Privacy Policy

Last Updated: November 4, 2026

Effective Date: November 4, 2026

FlashCard (hereinafter referred to as "we" or "us") respects and protects the personal privacy of all users. This Privacy Policy is designed to help you understand how we collect, use, store, and safeguard your personal information.

1. Information We Collect

1.1 Account Information: When you register or log in, we may collect your username, encrypted password, and email address.

1.2 Learning and Flashcard Data: To provide multi-device sync, cards, decks, review progress, and study statistics created by you are encrypted and stored on our servers.

1.3 Device and Log Information: To maintain service reliability and security, the app records device model, OS version, network status, and necessary runtime and crash logs locally on your device. Such information is stored only on your device by default and is not automatically uploaded in silent or background states. To identify the device security environment and prevent fraud or repackaged piracy, after you agree to this Policy we read a device-unique identifier (Android ID / iOS Identifier for Vendor); this identifier is reported together with the security status only when an on-device runtime security check detects a threat, and is used solely for risk control and anti-cheating. In addition, when you proactively submit feedback, your submitted content together with device model, OS version, and app version are uploaded as necessary diagnostic information.

1.4 Camera and Microphone: When you actively use "photo occlusion / image recognition" or "speech-to-text / read-aloud" features, the app requests camera or microphone permission. The related images and audio are processed entirely on-device (offline OCR and offline speech recognition) and are not uploaded to the cloud by default.

2. How We Use Your Information

2.1 To provide flashcard management, spaced repetition reviews, and cloud synchronization services.

2.2 For authentication, fraud prevention, security protection, troubleshooting, and feature optimization.

2.3 We will never sell your personal information to third parties.

2.4 When the official app store is unavailable or you opt for self-hosted updates, the app downloads and requests installation of a newer package (requiring your manual confirmation) strictly for updating the app itself; it will never install silently or be used for any other purpose.

3. Data Storage and Protection

3.1 We employ industry-standard security safeguards (including SSL/TLS transmission encryption, password hashing, and access isolation) to protect your information.

3.2 We only retain your information for the duration necessary to deliver our services, and securely delete or anonymize it once no longer needed.

4. Your Rights

4.1 You have the right to view, modify, or export your cards and profile in the application.

4.2 You may request account deletion in the settings. Upon deletion, your personal data will be purged in compliance with applicable laws.

5. Information Processing in Silent and Background States

5.1 The app does not collect or upload your location, contacts, call logs, SMS, clipboard content, installed app list, photo library (except images you actively select), IMEI, MAC address, or other personal information when in a silent state (when you are not actively using the app) or while running in the background.

5.2 In background or non-interactive states, the app performs only the following necessary processing, with purposes, methods, and scope as described below:

(1) Version check: After you enter the app's home page, the app automatically requests the version update endpoint, carrying only the platform type, release channel, current version name, and build number to determine whether a new version exists; this request does not carry account or device identifiers.

(2) Study reminders: If you enable daily study reminders, the app delivers reminders at your configured time through system local notifications. Scheduling is performed entirely on-device; the system time zone is read to calculate reminder times, and reminder schedules are restored via system broadcast after a device reboot. No personal information is uploaded.

(3) Runtime security check: This starts only after you agree to this Policy and is used to detect risks such as root/jailbreak, emulators, debugging, hooks, and repackaging. Only when a risk is detected are the device identifier (Android ID / iOS IDFV), device model, OS version, app version, and risk type reported to the risk-control endpoint for anti-cheating and account security protection.

(4) Silent session renewal: If you are logged in, the app uses the locally stored refresh token in the background to obtain a new access token to maintain your session; no additional personal information is collected.

5.3 Except for the scenarios listed above, the app does not collect or upload any of your personal information in silent or background states, and none of the above scenarios involves sensitive personal information.

5.4 The app does not frequently self-start or launch other applications in association: after you enable daily study reminders, the local notification component restores the reminder schedule only upon device reboot; associated launches occur only when you actively make a payment or actively check for updates.

6. Sharing Personal Information with Third Parties

6.1 We do not sell your personal information and do not share it with any third party, except for the following scenarios necessary to deliver core features:

(1) Alipay Client SDK: When you actively purchase a membership or initiate a payment, to complete payment, order fulfillment, and transaction anti-fraud, we provide device model, OS version, network status, and order information to Alipay (China) Network Technology Co., Ltd. through the official Alipay SDK over encrypted transmission.

(2) Apple StoreKit In-App Purchase SDK: When you actively make or restore a purchase on iOS, transaction receipts and order numbers are processed by Apple Inc. through system-level StoreKit; the app only receives and verifies the receipt.

6.2 The app does not share your IMEI, IMSI, device MAC address, SUPI, SUCI, installed app list, location, contacts, call logs, calendar, SMS, phone number, images, or audio/video with any third-party SDK or service provider; the app also does not request permissions for location, contacts, call logs, calendar, SMS, or phone state.

6.3 The identities, purposes, processing methods, and types of personal information of the third-party SDKs we integrate are detailed in the "Third-Party SDK Directory and Information Sharing List", and we continuously monitor their compliance.

6.4 We will not share your personal information beyond the above scope unless we obtain your separate consent or as otherwise required by laws and regulations.

7. Targeted Push and Personalized Recommendations

7.1 The app does not provide targeted push or precision marketing based on personal information, nor does it use personal information from any third-party source for targeted push.

7.2 The "Guess You Like" section on the home page and the "Recommend" section in the marketplace display content based on site-wide public popularity and editorial curation; they do not rely on your personal profile, behavioral data, or third-party data.

7.3 In-app notifications are used only to send service and system messages to your account and do not use personal information from third-party sources.

7.4 If personalized recommendations or targeted push are introduced in the future, we will clearly inform you in advance through pop-ups or other prominent means of the processing purposes, methods, scope, and personal information sources, provide an option to disable or opt out, and prominently distinguish such content on relevant pages with labels such as "Personalized Recommendations" or "Targeted Push".

8. Policy Updates

We may update this Privacy Policy from time to time. When significant changes occur, we will notify you through prominent in-app notices.