Flashcards
УК Open App →

Privacy Policy

Last updated:

Terms of Use · Refund Policy

About Flashcards

Flashcards is a personal vocabulary learning application that helps you build and study your own word collections. You can create decks, add entries with translations, share decks with others, and track your progress through study sessions and statistics. This Privacy Policy explains what personal data we collect, why we collect it, and how we protect it.

1. What Data We Collect

When you use Flashcards we collect and store:

  • Account information — email address, display name, and a hashed password.
  • Vocabulary content — decks, entries, and translations you create.
  • Study activity — session records, card ratings, and study history used to compute your statistics.
  • Sharing data — deck share invitations you send or accept, including recipient email addresses.
  • Preferences — local display preferences such as your chosen colour theme.
  • Session tokens — short-lived authentication cookies required to keep you signed in.
  • Payment records — for Pro purchases, we store the Monobank invoice ID, amount, currency, status, and a masked card number (e.g. 414949******1234) returned by Monobank for reconciliation. We do not store full card numbers, CVV, or expiry dates — those are handled exclusively by Monobank.

We do not collect IP-based location data or behavioural tracking beyond the aggregate product analytics described below.

2. How We Use Your Data

Your data is used exclusively to operate the service:

  • Authenticate your identity and maintain your session.
  • Store and serve your decks, cards, and study records.
  • Calculate learning statistics and activity charts.
  • Deliver deck share invitations and email verification messages.
  • Process and verify Pro one-time payments via Monobank.
  • Send a one-off confirmation email after Pro activation.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Analytics

Flashcards uses PostHog for anonymous product analytics. Events such as session completions and card ratings help us understand how the product is used and where to improve it. No personally identifiable information is attached to these events.

4. Data Retention

Account data is retained for as long as your account exists. If you delete your account, all associated data — decks, entries, study sessions, and share invitations — is permanently removed. Payment records (invoice ID, amount, status, masked card number) are retained for the minimum period required by applicable accounting and tax law, regardless of account deletion.

5. Data Security

All data is transmitted over HTTPS. Passwords are never stored in plain text — only as salted hashes. Session cookies are HTTP-only and scoped to the application domain. Payment transactions are processed on Monobank's PCI-DSS-compliant infrastructure — we never receive or store raw card data. Webhooks from Monobank are verified with ECDSA SHA-256 signatures before being trusted.

6. Your Rights

You have the right to:

  • Access — request a summary of the personal data we hold about you.
  • Correction — update your email address or display name at any time from Settings.
  • Deletion — permanently delete your account and all associated data from Settings → Danger zone.
  • Portability — contact support to request an export of your vocabulary data.
  • Objection — opt out of non-essential processing by contacting us.

7. Cookies

We use a single session cookie to keep you authenticated. No third-party tracking cookies are set by the application itself.

8. Third-Party Services

Flashcards relies on the following third-party infrastructure:

  • MongoDB — primary database storage.
  • PostHog — anonymous product analytics.
  • SMTP provider — transactional email delivery (verification, share invites, activation).
  • Monobank (plata by mono) — one-time payment processing for Pro.

Each provider operates under its own privacy policy.

9. Children's Privacy

Flashcards is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. International Transfers

Flashcards is operated from Ukraine. Some service providers (such as PostHog and SMTP relays) may process data outside Ukraine and the EEA. By using the service you consent to such transfers, which are protected by appropriate technical and contractual safeguards.

11. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will also be highlighted in-app. Continued use of the application after an update constitutes acceptance of the revised policy.

12. Contact

Questions about this policy or your data? Reach us at hello@flashcards.best.

Back to home