Last updated: [Insert Date]

This Privacy Policy explains how Flash Cards ("we", "us", or "our") collects, uses, and protects your personal information when you use our website and services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Information You Provide to Us

• Account information: name, email address, username, and password.
• Profile details: optional information such as avatar, language preferences, or other profile settings.
• Content you create: flashcard decks, notes, tags, and study data you enter.
• Support communications: messages you send to us, such as support requests or feedback.

1.2 Information Collected Automatically

• Usage data: pages visited, features used, time spent on pages, clicks, and other interaction data.
• Device and technical information: IP address, browser type, operating system, device type, and approximate location based on IP.
• Log data: timestamps, error logs, and diagnostics.

1.3 Information from Third Parties

If you choose to sign in or connect through third-party services (such as a single sign-on provider), we may receive basic profile information (e.g., name, email) from the third-party provider, in accordance with their privacy settings and policies.

2. How We Use Your Information

We use your information to:

• Provide and operate the Service, including creating and managing your account and flashcard content.
• Improve and personalize the Service, such as tailoring content or features based on how you study.
• Communicate with you, including sending service-related notifications, updates, and responding to support requests.
• Maintain security, detect and prevent fraud, abuse, or technical issues.
• Analyze usage, monitor performance, and develop new features and functionality.
• Comply with legal obligations, enforce our terms, and protect our rights.

We do not sell your personal information.

3. Legal Bases for Processing (EEA/UK Users)

If you are in the EEA or UK, we process your personal data based on one or more of the following legal bases:

• Contract: to provide the Service you requested.
• Legitimate interests: to improve the Service, maintain security, and prevent abuse.
• Consent: for certain optional features, analytics, or marketing communications.
• Legal obligation: where we must comply with applicable laws.

4. How We Share Your Information

We may share your information:

• With service providers: third-party vendors that help us operate the Service (e.g., hosting, analytics, email delivery), under contracts that require them to protect your data and use it only for our instructions.
• For legal reasons: if required by law, subpoena, or court order, or to protect our rights, safety, or the rights and safety of others.
• In a business transfer: as part of a merger, acquisition, reorganization, or sale of assets, in which case we will take reasonable steps to ensure the continued protection of your data.

We do not share your personal information with third parties for their own direct marketing purposes.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you signed in and maintain session security.
• Remember your preferences and settings.
• Understand how the Service is used (analytics).

Types of cookies we may use include strictly necessary, preference, and analytics cookies.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

6. Data Retention

We retain your personal information for as long as necessary to provide and maintain the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

When information is no longer needed, we will delete or anonymize it in a reasonable timeframe, unless we are required by law to keep it longer.

If you delete your account, we will delete or anonymize personal information associated with your account, subject to any legal obligations to retain certain data.

7. Your Rights

Depending on your location, you may have some or all of the following rights:

• Access: request a copy of the personal information we hold about you.
• Correction: request that we correct inaccurate or incomplete information.
• Deletion: request that we delete your personal information, subject to certain exceptions.
• Restriction: request that we restrict the processing of your information in certain circumstances.
• Portability: request a copy of your information in a structured, commonly used, machine-readable format.
• Objection: object to certain types of processing, including direct marketing.
• Withdraw consent: where processing is based on consent, you may withdraw your consent at any time.

To exercise your rights, please contact us using the details in the Contact Us section below. We may need to verify your identity before fulfilling your request.

8. Children’s Privacy

The Service is not intended for children under the age of 13 (or a higher age if required by local law). We do not knowingly collect personal information from children under this age.

If you believe that a child has provided us with personal information in violation of this policy, please contact us and we will take steps to delete such information.

9. Data Security

We use reasonable technical and organizational safeguards designed to protect your personal information against unauthorized access, loss, misuse, or alteration.

However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we strive to protect your data using industry-standard measures.

10. International Data Transfers

Your information may be processed and stored on servers located in countries other than your own. These countries may have data protection laws that are different from those in your jurisdiction.

Where required, we take steps to ensure that appropriate safeguards are in place to protect your personal information in accordance with this Privacy Policy and applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If changes are material, we may provide additional notice (such as by email or through the Service).

Your continued use of the Service after the updated policy becomes effective indicates that you have read and understood the changes.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, you can contact us at:

• Email: [[email protected]]
• Postal address: [Your Organization Name], [Street Address], [City, State/Region, Postal Code], [Country]

Last updated: 2025-11-29