Privacy Policy

Publisher: Alireza Farhadizadeh · Contact: sci.ronick@gmail.com

1. Using the app without an account

You can use Swedish Flashcards entirely as a guest. In guest mode everything — your words, review progress, settings and game scores — is stored only on your device and is never transmitted anywhere. Uninstalling the app deletes it.

2. What is collected if you create an account

Signing in is optional and enables cloud backup and multi-device sync.

Account details

• Email address (or your Google account identifier, if you sign in with Google)
• Display name and username you choose
• Profile photo, if you upload one

Your learning content

• Swedish words and their translations that you save
• Topic tags, CEFR level, part of speech, and any book or chapter you record
• Review progress: which box a word is in and when it is next due
• Learning stats: your points total, current and best streak, and your daily-goal choice

Friends features, if you use them

• Connections between your account and other users you add
• Pre-written phrase and emoji messages you send. These are sent as codes from a fixed built-in list, not as free text — the app has no free-text messaging.
• A history of when friendships were accepted or removed

Notifications

Your reminder time preference. Reminders are generated on your device; no notification content is sent to a server.

3. Your camera and scanned photos

The app uses your camera so you can photograph Swedish text and turn it into flashcards.

Text recognition runs entirely on your device, using Google's ML Kit on-device text recognition. Photos you scan are not uploaded, not stored on any server, and not retained by the app after the text has been read from them. Only the words you then choose to save are kept.

Camera access is used solely for this. The app does not access your photo library except when you deliberately pick a profile picture.

4. Third parties that receive data

The app is deliberately built with very few external dependencies. There is no advertising SDK, no analytics SDK, and no crash-reporting SDK.

• Supabase — hosts the database, authentication and file storage that make sync work. Your account details and learning content are stored there. The project is hosted in the EU (Frankfurt).
• MyMemory Translated — used to look up translations. When an online lookup happens, the word being looked up is sent to that service. Your identity, email and account are not sent with it. Please note that MyMemory contributes submitted text to a shared, publicly searchable translation memory, so avoid looking up text you consider private. The app also has an offline dictionary and does not need this service to function.
• Google Play Services / ML Kit — text recognition runs locally, but Google may collect standard diagnostic information about the ML Kit component itself, governed by Google's Privacy Policy.
• Google Play Billing — if you subscribe to Premium, payment is processed by Google Play. We never receive or store your card or payment details. The app receives only a purchase token, checked against Google's servers to confirm the subscription is valid.

5. Profile photos are publicly accessible

If you upload a profile photo it is stored in a public storage bucket, which means anyone who has or guesses its direct URL can view the image, even without an account. This is how friends' avatars are displayed. Please do not upload a photo you would not be comfortable being publicly reachable. You can remove your photo at any time in the app.

6. Why this data is processed (GDPR legal bases)

For users in the EU/EEA and the UK:

• Performance of a contract — account details, saved words and sync. Without them there is no account or backup.
• Consent — camera access, profile photos, notifications, and the friends features. All optional, all revocable.
• Legitimate interests — keeping the service secure and preventing abuse.
• Legal obligation — retaining subscription and tax records where required.

7. How long data is kept

• Guest data — on your device only, until you uninstall or delete it.
• Account data — kept while your account exists.
• After you delete your account — your profile, words, tags, friendships and profile photo are permanently deleted. This is immediate and not recoverable. See Delete your account.
• Lapsed subscription — if Premium ends, syncing stops but your data is not deleted, so resubscribing restores everything. Local data on your device is never affected.
• Purchase records — retained as long as tax and accounting law requires.

8. Your rights

• Access and export your data. The app has a built-in export that writes your full library to a file you control.
• Correct it. Words, translations, tags and profile details are all editable in the app.
• Delete your account and all associated data, from within the app — see Delete your account.
• Withdraw consent — revoke camera or notification permission in Android settings, remove your photo, or remove friends.
• Object, restrict, or request portability under GDPR.
• Complain to a supervisory authority. In Sweden that is IMY.

9. Security

Data in transit is encrypted with HTTPS/TLS. Database access is protected by row-level security so one account cannot read another's words, tags or profile details. Passwords are handled by Supabase Auth and are never visible to the app or its developer.

No system is perfectly secure, and this is an independently developed app. It is not intended for confidential or sensitive information.

10. Children

The app is not directed at children under 13, and accounts are not knowingly created for them. If you believe a child has created an account, contact sci.ronick@gmail.com and it will be removed.

11. International transfers

Data is stored in the EU. Some third parties named in section 4 may process data outside the EU/EEA under appropriate safeguards such as the EU Standard Contractual Clauses.

12. Changes

If this policy changes materially, the "Last updated" date will change and, for significant changes, notice will be given in the app before the change takes effect.

13. Contact

Questions, requests or complaints: sci.ronick@gmail.com