Privacy policy

Flashcard RPG is operated by FLASHCARD RPG PTY LTD (ACN 701 026 413, ABN 15 701 026 413), which is the data controller responsible for your personal information.

Registered Address: Se17, 89-97 Jones St, Ultimo NSW 2007, Australia.

Contact: support@flashcardrpg.com

Personal Information: Name, email address, username, and profile information you provide when creating an account.

Game Data: Your progress, scores, flashcard sets, party memberships, and in-game achievements.

Technical Information: Device information, IP address, browser type, and usage analytics to improve our service.

Payment Information: Billing details for subscription and gem purchases (processed securely through third-party payment providers).

How We Collect It: Most information comes directly from you as you use the app. If you sign in with Google or Apple, we receive your name and email address from that provider rather than from you.

Service Provision: To provide and maintain Flashcard RPG, including user accounts, game features, and customer support.

Communication: To send you important updates, notifications about your account, and respond to your inquiries.

Improvement: To analyze usage patterns and improve our app's features, performance, and user experience.

Personalization: To customize your learning experience and recommend relevant content.

Fair Play and Security: To detect and investigate cheating, exploits, fraud, and other misuse of the Service, and to enforce our Terms. This includes reviewing gameplay and account activity where we suspect a breach.

We do not sell your personal information. We may share information only in these limited circumstances:

Hosting: Your account, decks, and game data are stored with Supabase, which provides our database, authentication, and file storage. Our primary database is located in Tokyo, Japan.

Service Providers: We also rely on Anthropic (AI flashcard generation), RevenueCat (subscription management), Sentry (crash reporting), Expo (push notifications), and Google and Apple (sign-in). These providers may store or process your information in the United States and in other countries where they operate.

Overseas Disclosure: This means your personal information is disclosed outside Australia. Before doing so we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles.

Active Accounts: We keep your personal information for as long as your account remains open.

After Deletion: When you delete your account, your personal information and game data are removed from our live systems. We may retain limited records where the law requires it, such as transaction records kept for tax purposes.

Backups: Copies may persist in encrypted backups for a short period before they are overwritten.

Encryption: All data transmission is encrypted using industry-standard SSL/TLS protocols.

Secure Storage: Your data is stored on secure servers with restricted access and regular security audits.

Payment Security: Payment information is processed by PCI-compliant third-party providers and never stored on our servers.

Access Controls: Only authorized personnel have access to user data, and all access is logged and monitored.

Notifiable Data Breaches: If a breach of your personal information is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

EU and UK Users: Where required, we will also notify the relevant supervisory authority within 72 hours of becoming aware of a breach.

AI Generation: When you ask us to, we use AI to generate flashcard content from material you provide. You choose when this happens, and you can edit or delete anything it produces.

Cheat Detection: We use automated checks to detect cheating and exploits. If those checks lead to action on your account, you can contest it by emailing us and a person will review the decision.

No Other Automated Decisions: Apart from the above, we do not use automated decision-making or profiling to make decisions that significantly affect your rights or interests.

You have the right to:

Age Requirement: Flashcard RPG is designed for users 13 years and older.

Parental Consent: Users under 18 should have parental permission before using our service.

COPPA Compliance: We do not knowingly collect personal information from children under 13.

Parental Controls: Parents can contact us to review, modify, or delete their child's information.

GDPR Compliance: For EU users, we comply with the General Data Protection Regulation.

Data Transfers: Your data may be processed in countries outside your residence, with appropriate safeguards in place.

Legal Basis: We process your data based on consent, contract performance, or our legitimate interests — including our legitimate interest in keeping the game fair and secure for everyone.

How to Complain: If you believe we have mishandled your personal information, email us at support@flashcardrpg.com. We will acknowledge your complaint promptly and aim to respond within 30 days.

Escalation in Australia: If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Escalation in the EU and UK: You may also lodge a complaint with your local data protection supervisory authority.

If you have questions about this Privacy Policy or your data, please contact us:

Email: support@flashcardrpg.com

Website: www.flashcardrpg.com/privacy

Notification: We will notify you of significant changes to this Privacy Policy via email or in-app notification.

Effective Date: Changes become effective 30 days after notification, unless immediate changes are required by law.

Continued Use: Your continued use of Flashcard RPG after policy updates constitutes acceptance of the new terms.