Privacy Policy for URflashcards.

Who is responsible for this policy

This policy applies to information processed through URflashcards and related urflashcards.com legal/support pages. The data controller responsible for information controlled by URflashcards is Şerif Cin, provider of URflashcards.

For privacy questions, account deletion questions, or data requests, contact support@urflashcards.com.

Information you provide, create, or allow

• Account information: user ID, email address, display name, profile image, and sign-in provider from supported providers such as Google or Apple when available.
• Learning data: progress, reviewed cards, answers, mistakes, mastery, SRS/FSRS review state, due-card data, streaks, XP, statistics, settings, selected languages, and study-time data.
• User-created content: custom cards, notes, categories, examples, edits, deleted-card/restoration state, and other flashcard content you create or modify.
• Purchase and entitlement data: Premium status, subscription entitlement state, restore state, and app-store purchase metadata needed to unlock paid features. Payment card details are handled by the app store, not URflashcards.
• Advertising data: consent status, ad-personalization preference, ad-free reward state, ad interactions, and device advertising identifiers when ads are available and allowed.
• Voice and pronunciation data: microphone input, speech-recognition results, text-to-speech text, and temporary local playback data when you use speech features.
• Notification data: local review-reminder preference, due-card count, due-card identifiers, and scheduled reminder time when review reminders are enabled.
• Diagnostics and local app activity: local app events and troubleshooting information stored on the device under the app analytics storage key, plus logs you choose to send to support.

Purposes of processing

URflashcards uses information to operate study and practice sessions, calculate SRS/FSRS review timing, maintain progress, save custom cards, restore deleted cards, personalize settings, provide Cloud Sync, back up and restore data, refresh Premium status, show allowed ads, grant rewarded ad-free passes, schedule local review reminders, secure the Service, prevent abuse, debug issues, and respond to support requests.

Local data and cloud backup

Some data stays local to your device unless you sign in, enable or use account features, send logs to support, or use a provider-backed feature. Cloud Sync with Firebase may store account details, progress, stats, settings, SRS/FSRS review state, study-time entries, and custom card data so your learning can be backed up and restored across devices.

Cloud Sync may be limited to Premium users. If Cloud Sync is unavailable, local learning features may still operate on the device, but cloud backup and restore may not run.

Services that help run URflashcards

We use service providers to operate authentication, cloud sync, app integrity, purchases, advertising, hosting, billing, platform features, and support. Their policies explain how they process data:

• Google Play Services
• Firebase (Authentication, Firestore, App Check, and Hosting)
• Google AdMob
• RevenueCat (subscription entitlement management)
• Apple services, when Apple Sign-In or Apple platform features are available
• Browser, device, and operating-system speech services used for microphone, speech recognition, text-to-speech, and playback features.

AdMob, UMP, and ad choices

The free version of URflashcards may show ads outside active study or practice sessions. Google AdMob and advertising partners may process advertising identifiers, device information, consent status, approximate location inferred by Google, location-related advertising signals where available and allowed, and ad interaction data to provide, measure, limit, and personalize ads where permitted. URflashcards does not request Android location permission in the current app.

Because URflashcards is intended to be appropriate for a general audience, ad requests are configured for family-safe treatment with general-audience ad content. Where a user is a child, under the age of consent, or of unknown age for advertising purposes, ads must be handled under Google Play Families and AdMob child-directed or under-age treatment controls.

URflashcards uses Google’s User Messaging Platform consent flow before requesting native ads where required. Depending on your location and Google’s message configuration, this may include a European regulations consent message, a US state privacy message, or a later privacy-options form. These ad-consent choices are separate from accepting the URflashcards Terms of Service and Privacy Policy.

If Google reports that a privacy options entry point is required for your region, the app can show an Ad Privacy Options button in Settings so you can review or change supported ad choices. You can also change the Personalized Ads setting in Settings; that setting requests non-personalized ads when turned off, but it does not override Google’s UMP consent requirements or regional privacy-law signals.

If you decline or withdraw ad consent where consent is required, URflashcards is designed to keep core learning features available, but some ad-funded features, ad fill, rewarded ad-free passes, or personalized ad delivery may be limited or unavailable.

Premium access and store billing

Purchases and subscriptions are processed by Google Play or another supported app store. RevenueCat helps URflashcards read, restore, and manage entitlement status. URflashcards does not receive or store your payment card number.

Store purchase records, tax records, fraud-prevention records, refund records, and billing logs may be retained by Google Play, RevenueCat, or another store according to their own policies and legal obligations.

Speech features

Speech-to-text, text-to-speech, and temporary playback features use your microphone, browser, device, and operating-system speech services. Depending on your device and settings, voice or text may be processed by Google, Apple, browser speech services, or operating-system services.

URflashcards does not store voice recordings on our servers. Temporary playback recordings are local to your device session. You can revoke microphone permission in your device or browser settings.

When information may be shared

URflashcards shares information only when needed to provide the Service, process account and sync features, manage purchases, show allowed ads, host legal/support pages, protect users or the Service, comply with law, respond to your request, or work with the service providers listed in this policy.

We do not sell personal information. We do not use a third-party analytics SDK in the current app code.

How long information is kept

Local app data remains on your device until you delete it, clear app storage, delete your account, or uninstall the app. Cloud-synced data is retained while your account is active unless you delete your account or request deletion through available deletion channels.

You can permanently delete your signed-in URflashcards account and associated cloud data from Settings > Cloud Sync > Delete Account. You can also use the public Account Deletion page for deletion instructions or requests.

Provider records such as app-store purchase records, tax records, fraud-prevention records, ad records, security logs, and provider diagnostics may be retained by Google Play, Firebase, AdMob, RevenueCat, Apple, or other providers according to their own policies and legal obligations.

Controls available to you

• Use the app locally without Cloud Sync where the feature allows it.
• Delete your account and associated cloud data through the app or account deletion page.
• Disable review notifications in Settings or device settings.
• Change ad-personalization preferences and open Google ad privacy options when required for your region.
• Revoke microphone permission in device or browser settings.
• Manage or cancel subscriptions through the app store account that made the purchase.
• Contact support for privacy questions or data requests.

How information is protected

We use provider security features such as Firebase Authentication, Firebase App Check, access rules, HTTPS, and encrypted transport where supported by the relevant service. Google Mobile Ads SDK data is encrypted in transit by Google. No internet or storage system can be guaranteed to be completely secure, but we use these safeguards to reduce unauthorized access, loss, misuse, or alteration.

Use with permission

URflashcards is not designed to collect children’s personal information without appropriate permission. If you are under 13, or under the minimum age required by your country or app store rules, use the app only with permission from a parent or legal guardian.

Provider locations can vary

URflashcards and its service providers may process information in countries other than your own. We rely on the safeguards, contractual terms, and security practices provided by Firebase, Google Play Services, AdMob, RevenueCat, Apple, and supported platform providers.

External websites and provider policies

The Service may contain links to websites, app stores, provider policies, email clients, or support pages that are not controlled by URflashcards. We are not responsible for the privacy practices, security, content, or availability of those third-party services.

Updates over time

We may update this Privacy Policy to reflect app changes, provider requirements, legal requirements, security needs, product improvements, or clearer wording. The latest version will be posted on this page with a new date.

If the app presents a new acceptance step for updated Terms or Privacy Policy, continuing past that step records your acceptance for that version.

Privacy questions and deletion requests

For privacy-related questions, data requests, support, or account deletion questions, contact support@urflashcards.com.