Privacy Policy for Flashcard Maker

Effective Date: January 15, 2025 Last Updated: January 15, 2025 Version: 1.0

Introduction

Welcome to Flashcard Maker ("we", "our", "us", or "the App"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our flashcard learning application.

By using Flashcard Maker, you agree to the collection and use of information in accordance with this policy.

Information We Collect

1. Account Information

When you create an account, we collect:

Email address - Used for authentication and account recovery
Display name (optional) - Shown in your profile
Password - Encrypted using industry-standard methods; we never store passwords in plain text

2. Flashcard Data

To provide personalized learning tracking, we collect:

Flashcard decks - Your created flashcard decks with questions and answers
Flashcard cards - Individual cards within each deck (front/back content, images, audio)
Categories - Custom categories you create to organize your decks
Study sessions - Your study session history including:
- Session timestamps - Date and time when study sessions occur
- Session results - Correct, incorrect, and skipped card counts
- Total cards studied per session
Study preferences - Your selected study modes and settings

3. Progress and Statistics

We automatically generate and store:

Total study time - Cumulative time across all study sessions
Session count - Number of completed study sessions
Deck statistics - Progress data for each flashcard deck
Performance metrics - Your learning progress and mastery levels

4. App Settings and Preferences

We store your preferences:

Theme preference (light/dark mode)
Language preference - Selected app language
Cloud sync settings - Whether you've enabled cloud synchronization
Notification preferences - Study reminder settings

5. Technical Data

We automatically collect minimal technical information:

Device type - iOS/Android device model (for app compatibility)
Operating system version - iOS/Android version number
App version - Version of Flashcard Maker installed

6. Subscription Information

If you purchase a premium subscription:

Subscription status - Whether you have an active premium subscription
Product ID - The subscription product identifier (monthly/yearly)
Purchase date - When your subscription was purchased
Expiration date - When your subscription expires (if applicable)

Note: Payment processing is handled by Apple (App Store) and RevenueCat. We do not store credit card information or payment details.

Information We DO NOT Collect

We want to be clear about what we DO NOT collect:

❌ Location data - We never track where you study
❌ Camera or photos - We only access photos you explicitly choose to add to flashcards
❌ Contacts - We don't access your contacts
❌ Microphone audio - We only access audio you explicitly record for flashcards
❌ Health data - We don't integrate with Apple Health or other health apps
❌ Browsing history - We don't track your web activity
❌ Third-party tracking - We don't use advertising trackers or analytics SDKs
❌ Social media data - We don't access your social media accounts

How We Use Your Data

Primary Purposes

We use your information exclusively for:

Authentication - Secure login and account management
Personalization - Customize your learning experience
Progress Tracking - Display your study statistics and achievements
Data Synchronization - Sync your flashcards and progress across your devices (if cloud sync is enabled)
App Functionality - Provide core flashcard creation and study features
Subscription Management - Manage your premium subscription status and features
Customer Support - Respond to your questions and issues

We DO NOT Use Your Data For

❌ Advertising or marketing to you
❌ Selling to third parties
❌ Sharing with data brokers
❌ Cross-site tracking
❌ Profiling or automated decision-making
❌ Training AI models

Data Storage and Security

Infrastructure

Your data is stored securely using Firebase (Firestore database) and Supabase (PostgreSQL database):

Encryption in transit: All data transmitted between your device and our servers uses industry-standard HTTPS/TLS encryption
Encryption at rest: Database contents are encrypted when stored on cloud infrastructure
Server location: Data is hosted on secure cloud infrastructure (location depends on your project region)
Access control: Strict database access policies using Row Level Security (RLS)
Infrastructure provider: Firebase and Supabase run on secure, enterprise-grade cloud infrastructure

Security Measures

We implement industry-standard security practices:

Password hashing: Passwords are securely hashed (never stored in plain text)
Secure authentication: Token-based authentication with automatic expiration
Database security: Row-level security ensures users can only access their own data
Regular updates: We keep our dependencies and infrastructure up to date
Infrastructure security: Firebase and Supabase provide built-in security monitoring and threat detection

Data Retention

Active accounts: Your data is retained while your account is active
Study history: Flashcard decks, cards, and study sessions are stored in the database
Account deletion: Upon account deletion request, your data will be permanently deleted within 30 days

Your Privacy Rights

You have complete control over your data.

Right to Access

View your data: Access your flashcard decks, study history, and statistics anytime in the app
Request data access: Email us at umituz9999@gmail.com to request access to your data

Right to Delete

Data deletion: Email us at umituz9999@gmail.com to request deletion of your account and all associated data
Account deletion: We will permanently delete your account and all data within 30 days of your request

Right to Control

Change preferences: Modify your app settings within the app
Disable cloud sync: Turn off cloud synchronization in settings (data remains on your device)
Manage subscription: Cancel your subscription through App Store settings

Third-Party Services

We use minimal third-party services to operate the app:

Firebase (Backend Infrastructure)

Purpose: Database (Firestore), authentication, and analytics
Data shared: Email address, encrypted password, flashcard data, study sessions, user preferences
Privacy policy: https://firebase.google.com/support/privacy
Location: Firebase cloud infrastructure (region-specific based on project setup)
Compliance: SOC 2 Type II certified, GDPR compliant
Security: Enterprise-grade security with encryption at rest and in transit

Supabase (Backend Infrastructure)

Purpose: Database (PostgreSQL), authentication, and backend services
Data shared: Email address, encrypted password, flashcard data, study sessions, subscription status
Privacy policy: https://supabase.com/privacy
Location: Supabase cloud infrastructure (region-specific based on project setup)
Compliance: SOC 2 Type II certified, GDPR compliant
Security: Enterprise-grade security with encryption at rest and in transit

RevenueCat (Subscription Management)

Purpose: In-app purchase and subscription management
Data shared: Subscription status, product IDs, purchase dates, expiration dates
Privacy policy: https://www.revenuecat.com/privacy
Location: RevenueCat cloud infrastructure
Compliance: GDPR compliant, SOC 2 Type II certified

Apple App Store (Payment Processing)

Purpose: Payment processing for premium subscriptions
Data shared: Subscription purchase information (handled by Apple)
Privacy policy: https://www.apple.com/privacy/
Note: We do not have access to your payment information or credit card details

No Other Third Parties

We do not use:

❌ Google Analytics
❌ Facebook SDK
❌ Mixpanel or similar analytics
❌ Advertising networks
❌ Social media integrations

Children's Privacy

Flashcard Maker is not intended for children under 13 years of age.

We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at umituz9999@gmail.com, and we will delete the information immediately.

International Users and GDPR Compliance

For Users in the European Union (EU/EEA)

Under the General Data Protection Regulation (GDPR), our legal basis for processing your data is:

Contract performance - Processing necessary to provide the app service (authentication, flashcard storage, study tracking)
Legitimate interest - Improving app functionality and user experience
Consent - For optional features like cloud sync

Your GDPR Rights:

Right to access your data
Right to rectification (correction)
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent

GDPR Requests: Email umituz9999@gmail.com with subject "GDPR Request - Flashcard Maker"

Data Transfers

If you are located outside the United States, please note that your data may be transferred to and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable laws.

California Privacy Rights (CCPA)

For California Residents

Under the California Consumer Privacy Act (CCPA), you have the right to:

Know what personal information is collected
Delete your personal information
Opt-out of the sale of personal information (Note: We do NOT sell your data)
Non-discrimination for exercising your privacy rights

We do not sell your personal information.

CCPA Requests: Email umituz9999@gmail.com with subject "CCPA Request - Flashcard Maker"

Cookies and Tracking Technologies

What We Use

Flashcard Maker uses minimal tracking for essential functionality only:

Firebase/Supabase authentication tokens - To keep you logged in securely (session management)
Browser session data - Temporary session state managed by authentication services

What We DO NOT Use

❌ No advertising cookies - We don't track you for ads
❌ No third-party tracking - No Google Analytics, Facebook Pixel, or similar
❌ No analytics cookies - We don't track your behavior for marketing
❌ No social media cookies - No social media tracking pixels
❌ No local storage for sensitive data - All your flashcard data is stored securely in cloud databases (Firebase/Supabase)

Privacy-First Approach: We only use what's absolutely necessary for authentication and app functionality. Your flashcards and study data are stored in our secure cloud databases, not in browser cookies or local storage.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements.

How We Notify You

Major changes: We will update the "Last Updated" date and may email registered users
Minor changes: We will update the "Last Updated" date at the top of this policy
Your responsibility: Check this policy periodically for updates

Your Continued Use

Your continued use of Flashcard Maker after any changes indicates your acceptance of the updated policy. If you do not agree with changes, please stop using the app and delete your account.

Data Breach Notification

In the unlikely event of a data breach that affects your personal information:

We will make reasonable efforts to notify you as soon as possible
We will inform you about what data was affected
We will explain the steps we're taking to address the breach
We will provide guidance on how to protect yourself
We will notify relevant regulatory authorities as required by law (within 72 hours for GDPR compliance)

Your Choices and Controls

What You Can Do

Review data: Check your flashcard decks, study history, and statistics anytime in the app
Change password: Update your password in app settings
Disable cloud sync: Turn off cloud synchronization in settings (data remains local)
Manage subscription: Cancel your premium subscription through App Store settings
Request data deletion: Email us at umituz9999@gmail.com to request account and data deletion

Contact Us

We're here to help with any privacy questions or concerns.

Privacy Questions

Email: umituz9999@gmail.com Subject line: "Privacy Question - Flashcard Maker"

Data Requests (Access, Delete, Export)

Email: umituz9999@gmail.com Subject line: "Data Request - [Access/Delete/Export]"

We will respond to all privacy requests within 30 days (or sooner as required by applicable law).

General Support

Email: umituz9999@gmail.com Website: https://umituz.com/projects/education-learning/flashcard-maker

Legal Compliance

This privacy policy complies with:

GDPR (General Data Protection Regulation - EU)
CCPA (California Consumer Privacy Act - USA)
Apple App Store privacy requirements
US Federal Trade Commission (FTC) guidelines
Children's Online Privacy Protection Act (COPPA)

Transparency Commitment

We believe in radical transparency about data privacy:

✅ We collect only essential data for app functionality
✅ We never sell your data
✅ We never use third-party tracking
✅ We give you complete control over your data
✅ We use industry-standard security
✅ We respond promptly to privacy requests

Your trust is our priority.

Effective Date and Version History

Current Version: 1.0 Effective Date: January 15, 2025 Last Updated: January 15, 2025

Version History:

v1.0 (Jan 15, 2025) - Initial privacy policy for cloud-enabled app

Acknowledgment

By using Flashcard Maker, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.

Thank you for trusting Flashcard Maker with your learning journey. Your privacy matters to us.