Privacy Policy

Last updated: February 25, 2026

FlashLeap ("we", "our", or "the app") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the FlashLeap mobile application.

1. Information We Collect

Account Information: When you create an account, we collect your email address, display name, and optional profile picture. Passwords are handled securely by Firebase Authentication and are never stored in plaintext.

User Content: Flashcard decks, cards, and associated media (images, audio) that you create within the app. This content is stored locally on your device and optionally synced to the cloud if you enable cloud sync.

Usage Data: We may collect anonymous usage analytics such as study session frequency, feature usage, and crash reports to improve the app experience. This data cannot be used to personally identify you.

2. How We Use Your Information

• To provide and maintain the FlashLeap service
• To sync your flashcards across devices (when cloud sync is enabled)
• To send transactional emails (password reset, email verification)
• To improve app performance and fix bugs
• To display your profile to other users when sharing decks

3. Data Storage & Security

Your data is stored using Apple's CoreData framework on your device and, when cloud sync is enabled, on Google Firebase servers (Firestore, Firebase Storage). All cloud data is encrypted in transit using TLS and at rest on Firebase servers.

Media references are encrypted before being stored in the cloud. We implement security rules to ensure only you can access your own data.

4. Third-Party Services

FlashLeap uses the following third-party services:

• Firebase Authentication — for user accounts and sign-in
• Cloud Firestore — for cloud data storage and sync
• Firebase Storage — for media file storage
• Firebase Analytics — for anonymous usage analytics

These services have their own privacy policies. We encourage you to review Firebase's Privacy Policy.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. Your flashcard content is private unless you explicitly choose to share a deck using a share code.

Shared decks include your display name as the author. Share codes expire after 30 days.

6. Data Retention & Deletion

Your data is retained for as long as your account is active. If you delete your account, your cloud data enters a 90-day recovery period, after which it is permanently deleted. Local data on your device is removed when you uninstall the app.

7. Children's Privacy

FlashLeap is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

8. Your Rights

You have the right to:

• Access, update, or delete your personal information
• Export your flashcard data
• Disable cloud sync at any time
• Delete your account from within the app

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email. Continued use of FlashLeap after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at support@flashleap.app.