Privacy Policy

Information We Collect

Deckbase is designed with privacy in mind. We collect only the minimum information necessary to provide our services. Depending on how you use the website or mobile application, we may collect the following:

• Email address
• Display name (optional)
• Authentication tokens

Some mobile features may work locally without an account. Cloud sync, web access, API keys, and MCP integrations require an account.

a. Account Information

If you create an account for cloud sync or web access, we collect:

b. Learning Data

To provide spaced repetition and analytics features, we store your flashcards, review history, and progress data. This data is stored locally on your device and optionally synced to our secure cloud if you enable cloud sync.

c. Usage Analytics and Error Reporting (Optional & Anonymous)

To improve the app, we may collect anonymized usage data, crash reports, and feature usage patterns. This data does not contain personal identifiers. You can manage analytics consent through the cookie banner on the website.

How We Use Information

We use collected data only for:

• Providing flashcard creation and spaced repetition services
• Syncing your data across devices (if cloud sync is enabled)
• Processing subscriptions and payments
• Improving app performance and features
• Providing learning analytics and insights
• Authenticating API and MCP requests

We never sell, rent, or share your data with third parties for advertising or marketing purposes.

AI Processing

When you use AI to generate flashcards, your input text is sent to one of our AI providers to extract key concepts and create study materials. Generated flashcards are stored in your personal library. We do not retain your raw prompts for training purposes, and we do not use your inputs to train our own models. Depending on the feature, AI processing may be performed by:

• Anthropic (Claude)
• OpenAI (GPT)
• DeepSeek
• Fal AI (image generation)
• ElevenLabs (text-to-speech voices)
• AssemblyAI (audio transcription)

Each provider processes data under their own privacy policy and terms. We recommend reviewing those policies if you have questions about how they handle data.

Third-Party Services

Deckbase integrates trusted third-party services to provide functionality. These may include:

• Firebase (Google LLC) — authentication, cloud sync, Firestore database, Cloud Storage, and analytics
• RevenueCat — subscription management and purchase validation
• Stripe — payment processing for web subscriptions
• Anthropic, OpenAI, DeepSeek — AI-powered flashcard and content generation
• ElevenLabs — text-to-speech generation
• Fal AI — AI image generation
• AssemblyAI — audio and video transcription
• Resend — transactional and support emails
• Google Analytics 4 and Google Search Console — website analytics and search performance
• Sentry — error tracking and monitoring
• DataForSEO, Perplexity, Firecrawl — SEO and research tooling (internal use only)

Each third party adheres to GDPR and CCPA-compliant standards where applicable. You can review their privacy policies on their respective websites.

API Keys and MCP Integrations

Pro and VIP users may create API keys to access Deckbase features programmatically or through the Model Context Protocol (MCP). When you use an API key or MCP integration:

• We store only a cryptographic hash of your API key; the raw key is shown once at creation.
• We log API usage for security, rate limiting, and billing purposes.
• MCP OAuth flows issue short-lived access tokens stored until they expire or are revoked.
• You are responsible for keeping your API keys secure. If a key is exposed, revoke it immediately in your dashboard and generate a new one.

Misuse, sharing, or resale of API access is prohibited and may result in revocation of keys and suspension of your account.

Cookies and Tracking Technologies

The Deckbase website uses cookies and similar technologies for essential functionality, analytics, and (where enabled) advertising-related measurement. You can manage your consent for analytics and advertising cookies through the cookie banner. Essential cookies required for authentication and security cannot be disabled.

Data Retention and Deletion

Your flashcards and learning data are retained as long as you use Deckbase. If you delete your account, all associated data will be permanently removed from our servers within 30 days. You can export your data at any time before deletion. API access logs and analytics data may be retained for longer periods in aggregated or anonymized form for security and business analysis.

Security

We follow industry-standard practices to protect your information from unauthorized access, alteration, or disclosure. Your data is encrypted in transit and at rest. We regularly update our security measures to maintain a high level of protection.

International Data Transfers

Deckbase operates globally. Your data may be transferred to, stored in, or processed in countries other than your own, including Japan and the United States, where our service providers operate. We rely on appropriate safeguards, such as standard contractual clauses and provider certifications, to protect your data during these transfers.

Children's Privacy

Deckbase is not intended for children under 13. We do not knowingly collect personal information from children. If we discover such data, it will be deleted immediately.

Your Rights

Depending on your region, you may have rights under laws such as the GDPR (EU/UK), CCPA/CPRA (California), and the Act on Specified Commercial Transactions (Japan). These rights may include:

• Access, correct, or delete your personal data
• Export your flashcards and learning data
• Withdraw consent to data processing
• Request a copy of your stored data
• Object to or restrict certain processing activities

To exercise these rights, please contact us through our contact form or in-app settings.

Changes to This Policy

We may update this Privacy Policy periodically. The latest version will always be available within the app and on our official website. Material changes will be communicated clearly through in-app notices, website banners, or email where appropriate.

Contact Us

If you have any questions or concerns about this Privacy Policy or how Deckbase handles your data, please reach out through our contact form.

Contact us