Privacy Policy for Flashcards World
Last updated: February 11, 2026
At Flashcards World SL ("we", "us", "our"), a company registered in Spain, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use the Flashcards World mobile application for iOS (the "App").
By using the App, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the App.
1. Information We Collect
1.1 Information You Provide
- Account information: When you create an account, we collect your name and email address. You may sign in using Apple Sign-In or Google Sign-In, which provides us with basic profile information (name and email). Apple Sign-In allows you to hide your email address using Apple's private relay service.
- User content: Flashcard sets, decks, cards, and study data that you create within the App.
- Communications: If you contact us for support, we collect the information you provide in your message.
1.2 Information Collected Automatically
- Device information: Device type, iOS version, and app version.
- Usage data: Study session activity (cards studied, scores) stored locally on your device and synced to your account if you opt in to cloud sync.
1.3 Information We Do NOT Collect
- We do not collect precise geolocation data.
- We do not collect contacts, photos, or other device data beyond what is described above.
- We do not use analytics tracking tools (no Google Analytics, no Firebase Analytics, no third-party analytics SDKs).
- We do not serve advertisements in the iOS app.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Providing the App: To operate, maintain, and deliver the features of the App, including cloud sync of your flashcard data across devices.
- Authentication: To verify your identity and secure your account.
- AI flashcard generation: When you use the AI-powered flashcard creation feature, your prompt text is sent to third-party AI providers to generate flashcard content. We do not use your prompts to train AI models.
- Customer support: To respond to your inquiries and resolve issues.
- Service improvement: To fix bugs and improve the App.
- Legal compliance: To comply with applicable laws and regulations.
3. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:
- Contract performance (Art. 6(1)(b)): Processing necessary to provide you with the App (account creation, cloud sync, flashcard storage).
- Legitimate interest (Art. 6(1)(f)): Processing necessary for our legitimate interests, such as improving the App and ensuring security.
- Consent (Art. 6(1)(a)): Where you have given explicit consent, such as opting in to cloud sync or using AI-powered features. You may withdraw consent at any time.
- Legal obligation (Art. 6(1)(c)): Processing necessary to comply with a legal obligation.
4. Data Storage and Transfers
4.1 Where Your Data Is Stored
- On your device: All flashcard data is stored locally on your device using Core Data and is fully usable offline.
- Cloud sync (optional): If you sign in and enable sync, your flashcard data is stored as compressed (GZIP) snapshots in Cloudflare R2 object storage.
- Authentication data: Managed by Firebase Authentication (Google Cloud) and Apple Sign-In (Apple Inc.).
4.2 International Data Transfers
Some of our service providers are based outside the European Economic Area (EEA). When your data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework where applicable.
5. Third-Party Services
Our App uses the following third-party services:
6. Data Sharing
We do not sell your personal information. We do not share your personal data with third parties for their direct marketing purposes. We only share data with the service providers listed above to operate the App, when required by law, or to protect safety.
7. Data Retention and Deletion
We retain your personal data only for as long as necessary to provide the App.
- Account data: Retained while your account is active.
- Cloud sync data: Deleted when you delete your account.
- Support communications: Retained for up to 2 years.
8. Your Rights
8.1 Rights Under GDPR (EEA Residents)
If you are in the European Economic Area, you have the right to: access your data, rectify inaccuracies, request erasure, restrict processing, data portability, object to processing, withdraw consent, and lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
8.2 Rights Under CCPA (California Residents)
If you are a California resident, you have the right to: know what personal information we collect, request deletion, and non-discrimination. We do not sell personal information.
8.3 How to Exercise Your Rights
Contact us at [email protected] or delete your account in the App under Settings. We will respond within 30 days.
9. Children's Privacy
The App is not directed to children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal data, contact us at [email protected].
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including HTTPS encryption, secure token storage, and access controls. However, no method of electronic storage is 100% secure.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
12. Contact Information
Data Controller: Flashcards World SL
Email: [email protected]
General inquiries: [email protected]
Apple App Privacy Summary
Data Used to Track You
None. We do not track you across apps or websites.
Data Linked to You
- Contact Info (email address, name) -- for account creation
- User Content (flashcard data) -- for cloud sync
- Purchases (purchase history) -- processed by Apple
Data Not Linked to You
None collected.