Privacy Policy for Flashcards World

Last updated: February 11, 2026

At Flashcards World SL ("we", "us", "our"), a company registered in Spain, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use the Flashcards World mobile application for Android (the "App").

By using the App, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Information You Provide

Account information: When you create an account, we collect your name and email address. You may sign in using Google Sign-In, which provides us with basic profile information (name and email).
User content: Flashcard sets, decks, cards, and study data that you create within the App.
Communications: If you contact us for support, we collect the information you provide in your message.

1.2 Information Collected Automatically

Device information: Device type, Android version, and app version.
Usage data: Study session activity (cards studied, scores) stored locally on your device and synced to your account if you opt in to cloud sync.
Advertising data: AdMob (Google) may collect device identifiers and usage data for serving and personalizing ads. You can opt out of personalized ads in your Android device settings under Google > Ads.

1.3 Information We Do NOT Collect

We do not collect precise geolocation data.
We do not collect contacts, photos, or other device data beyond what is described above.
We do not use analytics tracking tools (no Google Analytics, no Firebase Analytics).

2. How We Use Your Information

We use the information we collect for the following purposes:

Providing the App: To operate, maintain, and deliver the features of the App, including cloud sync of your flashcard data across devices.
Authentication: To verify your identity and secure your account.
AI flashcard generation: When you use the AI-powered flashcard creation feature, your prompt text is sent to third-party AI providers to generate flashcard content. We do not use your prompts to train AI models.
Advertising: To serve ads in the free version of the App via AdMob.
Customer support: To respond to your inquiries and resolve issues.
Service improvement: To fix bugs and improve the App.
Legal compliance: To comply with applicable laws and regulations.

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

Contract performance (Art. 6(1)(b)): Processing necessary to provide you with the App (account creation, cloud sync, flashcard storage).
Legitimate interest (Art. 6(1)(f)): Processing necessary for our legitimate interests, such as improving the App and ensuring security.
Consent (Art. 6(1)(a)): Where you have given explicit consent, such as opting in to cloud sync or using AI-powered features. You may withdraw consent at any time.
Legal obligation (Art. 6(1)(c)): Processing necessary to comply with a legal obligation.

4. Data Storage and Transfers

4.1 Where Your Data Is Stored

On your device: All flashcard data is stored locally on your device and is fully usable offline.
Cloud sync (optional): If you sign in and enable sync, your flashcard data is stored as compressed (GZIP) snapshots in Cloudflare R2 object storage.
Authentication data: Managed by Firebase Authentication (Google Cloud).

4.2 International Data Transfers

Some of our service providers are based outside the European Economic Area (EEA). When your data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework where applicable.

5. Third-Party Services

Our App uses the following third-party services:

Firebase Authentication (Google): User authentication and account management.
Privacy policy: https://policies.google.com/privacy
Cloudflare Workers and R2: Cloud sync data storage and edge computing.
Privacy policy: https://www.cloudflare.com/privacypolicy/
Google Play Billing: In-app purchase processing.
Privacy policy: https://policies.google.com/privacy
AdMob (Google): Advertising served within the free version of the App. AdMob may collect device identifiers and usage data for ad personalization. You can opt out of personalized ads in your Android settings.
Privacy policy: https://policies.google.com/privacy
AI content generation providers: When you use the AI flashcard creation feature, your prompt is processed by third-party AI services. No personal data beyond your prompt text is shared.

6. Data Sharing

We do not sell your personal information. We do not share your personal data with third parties for their direct marketing purposes. We only share data with the service providers listed above to operate the App, when required by law, or to protect safety.

7. Data Retention and Deletion

We retain your personal data only for as long as necessary to provide the App.

Account data: Retained while your account is active.
Cloud sync data: Deleted when you delete your account.
Support communications: Retained for up to 2 years.

8. Your Rights

8.1 Rights Under GDPR (EEA Residents)

If you are in the European Economic Area, you have the right to: access your data, rectify inaccuracies, request erasure, restrict processing, data portability, object to processing, withdraw consent, and lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

8.2 Rights Under CCPA (California Residents)

If you are a California resident, you have the right to: know what personal information we collect, request deletion, and non-discrimination. We do not sell personal information.

8.3 How to Exercise Your Rights

9. Children's Privacy

The App is not directed to children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal data, contact us at [email protected].

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including HTTPS encryption, secure token storage, and access controls. However, no method of electronic storage is 100% secure.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact Information

Data Controller: Flashcards World SL

Email: [email protected]

General inquiries: [email protected]