Privacy Policy

1. Who we are

Looflash is responsible for the processing of personal data described in this policy. You can contact us about privacy at any time at contact@looflash.com.

2. Data on your device

Your flashcards, notes, tags, learning progress, settings and downloaded audio are stored on your device. We do not keep a copy. When a feature needs your words, for example to find saved pronunciations or to create practice questions, only those words are sent, and our server does not store them.

If cloud sync is turned on on your device, this data is also synced through your own cloud account. Your device platform provider handles it under its own privacy policy. We cannot access it.

3. Data processed when you use online features

Anonymous identifier

When the App first connects to our server, for example to download pronunciations or to use an AI feature, our server creates a random identifier and a session key. The key is stored only on your device. It is not linked to your name, your email address or any advertising identifier. We use it only to apply daily limits and to let you continue a conversation with the AI assistant.

App verification

Each request includes a token that shows it comes from a genuine copy of the App on a real device. The App also checks whether an update is required. For these purposes, our verification provider may process a technical installation identifier, the App and system versions, and your device's language and region. This information does not identify you.

AI features

When you use an AI feature, the App sends what the request needs:

• your message, or a word and its definition;
• words and definitions from your flashcards, to create practice questions from your own words, and your answers to them;
• the languages of your flashcards;
• the names of your existing tags, so the assistant can reuse them;
• a reference to the previous answer, so a conversation can continue.

Our server passes this to our AI provider and returns the answer. It does not store the content. The AI provider keeps the content for up to 30 days, for example to continue a conversation and to prevent abuse. It does not use it to train its models.

Read-aloud

To create audio, the word or text you want to hear is sent to our AI provider. To find audio that already exists, the App sends the words of your flashcards to our server; they are not stored. Audio for flashcard words and phrases is kept in a shared cache that all users can use. It is not linked to you. Audio for longer texts is not stored on our server.

Usage counters

To apply daily limits, our server counts the number of requests and the amount of text processed, per anonymous identifier and per day. It also keeps reference numbers of AI answers, so that only you can continue your own conversation. These records do not contain any content.

Technical data

Our hosting provider processes your IP address and technical details of each request. It uses them to deliver requests, block attacks and fix errors. This data is kept in short-lived logs.

4. Why we process data

• To provide the features you ask for. This is necessary to provide the service.
• To apply daily limits and keep the service available and affordable. This is our legitimate interest.
• To protect the service from abuse and attacks. This is our legitimate interest.
• To check whether the App needs an update. This is our legitimate interest.

Data is collected automatically through the App. We do not make automated decisions about you that have legal or similarly significant effects.

5. Who processes data with us

We work with a small number of service providers. They process data on our behalf and only to provide their service:

• a hosting provider for our server and storage;
• an AI provider for answers and audio;
• an app verification and configuration provider;
• your device platform's cloud sync, for your own flashcards.

These providers may be located in other countries, including countries outside your own. Where required, these transfers are protected by appropriate safeguards, such as standard contractual clauses. We do not share your data with anyone else unless the law requires it.

6. How long data is kept

• Content of AI and read-aloud requests: not stored on our server; kept by our AI provider for up to 30 days.
• Daily usage counters: deleted automatically after 3 days.
• References to AI answers: deleted automatically after 30 days.
• Technical logs: a few days.
• Shared audio for flashcard words and phrases: kept while the service runs; not linked to anyone.
• Data on your device and in your cloud account: until you delete it.

We keep data longer only if the law requires it.

7. What we do not do

• We do not show ads.
• We do not track you across apps or websites, and we do not use the advertising identifier.
• We do not use analytics or profiling tools.
• We do not sell or rent your data, and we do not share it for advertising.

8. Your rights

Depending on where you live, you may have the right to:

• find out whether we process your data, and get access to it or a copy of it;
• have incorrect data corrected;
• have your data deleted;
• restrict processing or object to it;
• receive your data in a portable format;
• find out who your data has been shared with;
• complain to a data protection authority.

You can delete your data yourself:

• On your device: In the App, go to Settings and choose Erase All Content and Settings. You can also delete the App.
• In your cloud account: In your device settings, open your account's cloud storage, select Looflash and delete its data.
• On our server: We cannot link server records to you. They are deleted automatically within the periods listed above.

To use your rights or to ask a question, write to contact@looflash.com. We will reply free of charge within 30 days. Because we do not know who you are, we may ask for information to find the relevant records. We will never ask for more than we need.

9. Children

The App is not intended for children under 13, and we do not knowingly collect their personal data. If you think a child has given us personal data, please contact us and we will delete it.

10. Security

All connections between the App and our server are encrypted. Our server accepts requests only from verified copies of the App. The session key is stored in your device's secure storage. Only our server can access our storage. No system is completely secure, but we protect your data with appropriate measures.

11. Changes

We will update this policy when we change how the App processes data. We will publish the new version on this page with a new date. We will also announce important changes in the App.

12. Contact

For privacy questions or requests, write to us at contact@looflash.com.