on a particular advertisement.
A cookie is a small text file that can be stored on and accessed from your device when you visit and use our Website. We use cookies to make our Services work, analyze trends, administer the Website, and track users’ movements around the site.
You can review your web browser settings to modify your cookie settings, to disable the use of cookies, or to delete cookies. Please note that third parties such as advertisers or analytics providers may also use cookies and similar technologies while you are browsing or using the Website.
Cookies can be categorized as first-party or third-party cookies. As the name implies, first-party cookies are put on your device by us. Third-party cookies are placed on your device not by us, but by a third-party. Third-party cookies may include the Tracking Technologies described below.
We may use Tracking Technologies and other third-party tools to process analytics information about our Services. These Tracking Technologies are used by us and our third-party service providers to analyze how the Website is used and how the Website is performing. Tracking Technologies may collect information about your activities to provide you targeted advertising and to measure the effectiveness of our marketing campaigns. The third-party service providers that generate these Tracking Technologies have their own privacy policies. Our analytics and performance providers are currently PostHog, LogRocket, Cloudflare and Sentry. Our advertising platforms are currently Meta and TikTok, and those platforms may use their technologies to target advertising to you on other websites based on your visit to our Website.
You can generally opt out of receiving personalised ads from third-party advertisers and ad networks. Which tool you use depends on where you are.
If you are in the UK or Europe: use Your Online Choices at https://www.youronlinechoices.com. It is run by the European Interactive Digital Advertising Alliance and covers participating advertising companies across the UK and the EU.
If you are in the United States: use the Network Advertising Initiative (NAI) at https://optout.networkadvertising.org, or the Digital Advertising Alliance (DAA) at https://www.aboutads.info/choices/, whose Self-Regulatory Principles for Online Behavioral Advertising many US advertising networks follow.
These tools work by setting an opt-out cookie in the browser you are using at the time. If you change browser or device, or clear your cookies, you will need to set them again.
Meta Pixel. We use Meta Pixel to customize our advertising and to serve you ads on your social media based on your browsing behavior. This allows your behavior to be tracked after you have been redirected to our Website by clicking on the Meta ad. The Meta Pixel stores a cookie on your device to enable us to measure the effectiveness of Meta ads for statistical and market research purposes. We do not have access to the information collected through the Meta Pixel. However, the information collected via the Meta Pixel is also stored and processed by Meta. Meta may link this information to your Meta account and also use it for its own promotional purposes in accordance with Meta’s Privacy Policy. The Meta Pixel also allows Meta and its partners to show you advertisements on and outside of Meta. You can opt-out of displaying Meta ads by visiting your Meta Ad Settings, and you can clear and control the information third parties share with Meta in your Off-Meta Activity page. If you do not have a Meta account, you can opt out of Meta ads using the regional opt-out tools described above.
TikTok Pixel. We use TikTok Pixel to gauge ad performance and serve more relevant ads on and off TikTok. After you interact with one of our TikTok ads, TikTok sets a cookie (valid for up to 13 months) to record page views, clicks, IP address, browser info and other event data. TikTok may link this data to your TikTok account and use it under its own Privacy Policy; we receive only aggregated statistics. The Pixel loads only after you accept Marketing cookies in our banner, and you can withdraw consent any time via Cookie Settings. In the TikTok app you can disable Targeted ads or clear your off-TikTok activity under Settings, then Ads; if you do not have an account, you can opt out using the regional opt-out tools described above.
LogRocket. We use LogRocket to replay sessions on our site so we can find bugs and improve usability. These replays are not anonymous: they can be linked to your account and to the identifier stored on your device. It sets short-lived first-party cookies, captures clicks, page views and technical errors, but automatically masks password fields and any elements we flag as private. Data is sent over TLS, encrypted at rest and deleted after a set retention period. LogRocket only loads if you accept Analytics cookies. You can withdraw consent at any time via Cookie Settings.
PostHog. We use PostHog to record which features are used and which are not, so we can improve the Services, and to decide which features are switched on for your account. PostHog is a third-party provider and receives this information from us.
Coeus. Our own analytics, which counts the same kind of activity on our own systems.
Cloudflare Insights. Measures how quickly pages load, so we can find and fix slow pages.
Sentry. Reports crashes and technical errors so we can fix them.
Device identifier. We store a randomly generated identifier on your device so we can tell repeat visits apart. It does not contain your name and it is not shared with advertising platforms, but it stays on your device until you clear it, and it remains after you sign out.
Firebase. Used to keep you signed in. This is essential to the Services and is used without asking.
Do Not Track Signals: Our Website does not currently respond to browser Do Not Track signals. You can control non-essential Tracking Technologies using Cookie Settings, which is the mechanism we use for this purpose.
We use a number of different social media platforms to communicate with you, promote our Services and to understand how people feel about our brand and business. We process your Personal Data using these platforms in a variety of ways, as follows:
Pages: We use your Personal Data when you post content or otherwise interact with us on our official pages or accounts on Instagram, TikTok, YouTube, Discord and other social media platforms.
Monitoring: We monitor your posts and other content on our and other social media pages and accounts to understand how you feel about our business and brand and those of others in our industry. We may do so routinely for business insights purposes or to understand public or customer sentiment in relation to a specific event or action relevant to us. We may collect any Personal Data you make available in any post or other social media content, but we only use relevant posts that have been published by you. Once received, we may create aggregate data and reports from that content, including by combining it with other content. In limited circumstances, we may share that content with our service providers and other third parties.
Cookies & Ad-Targeting: Social media cookies can be used to track you across different sites, building up a profile of your interests. We may then use the cookies and similar technologies on our website to collect and send information to social media platforms about actions you take on our website and applications. For example, we may use such cookies and similar technologies to collect and send information to Meta about actions you take on our website and applications. Meta (who operates the Instagram platform) uses this information to provide services to us and also for further processing for its own business purposes. You can find out more about these technologies in our Cookie Policy at https://www.gizmo.ai/cookies. The services we receive from Meta that use this information are delivered to us through Meta Business Tools, which include Meta Pixel, Website Custom Audiences, Customer-list Customer Audiences, IG-Engagement Audiences, Meta’s Server-side Conversions API and TikTok Pixel (see further the section above regarding the Tracking Technologies we use). These tools allow us to target advertising to you within Meta’s social media platforms by creating audiences based on your actions on our website and applications and allow Meta to improve and optimise the targeting and delivery of our advertising campaigns for us. We may also use Meta’s products to target advertisements to you based solely on Personal Data held by Meta, in which case, we do not generally receive or have access to such information.
To find out more information about our relationship with the social media platforms we use, please see the privacy policy of the platform and the terms of the applicable data sharing agreement that we have entered into. For ease of reference, we have provided below details of our relationship with the social media platforms that we primarily use.
We are joint controllers for certain processing with Meta (who operates Instagram) as a result of our use of its services, as follows:
We and Meta are joint data controllers of the processing involved in collecting and sending your Personal Data to Meta using its cookies and similar technologies and also in relation to the Facebook Insights service, as each of us has a business interest in Meta receiving this information.
As we are joint data controllers with Meta for certain processing, where applicable, we and Meta have:
The Meta company that is a joint data controller of your Personal Information is Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA (if you are a UK-registered user) or Meta Platforms Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Ireland (if you are an EEA-registered user). For further information regarding Meta and its use of your Personal Data, please see:
Meta also processes, as our processor, contact information that we submit for the purposes of matching, online targeting, measurement, reporting and analytics purposes. This service includes the processing Meta carries out when it displays our advertisements to you in your news feed at our request after matching contact details for you that we have uploaded to the platforms Meta operates. These advertisements may include forms through which we collect contact information you give to us.
To find out more about our relationship with TikTok, please see the terms of the data sharing arrangement we have with TikTok and the TikTok Privacy Policy.
To find out more about our relationship with Discord, please see the Discord Terms of Service and Privacy Policy.
We use artificial intelligence, commonly known as ‘AI’, in a variety of ways within our business. AI enables computers to perform tasks that typically require human intelligence, such as recognising patterns, understanding language (e.g. to provide replies to questions), or making predictions based on information, including in certain cases, your Personal Data.
Some of our uses of AI allow us to provide improved or ‘AI-powered’ versions of our Services as well as developing new ones, including those relating to our Websites and App. Others allow us to put AI to use in the background, helping our business to operate more efficiently and effectively including in relation to content moderation. This means that we may use AI in connection with any of the purposes and types of information mentioned in this Notice, all focussed on making sure you have the best possible experience with us.
Examples of how we may use AI include:
When you are interacting with features on our Website or App or other directly accessible services that use AI, we will always aim to make this clear to you as we want you to be informed and feel comfortable when using this new technology.
The AI features we use have often been ‘pre-trained’ by other companies or by us (or both) to improve the way they operate. In some cases, we may use your personal information to train models that power the AI features you interact with, and in some cases, the AI tools we use in the background. When we refer to ‘training’, this includes fine-tuning, testing, enhancing or carrying out a similar activity designed at developing or improving the AI we use or the underlying model that helps it produce a result.
We take steps, including by carrying out risk assessments and implementing security measures, to ensure we use AI in ways that are responsible, fair, and secure. This includes, where appropriate, limiting access to your information, anonymising information, preventing any training based on your information by unauthorised third parties, and monitoring AI outputs for accuracy.
We do not make any significant automated decisions about you using AI. Where we do use AI, we ensure that any decision that could have a significant impact on you is subject to human review (see further ‘How we use AI’ above).
You may choose to register to join Gizmo by logging into your Account with a third-party via our Service (e.g., Google, Apple and other third-party services that let you sign in using your existing credentials with those services). Note that the information we collect from and through these third parties may depend on the privacy settings you have set with those third parties and the permissions you grant to us in connection with linking your Account with Gizmo.
In this section, we are letting you know what legal basis we use for each particular purpose of processing, where such legal basis may be applicable under data protection laws such as the EU General Data Protection Regulation (“GDPR”) and its equivalent in the UK, the UK GDPR. To process your Personal Data as described above, we rely on the following legal basis:
We do not solicit any sensitive or special categories of Personal Data, namely biometric data used for identification purposes, genetic data, data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership or data that concerns, health, sex life, sexual orientation, or criminal offences or convictions (“Sensitive Data”) and you should avoid making any User Contributions or submitting any Educational Data that include any Sensitive Data.
The purpose of our processing of your Personal Data when carrying out our age checks is to verify your age through a process of age estimation using your facial data, which is biometric data. It is not aimed at verifying your identity through the use of that data. If any laws applicable to our processing treat such processing of biometric data that qualifies as Sensitive Data, we process such data on the basis that the processing is necessary to safeguard individuals at risk, in particular children and to prevent or detect unlawful acts (namely child grooming behaviour or fraud). To the extent we process any User Contributions or Education Data that contain criminal offence or other Sensitive Data for the purposes of content moderation, we rely on the same bases.
We don't share any Personal Data publicly or with third parties, except when necessary to provide you with our Services or if required by law. The following explains the reasons necessary to provide you with our Services.
When you use our AI enabled features, we will disclose Educational Data and User-Generated Data with our AI service provider for the purpose of performing Service-related operations (e.g., to generate responses, other requested outputs, and for improving AI functionality.). Please see further ‘Our use of artificial intelligence’ above.
Additionally, app stores, such as App Store or Google Play, host our App and process any in-App purchases that you may make, or subscriptions you sign up for. Where a subscription is purchased outside the App, payment is processed by Stripe. Payment card and bank details are provided directly to Apple, Google or Stripe and are not received or stored by Gizmo. Each processes your Personal Data in accordance with its own privacy policy. These third parties may have access to your Personal Data in order to perform these tasks on our behalf.
You have several ways to exercise control over your Personal Data:
Please be aware that if you do not allow us to collect Personal Data from you, we may not be able to deliver certain experiences, products, and services to you, and some of our Services may not be able to take account of your interests and preferences.
Gizmo retains your Personal Data for as long as you have an account with us, to fulfil our legitimate business purposes, or to comply with our legal obligations. Your account ends when you delete it, or automatically after the period of inactivity set out below. Some categories are deleted sooner, regardless of your account, as listed here. When these conditions no longer exist, Gizmo removes that information in accordance with our standard deletion processes. The main retention periods are:
Gizmo may retain and use non-Personal Data, including information which has been de-identified, aggregated, or anonymized, indefinitely.
Depending on where you are located, you may have certain rights regarding your Personal Data. Residents of certain jurisdictions may access, correct, update or delete your Personal Information; object to our processing of this information, ask us to restrict our processing of your Personal Information, or request portability of your Personal Data.
Upon request, Gizmo will provide you with information about whether we hold any of your Personal Data. You must make every effort to maintain the accuracy of the information you submit to us, such as your contact information. If you submit a request to access all Personal Data you’ve submitted, we will respond to your request to access it within one calendar month or as otherwise required by law.
We will honor your requests for deletion in accordance with our legal obligations. In addition, the rights described above may be limited, for example, if fulfilling your request would reveal Personal Data about another person, or if you ask us to delete information, we are required by law to keep or have compelling legitimate interests in keeping (such as for fraud prevention purposes). Your Personal Data may remain in our archives and information you update or delete, or information within a closed Account, may persist internally for our administrative purposes, to the extent permitted by law. It is not always possible to completely remove or delete information from our databases. In addition, we typically will not remove information you posted publicly through or on the Services. Bear in mind that neither you nor Gizmo can delete all copies of information that has been previously shared with others on the Service. If your information is deleted, then your Account may become deactivated. If your Account is deactivated or you ask to close your Account, you will no longer be able to use the Services.
Please note that our Services require a minimum amount of Personal Data in order to function. Individuals who do not provide Personal Data (e.g., by not filling out a profile) may not be able to access the full functionality of features found on Gizmo.
Under the GDPR and UK GDPR, Gizmo is a data controller, which means it decides why and how your Personal Data is processed and is responsible to you for that processing. European residents may access, rectify or delete their Personal Data via their online account settings as described above or by contacting Customer Support at support@gizmo.ai or our Data Protection Officer at dpo@gizmo.ai to access, correct, update or delete your Personal Information; object to our processing of this information (including where it is used for direct marketing), ask us to restrict our processing of your Personal Data, or request portability of your Personal Data in a common electronic format. Certain rights apply in all circumstances such as the right to object to direct marketing, whilst others may apply on a more limited basis, for example where we rely on a particular lawful bases to processing your Personal Data. You have the right not to be subject to a solely automated decision that has a legal or other significant effect on you. Certain decisions relating to our chat feature are made automatically:
We do not consider these decisions to have a legal or significant impact on you.
Any reports we make to law enforcement or safeguarding authorities are never made solely on the basis of an automated decision and always involve human assessment.
If you are located in the United Kingdom, you have the right to complain to us if you think that there is an infringement of data protection law in connection with your personal data. We will acknowledge receipt of your complaint within 30 days starting when the complaint is received and without undue delay, we will:
If you are located in the United Kingdom or European Union, you also have the right to make a complaint to your local data protection regulator, which in the UK is the Information Commissioner’s Office (visit the ICO website for contact information). Please see the European Data Protection Board website for contact details regarding the data protection regulators in the European Union.
We may from time to time need to transfer your personal information to support partners and other companies which are located outside Europe, for the purpose of ensuring our websites are operating correctly or in relation to third parties to whom we share your data.
Where we transfer your information outside of Europe, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this privacy policy. These steps include:
Please contact us using the details at the end of this privacy policy for more information about the protections that we put in place and to obtain a copy of the relevant documents.
If you use our Services whilst you are outside Europe, your information may be transferred outside Europe in order to receive those Services.
If you are a California resident, the California Consumer Privacy Act (“CCPA”) and California Consumer Privacy Rights Act, amending the CCPA (“CPRA”) (collectively the CCPA and CPRA are the “California Privacy Laws”) provide you with additional privacy rights with respect to our collection, use and disclosure of your “Personal Information” (as that term is defined under California Privacy Laws), including:
We collected the following categories of Personal Information in the last 12 months: identifiers/contact information, payment card information associated with you, commercial information, Internet or other electronic network activity information, geolocation data, audio, electronic, visual or similar information, and inferences drawn from the above.
The sources of Personal Information from whom we collected are directly from users, analytics tools, social networks, and third-party services that update or supplement information we hold about you.
Please see the above section within this Notice titled WHAT, WHEN, HOW, AND WHY OF YOUR PERSONAL INFORMATION, to see the full list of categories of Personal Information we have collected about you.
Please see the above sections please see the YOUR RIGHTS and the YOUR CHOICES REGARDING YOUR INFORMATION, sections of this Notice, to see applicable business or commercial uses and disclosures of your Personal Information.
Pursuant to the definitions of “sale”, under California Privacy Laws, we do not “sell” and have not “sold” Personal Information in the previous 12 months.
For more information on how to exercise your rights, please contact us at support@gizmo.ai. Please note that we may require you to verify your credentials, by matching your e-mail address, and other Personal Information to the information in our systems, before we can fulfill your request. If you authorize another person to act as your agent to submit requests on your behalf, then unless you provide the agent with power of attorney under the California Probate Code, we will ask the agent to provide us the written and signed authorization that you provided to the agent, we will confirm with you that you did provide the authorization, and we will verify your identity.
Gizmo is operated by Save All Ltd, a company registered in the United Kingdom, and our processing of your Personal Data is governed by UK data protection law and, where it applies to you, European data protection law. We use service providers located in other countries, including the United States. Where your Personal Data is transferred outside the UK or the EEA, we rely on the safeguards set out in the Transfers of Personal Data outside Europe section above. Any persons accessing our Services from any jurisdiction with laws or regulations governing the use of the Internet, including the collection, use, or disclosure of Personal Data, different from those of the jurisdictions mentioned above may only use the Services in a manner lawful in their jurisdiction. If your use of the Services would be unlawful in your jurisdiction, you may not use our Services.
We use physical, technical, and organizational measures designed to protect your information against unauthorized access, theft and loss. We restrict access to your Personal Data to those employees who need to know that information to service your Account or perform their job functions.
Although we take precautions intended to help protect information that we process, no system or electronic data transmission is completely secure. Any transmission of your Personal Data is at your own risk, and we expect that you will use appropriate security measures to protect your Personal Data.
You are responsible for maintaining the security of your Account and the information in your Account. We may suspend your use of all or part of the Services without notice if we suspect or detect any breach of security. You understand and agree that we may deliver electronic notifications about breaches of security to the email address on record on your Account.
Users also have the ability to visit other websites and online services through our Services. We may, depending on your privacy settings, receive some information from those online services including, in relation to social media platforms, from your social media service, and what we collect depends on your privacy settings with that service.
Please be aware that we have no control over the content and practices of other sites and online services and cannot accept responsibility or liability for their respective privacy policies. Additionally, in relation to social media services, please be aware that to use them, you must be 13 years of age or older. For more information, please see the relevant terms of service of the relevant social media service.
Gizmo may update this Privacy Notice at any time and any changes will be effective upon posting or, where appropriate, when notifying you by email. In the event that there are material changes to the way we treat your Personal Data, we will update the Last Modified date at the top of this Notice upon becoming effective.
If you have a privacy concern, complaint, or question, please contact us at support@gizmo.ai
We also have the following contact details:
Data controller
Save All Ltd (Company No. 13489213)
Techspace Scrutton Street, 32-38 Scrutton Street, London, United Kingdom, EC2A 4RQ
support@gizmo.ai
To contact our Data Protection Officer:
Email: dpo@gizmo.ai
Mailing Address: Techspace Scrutton Street, 32-38 Scrutton Street, London, United Kingdom, EC2A 4RQ