Privacy Policy — Flash Me

Effective date: July 26, 2026

Flash Me ("we", "us", the "App") turns photos and documents of your study material into flashcards. This policy explains what we collect, why, and who processes it.

1. Scope

This Privacy Policy applies to the Flash Me mobile app and the backend services that power it. For who operates Flash Me and how to reach us, see section 10 at the end of this policy.

2. What we collect

Content you upload. When you photograph or upload notes, slides, or documents, the App sends that image or extracted text to our backend so an AI model can generate flashcards from it. This content may contain whatever you choose to capture.

An anonymous account ID. On first launch the App creates an anonymous account (a random identifier) so your generations and any purchases can be associated with your install. We do not require an email, name, or password to use the App. There is no sign-up and no login.

Purchase records. If you buy a subscription or the Lifetime option, the purchase is processed by Apple App Store or Google Play. We receive a confirmation that a purchase occurred; we do not receive your payment card details.

Your decks. The flashcards, decks, and study progress you create are stored locally on your device. They are not uploaded to our servers unless/until a future sync feature is enabled (which would be disclosed and, where required, opt-in).

We do not use third-party advertising or analytics/tracking SDKs, and we do not sell your personal information.

3. How we use what we collect

• To generate flashcards from the material you upload.
• To provide and maintain the App (e.g. keep track of your free allowance and whether your Flash Me subscription or Lifetime purchase is active).
• To process purchases and prevent abuse of free allowances.
• To diagnose problems and improve reliability.

4. Who processes your data (sub-processors)

To provide the App, your uploaded content and/or anonymous account data are processed by:

• Supabase — backend hosting, the anonymous authentication, and the function that orchestrates flashcard generation.
• Google (Gemini API) — the AI model that reads your uploaded image/text and produces the flashcards. Your uploaded content is sent to Google for this purpose. See Google's API data-use terms.
• Apple App Store / Google Play — payment processing for in-app purchases.
• RevenueCat — subscription management. Receives your anonymous account identifier and the purchase receipt from the store to determine whether your Pro access is active. It does not receive your uploaded content or your payment card details.

These providers process data on our behalf to deliver the App's core function.

5. Retention

• Uploaded images / document text are used transiently to generate your cards and are not retained by us as a long-term user profile; they are not stored beyond 30 days of operational logs.
• Your decks and study data remain on your device until you delete them or uninstall the App.
• Anonymous account / purchase records are retained as needed to honor purchases and prevent abuse.

6. Your choices and rights

• Delete your data on this device: delete decks individually, or reinstall the App.
• Delete your account / server data: In the App, open Settings → Account → "Delete account & all data." This wipes every deck, card, and document from your device, and permanently erases your anonymous account and credit ledger from our servers — and cannot be undone. You can also request deletion via our "Delete your Flash Me data" page or by emailing FlashMe.Iphone@gmail.com.
• Depending on your region (e.g. EEA/UK GDPR, California CCPA), you may have rights to access, correct, or delete personal data. Contact FlashMe.Iphone@gmail.com to exercise them.

7. Children

Flash Me is intended for students and general study use. You must be at least 13 years old to use the App, and it is not directed to children under 13. We do not knowingly collect personal information from children under 13; if you believe a child under 13 has provided us information, contact us and we will delete it.

8. Security

We use reputable infrastructure (Supabase) and transmit data over HTTPS. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

9. Changes

We may update this policy. Material changes will be reflected by updating the effective date above and, where appropriate, an in-app notice.

10. Who we are & contact

Flash Me is operated by Odell Brown (sole proprietor), British Columbia, Canada.

Questions or requests: FlashMe.Iphone@gmail.com.