Privacy Policy for URflashcards.

Who is responsible for this policy

This policy applies to the current URflashcards Android application distributed through Google Play and to related urflashcards.com legal and support pages. The data controller responsible for information controlled by URflashcards is Şerif Cin, provider of URflashcards.

For privacy questions, account deletion questions, or data requests, contact support@urflashcards.com.

Information you provide, create, or allow

• Local age-group information: the 13–15, 16–17, or 18-and-older group you select during Android privacy setup. This setup does not ask for your date of birth.
• Account information: Firebase user ID, email address, display name, profile image, and Google Sign-In provider information when you choose to sign in.
• Learning data: progress, answers, review schedules, streaks, achievements, statistics, settings, selected languages, and study-time records.
• User-created content: custom cards, imported text, notes, categories, examples, saved edits, and information about cards you hide or restore.
• Courses and local access: downloaded language pairs, course versions, and free or rewarded Pair Unlocks. Courses and Pair Unlocks stay on that installation and are not transferred through Cloud Sync.
• Purchases: Premium status and purchase or subscription information needed to provide and restore paid access, and purchase-conversion reports and values when the advertising measurement described in section 8 is enabled. Google Play handles payment card details; URflashcards does not receive them.
• Advertising: ad choices, reward outcomes, IP address and approximate location derived from it, ad interactions, diagnostics, and device, account, or advertising identifiers where allowed. Section 7 explains age protections and choices.
• Voice and pronunciation data: microphone input processed by the configured Android speech-recognition provider, recognition results returned to the Application, and text-to-speech text processed by the configured voice service when you choose those features. URflashcards does not store or upload raw microphone audio to its own servers.
• Review reminders: reminder preferences, cards due for review, and scheduled times, kept on the device.
• Optional app usage sharing: for adults who enable it, an app installation identifier, basic app and device information, approximate geography, app activity, possible purchase or subscription events, screen use, and limited study and card-action statistics.
• Support correspondence: your email address, message, and any app or device details you choose to send us.

How the selected group applies protections

During setup, you select the 13–15, 16–17, or 18-and-older age group so the app can apply privacy and advertising protections. The selected group is stored on your device. This setup does not ask for or store your date of birth.

Optional Firebase Analytics is unavailable to users who select an age under 18. The advertising protections for each group are explained in section 7.

You can update the group under Settings > Privacy & Data > Update Age Group without deleting learning data. Clearing app storage or uninstalling the app removes the saved group from that device.

Why information is processed

We use information to provide learning and review features, save your content and progress, deliver courses, provide cloud backup and paid access, show allowed ads and rewards, schedule reminders, keep the Service reliable, and respond to support requests. Optional adult app usage sharing helps us understand feature use and improve the app.

When enabled, the separate Google Play purchase reporting described in section 8 helps us measure and improve advertisements for URflashcards.

• Requested local functionality: to provide on-device learning, settings, and reminders the user chooses to use.
• Performance of a contract: where applicable, to provide accepted Account features, Cloud Sync, Premium access, purchase restoration, support, and deletion actions requested under the Terms of Service.
• Consent: for optional app usage sharing and permissions you grant, and for advertising where prior consent is required. You can withdraw consent through the available app, Google, or Android controls without affecting processing that was lawful before withdrawal.
• Legitimate interests: to secure the Service, prevent fraud and abuse, diagnose faults, maintain reliable operations, and answer support requests, when those interests are not overridden by your rights.
• Legal obligations: to respond to valid legal requests, protect legal rights, and keep records that applicable tax, transaction, consumer-protection, or data-protection law requires.

Local data and cloud backup

Your progress and custom cards can be kept on your device. When you use Cloud Sync, we save account information and learning data with Firebase so you can back up and restore it across devices. Local learning can still involve provider processing when you download courses, use speech tools, see ads, or use other provider-backed features.

Live Cloud Sync and new backup uploads may be limited to Premium users. After Premium ends, a signed-in user can still check for and restore the latest existing backup for the selected target language without re-enabling live synchronization, when such a backup exists. If no backup exists or Firebase is unavailable, local learning features may still operate on the device, but cloud backup or restore cannot complete.

Course downloads and updates use Firebase Hosting, which may receive your IP address, requested course, and ordinary device or request information. Downloaded courses and device-local Pair Unlocks are separate from your cloud backup.

Course updates may change built-in material. Saved edits, added examples, hidden-card choices, and progress are kept separately. If built-in material is removed, associated edits and progress can remain stored without being applied to a different card.

Services that help run URflashcards

We use service providers to run the features you use. Their privacy information is linked below.

• Google Play Services and Google Sign-In for platform and account features.
• Firebase for sign-in, Cloud Sync, backup, app security, hosting, and optional app usage sharing.
• Google AdMob for advertising.
• Google Play and Google Ads for purchase-conversion reporting when enabled, as described in section 8.
• RevenueCat for purchase access, restoration, and purchase/subscription metrics.
• Android device and operating-system services used for text-to-speech and external speech recognition when the user chooses those features.

Optional app usage sharing: Adults can choose to share the usage information described in section 2 through Firebase Analytics. A fresh choice starts off; an existing saved choice is preserved. Enabling takes effect the next time the app opens. Turning it off stops future collection. This choice is separate from legal acceptance, and declining never limits learning features. You can change it under Settings > Privacy & Data.

Our app usage events do not include your card text, notes, search terms, selected languages, card identifiers, or URflashcards account identity. We do not use this optional usage sharing for advertising. Ad choices remain separate.

Support: Contact support opens an editable email draft with basic app and device details. You can review, change, or remove those details before sending. Nothing is sent unless you choose to send the email. We use the correspondence you send to respond to your request.

Ads and your choices

The free app may show ads from Google AdMob outside active study or practice sessions. Google and its advertising partners may use the advertising information described in section 2 to deliver and measure ads, limit their frequency, and prevent fraud. Approximate location comes from IP addresses; URflashcards does not request Android location permission.

We request protected, non-personalized ads for users who select 13–15 or 16–17, and age-appropriate ad content for every group. Adult personalization depends on applicable requirements and available choices. Selecting the adult group is not consent to personalized ads. Non-personalized ads can still process information for delivery, measurement, and fraud prevention.

Eligible users may choose an optional rewarded ad to unlock an additional language pair on that installation. The unlock is saved after the ad grants the reward and remains available if the download needs retrying. The same age protections apply to rewarded ads.

Google presents ad-consent choices where required. These are separate from accepting our Terms or acknowledging this Privacy Policy. Where available, Ad Privacy Options in Settings lets you review supported choices. Those choices do not override younger-user protections.

Declining or withdrawing ad consent keeps already available learning features and downloaded courses usable, but ads or rewarded features may be limited or unavailable.

Premium access and Google Play billing

Purchases and subscriptions are processed by Google Play. RevenueCat helps URflashcards read, restore, and manage entitlement status and provides purchase and subscription metrics. URflashcards does not receive or store your payment card number.

Deleting your URflashcards account removes the associated RevenueCat customer data, but does not cancel a Google Play subscription. Manage subscriptions through the Google Play account that made the purchase. Google Play may retain billing, transaction, tax, fraud-prevention, or legal records under its own policies and obligations.

Measuring advertisements for URflashcards

We may use Google Play purchase-conversion reporting in Google Ads to understand whether advertisements for URflashcards lead to in-app purchases, measure their value, and improve our advertising campaigns. For subscriptions, this Google Play reporting covers the initial purchase and its first payment value, rather than all renewal revenue.

This reporting is separate from optional Firebase app usage sharing and from RevenueCat's management of Premium access. Turning off optional usage sharing does not control Google Play purchase-conversion reporting. We do not export optional Firebase usage events or RevenueCat customer events to Google Ads for this purpose.

Google processes conversion information under its applicable policies, including uses described in Google's Business Data Responsibility information. Accepting our Terms or reading this policy does not replace consent where it is required.

Speech features

Choosing speech recognition can send microphone input to the Android speech-service provider configured on the device. That provider may process the input off the device and return transcript alternatives to the Application. Text-to-speech can also send text to the configured device voice service, depending on that service and device settings.

URflashcards does not store or upload raw microphone audio to its own servers. You can choose not to use speech features and can revoke microphone permission in Android device settings.

When information may be shared

URflashcards shares information only when needed to provide the Service, process account and sync features, manage purchases, provide adult product analytics under the disclosed choice, show allowed ads, measure advertisements for URflashcards as described in section 8 when enabled, host legal/support pages, protect users or the Service, comply with law, respond to your request, or work with the service providers listed in this policy.

We do not sell personal information. Optional app usage sharing is separate from AdMob's advertising diagnostics and RevenueCat's purchase/subscription metrics. Turning off optional app usage sharing does not turn off those provider processes.

How long information is kept

Local data remains until removed through the app, app storage is cleared, or the app is uninstalled. Downloaded courses, device-local Pair Unlocks, and device settings are separate from your server account. The age-group setting remains after account deletion so privacy protections continue to apply. To remove all local data, clear app storage or uninstall URflashcards on each device.

Deleting your account removes your sign-in account, all cloud-synced data stored under it, and associated RevenueCat customer data. Use Settings > Account > Delete account or the public Account Deletion page. Deletion does not remotely erase offline copies on other devices or cancel Google Play subscriptions.

Reset this language under Settings > Languages deletes progress and custom-card data only for the current target language. Other target languages, the profile, the URflashcards account, and Premium access are retained. If Cloud Sync is in use, the app deletes or durably queues deletion of that language's cloud copy and warns if the retry cannot be saved.

We keep a limited account identifier and deletion status while deletion is processing or needs retry, to complete the request safely and prevent deleted data from reappearing. After deletion is confirmed complete, the record becomes eligible for removal two hours later. The provider's removal process may take longer.

Limited transaction, tax, fraud-prevention or legal records, provider backup copies, and security or operational logs may remain under providers' retention rules and legal obligations. They are not used to keep your deleted URflashcards account active.

The configured Firebase Analytics retention periods are two months for event details and fourteen months for Google's separate user-level setting. Aggregated reporting may remain longer. Turning usage sharing off or completing in-app account deletion stops future collection on that device. Previously collected usage information is not linked to your URflashcards account ID and cannot be individually removed by deleting that account; it follows the applicable retention period.

These Firebase retention settings do not apply to Google's separate Play purchase-conversion records. Deleting a URflashcards account does not itself delete records controlled by Google, which follow Google's retention policies and available data controls.

Controls and data-protection requests

• Use the app locally without Cloud Sync where the feature allows it.
• Use Update Age Group to restart the local privacy setup.
• Delete your account and associated cloud data through the app or account deletion page.
• Delete progress and custom-card data for only your current target language with Reset this language.
• Disable review notifications in Settings or device settings.
• Turn off optional Firebase Analytics during review or under Settings > Privacy & Data without losing learning features.
• Open Google ad privacy options when Google requires an entry point for the region.
• Revoke microphone permission in Android device settings.
• Manage or cancel subscriptions through the Google Play account that made the purchase.
• Contact support for privacy questions or data requests.

Depending on the law where you live, you may request access, correction, deletion, or restriction of personal information controlled by URflashcards; object to certain processing; request data portability; withdraw consent; and complain to your local data protection authority. Withdrawing consent does not affect processing that was lawful before withdrawal.

Send requests to support@urflashcards.com. We may need to verify your identity and account before acting on a request. Rights can be subject to lawful limits or exceptions, and provider-controlled records must be requested from the relevant provider.

How information is protected

We use account access controls and secure transmission to reduce unauthorized access, loss, misuse, or alteration. No internet or storage system can be guaranteed to be completely secure.

Age-related availability and safeguards

The Application is available only to users aged 13 or older. A person under 13 must not use it or select an inaccurate age group. Google Play's content rating does not replace this eligibility rule.

Where applicable law requires a parent or legal guardian to review these terms, authorize a purchase, or otherwise act for a user who has not reached legal adulthood, that review or authorization is still required.

If you believe we have received information from an under-13 user, contact support@urflashcards.com so we can investigate and delete information we control where appropriate.

Provider locations can vary

URflashcards and its service providers may process information in countries other than your own. Depending on the provider and destination, transfers may rely on an adequacy decision, contractual safeguards, or another transfer mechanism recognized by applicable law. Provider terms and privacy notices describe their processing locations and safeguards.

External websites and provider policies

The Service may contain links to websites, Google Play pages, provider policies, email clients, or support pages that are not controlled by URflashcards. We are not responsible for the privacy practices, security, content, or availability of those third-party services.

Updates over time

We may update this Privacy Policy to reflect app changes, provider requirements, legal requirements, security needs, product improvements, or clearer wording. The latest version will be posted on this page with a new date.

When renewed acknowledgment or consent is required, the app asks you to review the update and make the required choice.

Privacy questions and deletion requests

For privacy-related questions, data requests, support, or account deletion questions, contact support@urflashcards.com.