Introduction

deckstr (“we”, “our”, “us”) operates the deckstr mobile application. This Privacy Policy explains how we collect, use, and protect your information when you use our app.

By using deckstr, you consent to the collection and use of information as described in this policy. We encourage you to read this policy carefully before using the app.

If you have privacy questions or want to make a data request, contact us at support@deckstr.uk.

Information We Collect

Information You Provide

• Account information: If you create an account via Google or Apple sign-in (OAuth), we collect your email address and display name. We do not handle or store passwords — authentication is managed entirely by Google, Apple, and our authentication provider (Supabase).
• Study content: Topics you enter, flashcards generated for you, and flashcards you save to playlists. This data is required to provide the core functionality of the app.
• Purchase information: If you make an in-app purchase, your purchase is processed by Apple App Store or Google Play. We receive a purchase token and subscription status via RevenueCat but never receive or store your payment card details.
• Support requests: If you contact us, we collect the information you provide in your message.
• Content reports: If you report AI-generated content, we may collect the reported topic, screenshot, your explanation of the issue, and related account details needed to investigate.

Information Collected Automatically

• Usage data: We collect anonymous analytics about how you use the app, such as features used and session duration, using Expo’s built-in analytics capabilities.
• Device information: Device type, operating system version, and app version.
• IP address: Your IP address may be logged when generating flashcards, for rate limiting and fraud prevention purposes.

Information We Do NOT Collect

• We do not collect precise or approximate location data.
• We do not access your contacts, photos, camera, or microphone.
• We do not collect SMS, call log, or phone number data.
• We do not collect financial or payment card information directly.
• We do not use cookies or tracking pixels (there is no web interface within the app).

Required vs. Optional Data

• Account data (required for authenticated features): Creating an account requires signing in with Google or Apple, which provides your email address and display name. You cannot opt out of this data collection while using authenticated features. If you do not wish to provide this information, you can use deckstr in guest mode with limited functionality.
• Study content (required for core functionality): Topics and flashcards are collected as part of the app’s core purpose and cannot be opted out of while using the service. You can delete individual playlists and flashcards at any time.
• Usage analytics (automatic): Anonymous analytics are collected automatically and cannot be individually opted out of.

How We Use Your Information

We use the information we collect to:

• Provide and maintain the deckstr service
• Generate AI-powered flashcards based on your topic requests
• Save your playlists and study preferences
• Process and manage in-app purchases and subscriptions
• Respond to support requests
• Review reports about unsafe, offensive, deceptive, or incorrect AI-generated content
• Improve the app experience through anonymous usage analytics
• Prevent fraud and ensure the security of our service

Data Shared with Third Parties

We share specific data with the following third-party services, solely for the purposes described:

Service	Data shared	Purpose	Privacy policy
Supabase	Email, display name, study content (topics, flashcards, playlists)	Authentication, data storage	Supabase Privacy Policy
OpenAI	Topic text you enter for flashcard generation (no account details are sent)	AI flashcard generation	OpenAI Privacy Policy
RevenueCat	Anonymous user ID, purchase tokens, subscription status	Subscription and purchase management	RevenueCat Privacy Policy
Apple App Store / Google Play	Payment and transaction information (handled by the platform)	Payment processing for in-app purchases	Apple Privacy / Google Privacy

We do not sell your personal data to any third party.

Data Retention

• Account data is retained for as long as your account is active.
• Study content (topics, playlists) is retained until you delete it or your account.
• Cached flashcards may be stored on our servers for up to 30 days to improve performance.
• When you delete your account, associated app data is deleted within 30 days unless we need to retain limited information for legal, security, fraud-prevention, or dispute-resolution reasons.

Data Security

We implement industry-standard security measures to protect your data:

• All data in transit is encrypted using TLS/HTTPS.
• Data at rest is encrypted in our database.
• Authentication credentials (passwords) are hashed and managed by Supabase — we never have access to plaintext passwords.
• Access to user data is restricted to essential services only.

Your Rights

You have the right to:

• Request access to the personal data associated with your account
• Request correction of inaccurate account information
• Delete your account and associated app data (via Settings > Delete Account, our Support page, or by emailing support@deckstr.uk)
• Request data portability — receive a copy of your data in a structured format
• Ask questions about our retention, security, or data-handling practices
• Report problematic AI-generated content through our Support page or by emailing support@deckstr.uk

To exercise any of these rights, contact us at support@deckstr.uk. We will respond within 30 days.

Children’s Privacy

deckstr is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete that information.

Users between 13 and 18 should review this Privacy Policy with a parent or guardian.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the “Last updated” date at the top of this page and, where appropriate, through an in-app notification. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: support@deckstr.uk