Last updated November 4, 2026
Your lecture files are read once to write your questions and are never stored. We don't sell your information, and our AI service provider can't use your material to train AI models.
When you build a block, your files are read in your own browser and their text is checked for patient information first. Only the extracted text is sent, through our server, to our AI service provider, which uses it only to write your questions. Scanned pages and photos have no text to check yet, so they are sent as images to our AI service provider to be typed out; the typed-out text is then checked for patient information before any questions are written. Vignette does not store your files, their images or their text. Our AI service provider may not use this content to train AI models, and it deletes it within 30 days. Don't upload patient information.
We don't sell your information or share it for advertising.
Vignette keeps a few things in your browser's storage: your sign-in token or invite code, the browser ID used for the free block, your last few blocks as a backup, display choices such as which topic groups are open, and the typed-out text of scanned pages you've uploaded, so uploading the same file again doesn't read it twice. That text stays in your browser and is never sent to Vignette's storage; clearing your browser's site data removes it. Signing out removes your sign-in token. We don't use advertising cookies.
Your account and study data are kept until you delete them. Deleting a quiz in the app removes it from our storage. If you delete your account, we cancel any subscription and erase your account, quizzes, results, notes and usage records. We keep a one-way scrambled form of your email address, which can't be read back as your address, only so a deleted account can't be used to claim another free block, along with the browser ID, for the same reason. Stripe keeps payment records as the law requires. Question reports and anonymous block summaries may be kept to improve quality.
Data is sent over encrypted connections. Sign-in tokens are signed so they can't be forged, sign-in links work once and expire after 20 minutes, and payment details stay with Stripe. No system is perfectly secure, so use a strong password on the email account you sign in with.
Vignette is made for medical students and is not directed to anyone under 18.
We may update this policy. The date at the top shows the latest version, and we'll tell account holders by email about significant changes.
Questions about privacy: info@usevignette.com.