Privacy Policy

Last updated: November 12, 2026

This policy explains what data the FlowCard app (iOS and Android) collects, why, who it is shared with, and how you can exercise your rights. We only collect the data needed to run and improve the app.

1. Who is responsible for your data

2. Data we collect

Account

• Email address, name and profile photo if provided, and account identifier when you sign in with email, Apple or Google.
• If you create an account with a password, it is handled by Firebase Authentication: we never have access to it in plain text.

Content you add or create

• Documents, PDFs, photos, camera scans and text you import, including from other apps through the Share button.
• What the app generates for you: flashcard decks, quizzes, revision sheets, mind maps, slide decks, audio podcasts, mock exams, plus your progress and results.
• Social features you use: friends, invitations, shared folders, polls and votes.
• Feedback and messages you send us from the app or by email.

Subscription and purchases

• Subscription status, purchase history and transaction identifiers. Payment is handled by Apple (App Store) or Google (Google Play); we never receive your payment card details.

Technical and usage data

• Device model, OS and app version, language, IP address, app technical identifiers, push notification token.
• Usage events (screens viewed, features used, time spent, technical errors) and anonymized recordings of in-app interactions used to improve usability.
• Advertising attribution data (for example, the campaign through which you found the app). On iOS, the advertising identifier (IDFA) is only used if you allow it in the "App Tracking Transparency" prompt.

We do not sell your personal data and we do not use it to show ads in the app.

3. Device permissions

FlowCard only asks for a permission when you use the related feature. You can revoke it at any time in your phone settings; only that feature will stop working.

• Camera: to scan your notes. Images are only used to create the content you request.
• Photos: the app only accesses the images you pick in the photo picker, never your whole library.
• Notifications: to let you know, for example, when a deck is ready.
• App Tracking (iOS): to measure the effectiveness of our ad campaigns. Declining has no effect on the app's features.

FlowCard does not access your contacts, location or microphone.

4. Why we use it

5. AI processing

• To generate your study material, the text and images of the documents you import are sent to Google's Gemini API. The voice of audio podcasts is also produced by Gemini.
• This data is used only to produce the result you requested. We do not use it to profile you or for advertising.
• Processing is automated, but it does not produce any decision with legal or similarly significant effects on you.
• Avoid importing documents containing sensitive information (health, banking details, ID documents, etc.) about you or other people.

6. Data sharing

Technical service providers

We rely on providers for hosting, storage, authentication, performance and usage analytics, error reports and AI generation. They process data only on our behalf and according to our instructions.

In-app purchases and refunds

We use RevenueCat, Inc. to manage subscriptions. When you request a refund from Apple, information related to your purchase (your use of the app, content viewed and subscription status) may be shared with Apple through RevenueCat to help Apple process your request.

Sharing you choose

When you add a friend, join a shared folder or answer a poll, your name, profile photo and the content you share are visible to the people involved. Nothing is made public without action on your part.

Other cases

• Authorities: where required by law or to respond to a lawful request.
• Business transfers: in the event of a merger, acquisition or sale, data may be transferred to the acquirer, who will remain bound by this policy.

Each provider applies its own privacy policy and is committed to protecting your data.

7. International transfers

Evan Labs, LLC and several providers are located in the United States. These transfers rely on the EU–U.S. Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.

8. Retention

• Account data and content: for as long as your account exists. They are deleted when you delete your account.
• Usage and attribution data: according to each provider's retention settings, up to 26 months.
• Support messages: for as long as needed to handle your request, then up to 3 years.
• Purchase data: for the periods required by law (accounting and tax obligations).

Some data may be kept longer where required by law or to respond to a request from an authority. Copies may remain briefly in technical backups before being erased.

9. Deleting your account

You can delete your account at any time in the app's settings, using the Delete account button. Your profile, library and content are then deleted from our servers. You can also email us at evancaprara.dev@icloud.com. Remember to cancel your subscription in your App Store or Google Play settings: deleting your account does not cancel it automatically.

10. Your rights

Depending on applicable law (including the GDPR and U.S. state privacy laws), you may request access to, correction, deletion or portability of your data, restrict its processing, or object to processing based on legitimate interest. You can withdraw consent at any time (notifications and ad tracking in your device settings). Email us at evancaprara.dev@icloud.com; we reply within one month. You may also lodge a complaint with your local data protection authority.

11. Children

FlowCard is not directed to children under 13. In some countries (for example France, under 15), parental consent is required to use the app. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Security

Data is encrypted in transit (HTTPS) and stored with hosting providers that encrypt it at rest. Server-side access rules limit your content to your account and the people you share it with. We apply reasonable measures to protect your data, but no system is perfectly secure, so we cannot guarantee absolute security.

13. Use of the service

FlowCard is a study aid. AI-generated content may contain errors or inaccuracies: check it against your course material, it does not replace a teacher. You remain responsible for the documents you import and how you use the app; make sure you have the right to use any documents you share with others.

14. Changes

We may update this policy. The latest version is always available on this page, dated at the top. For significant changes, we will notify you in the app. Continuing to use FlowCard after an update means you accept the new version.

15. Contact

For any question about this policy or your data: evancaprara.dev@icloud.com.