This Privacy Policy explains how FlipUp: Flashcards (“the App”, “we”, “us”) handles information when you use the App and its AI features.
Our goal is to keep things simple: we do not create user accounts, and your flashcards primarily live on your device.
What we collect
We designed the App to collect as little personal data as possible.
- Content you create (flashcards, language choices, optional topic prompts). Stored locally on your device. Shared only when you explicitly use AI generation.
- AI generation inputs (e.g., “Dutch → English”, amount, optional topic) and the resulting generated word pairs are processed via our server strictly to fulfill your request.
- Diagnostic logs (hosting-provider standard logs such as IP address, user-agent, timestamp, response codes) may be temporarily retained for uptime, security, and abuse prevention.
How the AI feature works
When you tap “Generate with AI”, the App sends your request to our API hosted by a third-party provider (e.g., Vercel).
Our API forwards the prompt to an AI service provider (e.g., OpenAI) and streams generated pairs back to your device.
- We do not sell your data.
- We do not build user profiles.
- We do not persist your prompts or generations on our server beyond transient processing, except for short-lived operational logs as described above.
- Your content is also subject to the AI provider’s terms and privacy policy while processed by them.
Lock-Screen Widget
The widget shows your not-learned flashcards and uses shared storage (UserDefaults in an App Group) to read/write state (e.g., current index, reveal timers).
It does not send any data to us by itself.
Data sharing
- AI provider (e.g., OpenAI): receives the text you submit for generation to produce word pairs.
- Hosting provider (e.g., Vercel): processes requests to our API and may maintain standard access logs.
- Apple: may receive diagnostics/crash logs if you opt in to share them with developers via iOS settings.
Data retention
- On-device flashcards: kept until you delete them or uninstall the App.
- Server logs: retained only as long as necessary for operations/security and then deleted or anonymized.
- AI requests: we do not store prompt contents after completing your request on our server; the AI provider’s own retention practices apply on their side.
Legal bases (EEA/UK users)
We process your data to perform the service you request (Art. 6(1)(b) GDPR) and for legitimate interests in operating and securing our services (Art. 6(1)(f) GDPR).
Your choices
- Use the AI feature only when you want content generated; you can add cards manually or via CSV without AI.
- Delete cards at any time from within the App, or uninstall the App to remove local data.
Children’s privacy
The App is not directed to children under 4.
Security
We use reasonable technical and organizational measures to protect information during transit and storage. No method is 100% secure.
International transfers
Data processed by our hosting or AI providers may be transferred to and processed in countries outside your own jurisdiction.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version and update the “Effective date” above.
Contact us
If you have questions or requests (including GDPR/CCPA rights), contact us: