Privacy Policy — FlowCard

Effective date: March 19, 2026

Representative: Caprara Evan

Contact: evancaprara.dev@icloud.com

1. Who We Are

FlowCard (“we”, “us”, “our”) is an educational app operated by Caprara Evan. This Privacy Policy explains how we collect, use, store, and protect personal data when you use FlowCard.

2. Data We Collect

  • Account Data: email address, user ID, authentication method (Apple, Google, email/password).
  • User Content: documents, images, and files you upload to generate study decks.
  • Learning Data: decks, flashcards, quiz progress, study activity/streaks, and selected goals/preferences.
  • Subscription Data: subscription status and product identifier (payment processing is handled by Apple).
  • Technical Data: app diagnostics and service logs needed for security, reliability, and debugging.

3. How We Use Data

  • Provide authentication and account access.
  • Create and sync decks, quizzes, and flashcards.
  • Process AI-based generation from your uploaded materials.
  • Manage subscription access and restore purchases.
  • Improve performance, fix bugs, and prevent abuse/fraud.
  • Respond to support and account requests.

4. Legal Bases (EEA/UK)

  • Contract: to provide FlowCard features you request.
  • Legitimate Interests: app security, quality, and service improvement.
  • Consent: where required (for example, certain permissions).
  • Legal Obligations: when compliance is required by law.

5. Third-Party Services

  • Google Firebase (Authentication, Firestore, Cloud Functions, Storage).
  • Apple StoreKit (in-app subscriptions and purchase restoration).
  • Google Sign-In (if you choose Google authentication).

6. Data Sharing

We do not sell your personal data. We share data only with service providers strictly necessary to operate FlowCard (for example, cloud hosting, authentication, storage, and subscription processing), and only for the purposes described in this policy.

7. Data Retention

We retain data only as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. If you delete your account, we delete or anonymize data according to operational and legal requirements.

8. Your Rights

  • Access, correct, or delete your personal data.
  • Object to or restrict certain processing (where applicable).
  • Request portability of your data (where applicable).
  • Withdraw consent where processing is based on consent.

To exercise your rights, contact: evancaprara.dev@icloud.com.

9. Security

We implement reasonable technical and organizational safeguards to protect personal data. No system is 100% secure, but we continuously improve protections.

10. Children’s Privacy

FlowCard is not directed to children under 13 (or the minimum age required in your jurisdiction). If you believe a child submitted personal data, contact us and we will take appropriate action.

11. International Transfers

Your data may be processed in countries other than your own through our service providers. Where required, we apply appropriate safeguards for cross-border transfers.

12. Changes to This Policy

We may update this