Language notice: this is an English translation for convenience. If it differs from the original Russian policy, the Russian text prevails.
Summary
- The app has no advertising, third-party trackers or product analytics SDKs. A limited service activity marker is stored to operate your account, as described below.
- The website uses Yandex Metrica to measure visits and app-store clicks.
- We do not sell your data.
- You can delete your account and associated data at any time.
Data processed by the app
Account data. You register with email or sign in with Google on Android or Apple on iOS. We process your email address; Google may provide an account identifier, name and profile picture; Apple may provide an identifier and, if you choose, your name. Passwords are processed by Firebase Authentication and are not available to us in plain text.
Learning data. Card progress, spaced-repetition state, favourites and consent records are stored locally and synchronised with your account.
Purchases and subscriptions. If you subscribe to Premium, Apple (App Store) processes the payment: we do not receive your card or payment details. Our server receives subscription information from Apple: transaction and subscription identifiers, plan, start and end dates, status (active, expired or refunded), offer type (trial or promo code), and a technical identifier linking the subscription to your account (stored as an irreversible hash). This information is needed to enable and disable Premium and to restore purchases on another device. We do not see the promo code you enter in Apple’s window: Apple only tells us about the applied offer.
Your cards and edits. Cards you create are not added to shared decks and are not visible to other users. The text of cards you create is stored in your account in Cloud Firestore and synchronised between your devices; it is not visible to other users. A correction to a ready-made card may be used in anonymised form to find and fix errors, and may remain in a shared deck after account deletion.
Technical data. Google Firebase infrastructure may process IP addresses, device identifiers and request times to operate and secure the service.
Service activity marker. For a signed-in user, the app writes a document to Cloud Firestore at users/{uid}/meta/activity, with the lastActiveAt field holding the server time of the last successful update when the app starts, returns to the foreground or the user signs in. This marker is used to measure the number of active users (DAU) and monitor the service’s operation. Each device (app instance) writes it no more than once per hour. This is not a study log: the field contains no card text, screen history or user action history, and is not created through Firebase Analytics.
Text-to-speech. Before the first spoken playback, the app asks for separate consent. After consent, the English text of the selected card is sent to the speech synthesis provider selected in the device’s system settings. The provider processes the text under its own rules and may use the network depending on the device settings. The app stores only the version number of the accepted speech notice; it does not store the card text, user identifier or consent time together with it.
Data processed by the website
The website uses Yandex Metrica, including click maps, link tracking and Webvisor. It may receive an IP address, device and browser information, referral source, viewed pages, approximate location and interactions on the page. We use this information to understand website performance and visits to the App Store and Google Play.
Metrica code runs only on the published website domain. The support form does not send data to our server; it prepares an email and opens your email client. Data reaches us only after you send that email.
Yandex processing is governed by the Yandex Privacy Policy. You can limit analytics through browser settings or tracker blocking without losing access to the website.
Why data is processed
- to sign you in and operate your account;
- to save and synchronise progress, including offline use;
- to protect the service and prevent abuse;
- to make a limited assessment of service activity using the latest hourly marker, without an action log;
- to fix errors in ready-made decks using anonymised corrections;
- to speak the selected English text after consent;
- to measure website visits and app-store clicks.
Service providers
Google Firebase services — Firebase Authentication and Cloud Firestore — are used for authentication, storage and synchronisation, including the users/{uid}/meta/activity document and the lastActiveAt field. Google processes data on our behalf under the Google Privacy Policy.
When text-to-speech is enabled, the card text is received by the system speech synthesis provider selected on the device; its operator and processing terms depend on the device and system settings.
Yandex Metrica provides website analytics. The app has no connected advertising partners or product analytics SDKs. This policy will be updated before the set of services changes.
Retention and deletion
Account and learning data are kept while the account exists. Delete them in the app through Settings → Delete account or follow the web deletion instructions. Authentication data, Cloud Firestore data and local data on the device are deleted; deletion cannot be undone. Deleting your account does not cancel an App Store subscription — you can manage and cancel it in Apple settings. After account deletion, we temporarily retain technical purchase records received from Apple: transaction and notification information (as hashes), the unlinked subscription and a record of the previous link. These records are needed to prevent one subscription from being assigned to multiple accounts and to resolve disputes. They do not contain your email address, name or card content. Retention is up to 180 days for real purchases and up to 30 days for test purchases; records of promo code use are kept for up to 30 days. The records are deleted when the retention period ends.
Your rights
You can request access, correction or deletion of your data and withdraw consent where applicable. You can delete data yourself or contact support.
Children
The app is not intended for children under 13. Where the local age of independent consent is higher, a parent or legal guardian must consent. Contact us if you believe a child has provided data so that we can delete it.
Security
Authentication and cloud storage are provided through Firebase, and data in transit is encrypted. No method of transmission or storage is completely secure.
Changes
The latest policy is always published at this address with its update date. Use of the app is also governed by the Terms of Use.
Contact
The app developer and data controller is Maksim Shalotenko. For privacy questions, email easy.peasy.msh@gmail.com.