Request access to your data
You decide what happens with your data. Under the EU General Data Protection Regulation (GDPR) you have the rights listed below. Making a request is free of charge.
Your rights under the GDPR
- Access (Art. 15)
- Find out whether we process data about you and receive a copy of it.
- Rectification (Art. 16)
- Have incorrect data corrected, for example your profile name.
- Erasure (Art. 17)
- Have your data deleted. For your whole account, deleting it in the app is the fastest way.
- Restriction (Art. 18)
- Have processing paused, for example while the accuracy of your data is checked.
- Data portability (Art. 20)
- Receive the data you provided in a machine-readable format (JSON).
- Objection (Art. 21)
- Object to processing that is based on our legitimate interests.
Tip: the app can export your whole library as a file at any time, in Profile → Data → Export library.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77), for example the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte).
What we store
Without an account, your library stays on your device and we store nothing about you. With an account (Sign in with Apple), we store:
| Category | Data |
|---|---|
| Contact details | Email address from Sign in with Apple (can be a private relay address) |
| Name | Profile name shown to your study partners |
| Your content | Topics, cards, card images, voice memos and their transcripts |
| Study data | Progress, reviews, and the activity you share with study partners |
| Identifiers | Account ID, sessions, and installations used for sync |
| Purchases | Status of your Flashcards Plus subscription (Apple processes the payment) |
| Usage | How often you used AI features and what it cost us |
Details, purposes, and legal bases are in the privacy policy.
Make a request
Choose your request and enter the email address of your account. We send a confirmation link to that address so that nobody else can request your data.
Only want to delete your account? Follow the steps on Delete your account.
What happens next
- You receive an email with a confirmation link that is valid for 48 hours.
- After you confirm, we check that the request belongs to your account. If we need more details, we ask you by email.
- We complete the request within one month and tell you the result. For complex requests the period can be extended by two months; we tell you if that happens and why.