Flash My Cards is operated by Bluetec LLC ("we," "us," "our"). This policy explains how we handle your information when you use flashmycards.io and the Flash My Cards application.
What we collect
Account information
When you create an account we collect your email address and display name, handled through our authentication provider (Firebase Authentication). If you sign in with Google, we receive basic profile information from Google.
Content you give us
The PDFs and text you upload to generate decks, the flashcards we generate or you create, study history (how you rated cards, due dates), and reminder settings. This is the core of the service. We store it so we can show it back to you.
Payment information
Paid subscriptions are processed by Stripe. We never see or store your full card number. Stripe handles that. We store a subscription record (your tier, status, and Stripe customer ID) so we know what plan you’re on.
Usage and technical data
Basic logs (request timestamps, error reports, generation latency) used to keep the service running and debug problems. We use error-tracking (Sentry) and standard server logging.
How we use your information
- To provide the service: generate decks, run study mode, send reminders.
- To process payments and manage subscriptions.
- To send transactional emails you asked for (study reminders, account and security emails). You can turn reminders off anytime.
- To maintain, secure, and improve the service.
We do not sell your personal information. We don’t run advertising. Your notes are not a product we’re shopping around.
AI processing of your content
To generate flashcards, the text from your uploads is sent to our AI provider (Google Vertex AI, running Gemini) solely to produce your cards. We treat your content as your data, send it only to create what you asked for, and validate what comes back before storing it. We do not use your uploaded content to train our own models.
Service providers
We rely on a small set of reputable providers to operate, each handling only what they need to:
- Google (Firebase, Google Cloud, Vertex AI): authentication, hosting, file storage, AI generation.
- MongoDB Atlas: database storage for your account and decks.
- Stripe: payment processing and subscription management.
- Resend: delivery of reminder and account emails.
- Netlify: hosting of our websites.
- Sentry: error monitoring.
Data retention
We keep your data for as long as your account exists. When you delete a deck, its cards and the original uploaded file are removed. When you delete your account, we remove your decks, files, and account records and cancel any active subscription. Some minimal records may persist briefly in backups or where we’re legally required to retain them.
Your rights and choices
- Access / export: you can export your account data as a file from your account settings.
- Deletion: you can delete your account at any time from settings. It’s irreversible. That’s the point.
- Email preferences: turn study reminders off per deck, or unsubscribe directly from any reminder email.
- Depending on where you live, you may have additional rights under laws like the GDPR or CCPA. Contact us to exercise them.
Security
Data is encrypted in transit. Uploaded files are stored in private storage, never publicly accessible, and served only through short-lived links after we confirm you own the file. Secrets and keys are stored in a managed secret store, never in our code. No system is perfectly secure, but we take this seriously.
Younger users
Flash My Cards is built for students, and we know that audience skews young. The service is intended for users aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, contact us and we’ll remove it. If you’re under 18, please use the service with a parent or guardian’s involvement.
Cookies and local storage
We use minimal browser storage to keep you signed in and to remember preferences like your light/dark theme choice. We don’t use third-party advertising or tracking cookies.
Changes to this policy
We may update this policy as the product grows. When we make material changes, we’ll update the date above and, where appropriate, notify you. Continued use after changes means you accept the updated policy.
Contact
Questions about privacy? Email us at support@flashmycards.io.