Privacy Policy

Last Updated: November 2, 2026

This Privacy Policy describes how Flashcards Alarm ("we," "us," or "our") collects, uses, and shares information when you use our mobile application ("App"). By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Google Sign-In: Email address, display name, and profile photo URL.
• Sign in with Apple (iOS): Email address and full name (provided on first sign-in only; Apple may provide a relay email address if you choose to hide your email).
• Guest mode: A randomly generated user ID only. No email address or name is collected. You can later link a Google or Apple account to keep your data.

Your authentication data is managed by Firebase Authentication, a Google service.

1.2 User-Created Content

When you use the App, the following data is created and stored:

• Vocabulary Data: Word groups, individual words, definitions, example sentences, and study progress (mastery level, next review date).
• Alarms: Alarm times, repeat schedules, labels, and sound preferences.
• Quiz Results: Answers, correctness, solve times, hints used, and timestamps.
• Confusion Pairs: Pairs of words you frequently confuse, along with optional notes.
• Feedback: Messages you submit through the feedback feature, along with the app version.

1.3 Usage & Performance Data

• Quiz Statistics: Total quizzes solved, correct answers, average solve time, daily streaks, and per-word performance metrics.
• Subscription Status: Whether you are a free or premium user, and subscription expiration dates.
• AI Scan Usage: Number of daily AI scans used.

1.4 Content Sent to AI (Google Gemini)

Some features use Google's Gemini AI through Firebase AI Logic. The App asks for your permission before the first time any content is sent, and you can turn AI features off at any time in Settings → AI features (Google Gemini). Nothing is sent while AI features are off.

With your permission, the following is sent to Gemini:

• Photos you take or choose for AI Smart Scan, to find the words in them.
• Words you type or scan, to generate meanings, example sentences, translations, and list names, and to sort scanned words into lists.
• Your answers in the vocabulary setup, to suggest a starter word list.

Photos are not stored on our servers; they are sent for processing and the App keeps only the extracted words. Words and the generated results are saved as part of your vocabulary data (Section 1.2). Google processes this content under its own terms and privacy policy (Section 3).

1.5 Crash and Error Data

We use Firebase Crashlytics to collect crash reports, error logs, and diagnostic data. This may include your Firebase user ID, device model, operating system version, and stack traces. This data is used solely to identify and fix bugs.

1.6 Device Information

We collect basic device information through the following:

• Package Info: App version and build number (displayed in Settings and included in feedback submissions).
• Network Status: We detect whether your device is online to manage data synchronization.
• Locale and Country: When you sign in, we read your device's locale setting (e.g., "en_US") and derive a country code (e.g., "US") from it. This data is stored in your user profile and updated each time you log in.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App's features (alarms, quizzes, vocabulary management, spaced repetition).
• Process and manage your account.
• Provide AI features you have allowed: vocabulary extraction from images, meanings and examples, and starter word lists (Section 1.4).
• Track your study progress and provide statistics.
• Process subscriptions and in-app purchases.
• Display advertisements (for free-tier users).
• Diagnose and fix crashes and errors.
• Respond to your feedback and support requests.
• Understand our user base's geographic distribution and language preferences to improve localization and service quality.

3. Third-Party Services

We use the following third-party services, each with their own privacy policies:

3.1 Advertising

For free-tier users, we display advertisements through Google AdMob. AdMob may collect and use device identifiers (such as Advertising ID), IP address, and usage data for ad serving, personalization, and measurement. You can manage your ad preferences through your device settings.

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, the App shows Google's consent message before any ads are requested, and personalized ads are shown only if you consent. You can change your choice at any time in the App under Settings → Ad Privacy Settings.

3.2 App Tracking Transparency (iOS)

On iOS 14.5 and later, the App requests your permission through Apple's App Tracking Transparency (ATT) framework before accessing your device's Identifier for Advertisers (IDFA). The IDFA is used by Google AdMob to deliver personalized advertisements and measure ad performance.

• If you allow tracking, AdMob may use your IDFA to serve personalized ads and measure ad effectiveness across apps and websites.
• If you deny tracking, AdMob will serve non-personalized (contextual) ads only, and your IDFA will not be shared with advertising partners.

You can change your tracking preference at any time in your device's Settings → Privacy & Security → Tracking.

3.3 Subscriptions

Subscription purchases are processed through the Apple App Store or Google Play Store. RevenueCat manages subscription status by linking your Firebase user ID with your store purchase data. We do not directly collect or store your payment information (credit card numbers, etc.).

3.4 Home Screen Widgets

The App offers optional home screen widgets that display your next alarm time and today's review count. Widget data (alarm times and review statistics) is shared between the main App and the widget extension through an App Group container stored locally on your device. This data is not transmitted to any external server.

4. Data Storage and Security

• All user data is stored in Google Cloud Firestore, which uses encryption at rest and in transit.
• Access to your data is restricted by Firestore Security Rules: only you (authenticated with your unique user ID) can read or write your own data.
• We implement industry-standard security measures but cannot guarantee absolute security.

5. Data Retention and Deletion

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy. Specific retention periods are as follows:

• Account deletion: When you delete your account in the App (Settings → Delete account), your account, vocabulary data, alarms, quiz results, confusion pairs, the subscription status record we store, and your feedback submissions are permanently deleted right away. This cannot be undone. Data kept by the third-party services in Section 3 (for example, crash logs in Firebase Crashlytics, or purchase records at Apple, Google, and RevenueCat) is retained under those services' own policies.
• Data on your device: Cached data and settings stored on your device are removed when you delete the App.

You can also request deletion by contacting us at the email address provided in Section 11.

6. Data Sharing and Sale

We do not sell your personal information to third parties.

If you allow tracking on iOS (Section 3.2) or consent to personalized ads (Section 3.1), Google AdMob may use your device's advertising identifier and related data to show you personalized ads. Under some U.S. state privacy laws, this may be considered "sharing" personal information for cross-context behavioral advertising. You can opt out at any time as described in Section 9.1, after which only non-personalized ads are shown.

Apart from this, we only share data with the third-party service providers listed in Section 3, solely for the purposes of operating and improving the App.

7. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States, where Google and other service providers operate data centers. By using the App, you consent to such transfers. We rely on the data protection measures provided by our third-party service providers (including Standard Contractual Clauses for transfers from the EEA).

8. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Delete your personal data (through account deletion or by contacting us).
• Export your data.
• Opt out of personalized advertising through your device settings, or in the App under Settings → Ad Privacy Settings where available.
• Opt out of the sale or sharing of your personal information (see Section 9.1 below).

To exercise any of these rights, please contact us using the information below.

9.1 California Residents — CCPA/CPRA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights regarding your personal information:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collecting the information, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete any personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale/Sharing: We do not sell your personal information. Personalized advertising through Google AdMob may be considered "sharing" for cross-context behavioral advertising under the CCPA/CPRA. You can opt out at any time by denying or turning off tracking for the App in your device's Settings → Privacy & Security → Tracking (iOS). After you opt out, only non-personalized ads are shown.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To submit a request, please contact us at the email address provided in Section 11. We will verify your identity before processing your request and respond within 45 days.

9.2 European Economic Area (EEA) Residents — GDPR Rights

If you are located in the EEA, the General Data Protection Regulation (GDPR) provides you with additional rights. The legal bases for our processing of your personal data are:

• Contract Performance: Processing necessary to provide you with the App's services (account management, data storage, alarm and quiz functionality).
• Consent: Processing based on your explicit consent: sending content to Google Gemini for AI features (asked in the App before first use; withdraw any time in Settings → AI features (Google Gemini)), and personalized advertising through Google's consent message and, on iOS, ATT.
• Legitimate Interest: Processing necessary for our legitimate interests (e.g., crash reporting, app improvement, fraud prevention), balanced against your rights.

In addition to the rights listed above, EEA residents may also:

• Restrict Processing: Request that we limit how we process your data.
• Data Portability: Request your data in a structured, machine-readable format.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
• Lodge a Complaint: File a complaint with your local data protection authority if you believe your rights have been violated.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the App and updating the "Last Updated" date at the top. You are advised to review this Privacy Policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: jaykaysm@gmail.com