Your study space.
Your privacy.

The essentials

This page describes Flashcard Loop’s current pre-release data practices and this website. For privacy questions or requests, contact contact@flashcardloop.com.

What we handle

• Account information: your email address, account identifier, and a name if you provide one. Sign in with Apple may provide a private relay email and, if shared, your name.
• Your study content: deck names and descriptions, saved questions and answers, and changes or deletions you make.
• Uploaded documents: the PDF, DOCX, or text file you choose to send, its filename, file type and size, extracted text, AI descriptions of PDF visuals, generated draft cards, and supporting excerpts. PDFs may include page images, scans, diagrams, and personal information that the AI processing can see.
• Import records: processing status, creation and update times, errors, monthly usage, and information needed to connect approved cards to their source. Your draft edits, personally written review cards, selections, and destination-deck choice are also saved on your device.
• Progress and preferences: review ratings, review times and duration, repetition schedules, your daily goal, selected subjects, and other study settings.
• Subscription information: an account-linked purchase identifier, purchased product, subscription status, renewal or expiration details, and transaction information needed to verify Pro access. Apple handles App Store payment; we do not receive your full payment-card details.
• Support messages: your email address and anything you choose to include when you contact us.
• Technical information: request and security logs may include an IP address, device or browser information, timestamps, errors, and processing or model-usage metadata. These help us and our providers operate and troubleshoot the service.

The app keeps study data and pending changes on your device for offline use. Native sign-in credentials use secure device storage. Document draft edits are stored separately in the app’s local data.

Documents, notes and cards

Document import. Selecting a file opens your device’s file picker and keeps the selection on your device. Choosing Generate cards opens a consent screen that names the services receiving the document. The original file is uploaded to private Supabase storage only after you choose Agree & generate. Choosing Not now keeps the selection without starting an upload or using a document import.

For PDFs, we send the original PDF file through OpenRouter to Google Gemini 2.5 Flash-Lite for native PDF vision. The model reads page text and readable visuals, including scans and diagrams, and returns extracted text or descriptions for the card-generation step. The original PDF reaches OpenRouter and the model provider; this is not a text-only transfer.

DOCX files use Cloudflare’s document-to-text conversion. Text files are decoded as UTF-8 without an AI extraction step. The extracted text from these formats is then sent through OpenRouter to generate draft questions and answers.

PDF reading is AI-generated and can misread text, omit details, or misinterpret a diagram. Its source excerpts are not independently verified transcriptions. Compare important details with your original document before saving or studying a card.

The original document, extracted text or visual descriptions, generated drafts, and source records are stored before you approve cards. Your selection determines which cards are added to a deck. Draft edits and selections stay on your device until you save the resulting cards through normal study sync.

Pasted questions and answers. The separate notes tool organizes explicit question-and-answer pairs on your device without calling generative AI. Only cards you choose to save from that tool are synced. This is separate from uploading a TXT document for AI card generation.

Your decks and documents are not published to other users through the app. We and our providers may access information to operate the service, respond to a request, investigate misuse, or meet a legal obligation. Personal information in an upload is not automatically removed; send only material you have the right to use and remove private information you do not need for studying.

How we use it

We use information to sign you in, deliver account emails, process the document imports you request, generate and restore draft cards, preserve source references, save and sync approved cards, schedule reviews, show progress, apply import allowances, verify subscription access, and answer support requests.

We retain processing and security information to maintain reliability, prevent abuse, and investigate errors. RevenueCat provides subscription reporting about purchases and renewals. This reporting is separate from your document and card content. We do not use advertising SDKs or track activity across other companies’ apps and websites for advertising.

Services that help us

• Supabase provides authentication, private document and file storage, our database, and backend functions. It processes account data, original uploads, extracted text and visual descriptions, import history, generated drafts, reference excerpts, and synced study data.
• OpenRouter and the selected model provider receive original PDFs for native PDF vision and extracted text for flashcard generation. The configured model is Google Gemini 2.5 Flash-Lite. OpenRouter routes requests to a provider serving that model. Provider handling depends on the endpoint and account configuration; see OpenRouter’s privacy policy.
• Cloudflare hosts this website and provides the lightweight DOCX-to-text conversion service. It processes conversion requests and related technical information.
• Resend delivers sign-in and other account emails. It processes recipient information, email content, and delivery events.
• RevenueCat verifies purchases and subscription access and provides subscription reporting. We give it an identifier connecting a purchase to your Flashcard Loop account.
• Apple provides Sign in with Apple and App Store purchases, payment processing, subscription management, and refunds under its own terms and privacy practices.

Audio review remains disabled for this release. In a version offering optional audio review, selecting that feature sends card text to ElevenLabs to create spoken audio, which may be cached in private storage. It does not require recording your voice.

Providers may process information outside the country where you live. Their own processing and retention rules can apply. We do not promise that every provider immediately deletes all request information. We may also disclose information when reasonably needed to comply with law, protect people or the service, or complete a business transfer with appropriate protection for personal information.

Retention and deletion

We keep your account and study information while needed to provide the service. Completed document imports currently retain their original file, extracted text or AI visual descriptions, draft cards, and source associations with your account so you can return to them. These completed imports do not currently have an automatic timed deletion policy.

Cancelled, failed, and expired unfinished uploads are marked for raw-file cleanup, which may need retries. Cancelling an import does not mean every related record is immediately erased: processing history and any extracted text or partial drafts may remain with the account. Cancellation does not remove an import that has already finished or cards already saved to a deck.

Deleting an individual card or deck hides it from your study space. Its record, including content, can remain in the backend for synchronization until account deletion. Deleting a card does not also delete its original uploaded document or generated draft set.

You can delete your account in Settings → Delete account. Once that process completes, your active account, associated study and import records, and account-owned uploaded files are removed from our app backend. The app also clears that account’s saved study data and draft edits on the device performing deletion. Other devices may need to reconnect or clear local app data.

Limited transaction, support, security, legal, and backup records may remain where needed to meet obligations, resolve disputes, prevent abuse, or maintain recovery systems. Provider records may have separate retention requirements. Deletion is not an instant removal of every record from every provider.

To request removal of a completed import without deleting your account, contact contact@flashcardloop.com. Account deletion does not cancel an App Store subscription. Manage it with Apple separately. Account deletion help.

Your choices

You can choose whether to upload a document, cancel unfinished processing, select and edit generated drafts, change study preferences, and delete your account. You can use manual cards and the separate pasted-question tool without requesting document generation.

You may contact us to request access to, correction of, or deletion of personal information. Depending on where you live, additional rights may include receiving a copy, restricting or objecting to certain uses, withdrawing consent where a use relies on it, or contacting a privacy authority. Write to contact@flashcardloop.com; we may verify your identity before acting on an account request.

Age and young learners

Flashcard Loop is intended for learners aged 13 and older, including secondary-school and university students and adults learning languages or preparing for exams. It is not intended for children under 13. If local law requires a higher age or parental or guardian permission, that requirement also applies.

If you believe a child under 13 has provided personal information, please contact us so we can investigate and take appropriate action, including deleting the account where required.

This website and updates

This public website does not include advertising pixels, a contact form, or an analytics script. Fonts and images are served with the website. Hosting and security providers may still process technical requests as described above. Email links open your chosen email application.

We may update this policy as the app or our practices change. The date at the top shows the latest revision. We will provide additional notice when required for material changes.