Privacy Policy

1. Information We Collect

1.1 Information You Provide

FlashcardsApp is designed to work without requiring you to create an account. You are not required to provide any personal information to use the core app. If you contact us for support, you may voluntarily provide:

• Your name and email address
• A description of your issue or feedback

1.2 Information Collected Automatically

When you use the app, the following data may be collected automatically:

• Device information: device model, operating system version, unique device identifiers (IDFV on iOS, Android ID)
• App usage data: crash logs, performance metrics, feature usage patterns (collected anonymously)
• Purchase data: subscription status and entitlement information managed by RevenueCat (see Section 4)

1.3 Data Stored Locally on Your Device

All flashcard decks, cards, study sessions, XP, streaks, and progress data are stored entirely on your device using a local SQLite database. This data never leaves your device unless you explicitly enable a future cloud sync feature (Phase 8, not yet available).

2. How We Use Your Information

We use the information we collect to:

• Operate and maintain the app and its features
• Process and fulfil in-app purchases and subscription entitlements
• Diagnose technical issues and improve app stability
• Respond to your support requests and feedback
• Comply with legal obligations

We do not use your data for targeted advertising. We do not sell your personal information to any third party.

3. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information. We may share limited data with:

• Service providers who assist us in operating the app (e.g., RevenueCat for subscription management, Apple/Google for payment processing). These providers only process data on our behalf and under strict confidentiality obligations.
• Legal authorities if required by law, court order, or governmental regulation, or to protect our legal rights.
• Successors in the event of a merger, acquisition, or sale of all or a portion of our assets, provided the successor agrees to honour this Privacy Policy.

4. Third-Party Services

The app integrates the following third-party SDKs:

Each third-party service has its own privacy policy. We encourage you to review them. We are not responsible for the privacy practices of third parties.

5. In-App Purchases & Subscriptions

FlashcardsApp offers optional paid subscriptions (Monthly at $4.99/mo, Yearly at $29.99/yr, and Lifetime at $79.99) and one-time exam pack purchases. Payments are processed exclusively by Apple (iOS) or Google (Android) through their respective payment systems. We do not collect or store your payment card information.

Subscription status and entitlement data are managed by RevenueCat. RevenueCat may associate a pseudonymous user ID with your purchase history.

Subscriptions auto-renew unless cancelled at least 24 hours before the end of the current billing period. You can manage or cancel your subscription at any time in your device's App Store / Google Play account settings.

6. Data Retention

Local study data (decks, cards, sessions, XP) is retained on your device until you delete the app or clear its data. We do not have access to this data.

If you contact us for support, we retain your correspondence for up to 2 years to provide support and improve our service, after which it is securely deleted.

Crash and diagnostic logs are automatically deleted after 90 days.

7. Children's Privacy

FlashcardsApp is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal information without parental consent, please contact us and we will promptly delete it.

8. Security

We take reasonable technical and organisational measures to protect your information. Your study data is stored in a local SQLite database on your device and is protected by your device's built-in security features (e.g., iOS Data Protection, Android encryption).

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

9. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information (subject to legal retention obligations)
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with your local data protection authority

Because most data is stored locally on your device, you can delete it at any time by clearing the app's data or uninstalling the app. To exercise rights over any data we hold (e.g., support correspondence), contact us at the email below.

10. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you specific rights regarding your personal information:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• Right to Opt-Out of Sale: We do not sell your personal information.

To submit a CCPA request, contact us at the email listed in Section 13.

11. European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

• Right of access (Article 15)
• Right to rectification (Article 16)
• Right to erasure / "right to be forgotten" (Article 17)
• Right to restriction of processing (Article 18)
• Right to data portability (Article 20)
• Right to object (Article 21)

Our legal basis for processing the limited data we do collect is legitimate interest (app stability, support) and performance of a contract (subscription fulfilment).

To exercise any GDPR rights, please contact us at the email in Section 13. We will respond within 30 days.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If changes are material, we will provide a prominent notice within the app. Your continued use of the app after the effective date of the updated policy constitutes your acceptance of the changes.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact:

We aim to respond to all privacy-related inquiries within 5 business days.