YOUR LEARNING STAYS YOURS
Privacy.
A clear look at what Flashcard.today stores, why we need it, and the choices you have.
Last updated: November 7, 2026
Sign in with Apple
When you use Sign in with Apple, we verify your identity with Apple and store an app-specific Apple identifier linked to your Flashcard.today account. We do not request your name or email address for this sign-in. We store encrypted authorization credentials to support account access and revocation. Apple may notify us when you revoke access or delete your Apple Account. Deleting your Flashcard.today account removes its linked Apple identities; an encrypted revocation request may remain for up to seven days so we can retry revoking Apple authorization. Administrator email sign-in remains separate.
Who is responsible for your information
Flashcard.today is operated from the Netherlands. We are responsible for deciding how personal information is used to provide this service. You can contact us about privacy or exercise your data rights using the email address below. The same privacy protections apply to free and paid accounts.
Service availability, free-plan limits and future paid plans are explained separately in our Terms of Service.
What we store
We record the Terms of Service and Privacy Policy versions you accept or acknowledge, and the time of that action, on your account. These records are removed when your account is deleted.
When you use the app, we store your sign-in identity, email address if provided, verification status, optional name, timezone, appearance and color preferences, decks, cards, and practice history on the Flashcard.today server. We also store the device label supplied during sign-in and records needed to manage your sign-in sessions, including your last successful login, successful email-login count, last authenticated API use, and the latest app version and build reported by your app. We also store announcement recipients and signed-in dismissal records to deliver relevant messages and respect your dismissal choices.
Website requests and app connections can produce technical records such as an IP address, browser or device information, request times, and error or security events. Our hosting and network providers process these records to deliver and protect the service.
Why we use it
We use your information to send sign-in codes, authenticate your account, save and retrieve your learning library, calculate practice progress, and apply your preferences. We process this information to provide the service you request.
We also use limited technical information to prevent abuse, enforce sign-in limits, diagnose failures, and keep the service secure. This supports our legitimate interest in operating a reliable service. We do not sell your personal data or use your cards for advertising.
Connected AI assistants
Flashcard.today offers an optional AI flashcard connection through Model Context Protocol (MCP). You can connect ChatGPT to your own account to manage text flashcards and practice in a conversation. You sign in with your Flashcard.today email and approve the connection; this does not give you or the assistant access to the administrator dashboard.
A connected assistant can request your decks and card text, including answers. If you approve additional permissions, it can create, edit and delete decks and cards, and record or undo practice results. Practice results require confirmation. The assistant receives the content and results returned by the tools it uses, including relevant practice information.
The AI provider processes information shared through the connection under its own privacy terms and account settings. Connecting is your choice; you can use the iPhone and iPad app without an AI connection. Disconnecting prevents further access through that connection but does not remove information already shared with the AI provider.
We store connection details, approved permissions, access and refresh tokens, and authorization records to secure assistant access. We also store retry receipts to prevent duplicate changes. These receipts can include deck names, card text and the results of changes, and remain until you delete your account. Disconnecting revokes the connection credentials; it does not delete your flashcards or retry receipts.
Dictionary lookups
Dictionary searches are handled by our backend using FreeDictionaryAPI.com. We send the word or phrase you enter, its language and any requested translation option to that provider. We do not attach your account email, sign-in token, decks or practice history. The provider receives our server’s network request and may process it under its own privacy practices.
We keep a shared server-side cache of dictionary results to avoid repeating requests. It is not an account-linked search history. Results normally expire after one day and empty results after five minutes; expired entries in our database cache are scheduled for daily cleanup. Dictionary content comes from Wiktionary and carries source and licence information, which must accompany its use.
Separately from the shared cache, we record dictionary searches linked to your account: the submitted word or phrase, word language, translation option, search time, and whether a definition was found or the lookup was temporarily unavailable. The service administrator can view these records to understand dictionary usage and investigate coverage or reliability problems. We do not store provider error messages or full dictionary responses in your search history. Records are visible for 90 days and older records are scheduled for daily deletion. Deleting your account also deletes its search history from the active database.
Administrator access
The service administrator can view account preferences, activity and assistant-connection status, decks, card text and practice history in the protected administrator dashboard to support users and operate the service. We also record the time of your last authenticated MCP request.
The services behind the app
Laravel Cloud hosts our application and database. Mailtrap delivers sign-in emails and processes the recipient address, message contents, and delivery information. Cloudflare provides DNS and, where enabled, network and security services. Sentry processes the filtered backend error diagnostics described below.
These providers process information needed to supply their services. Processing locations can differ from your country, including locations outside the European Economic Area. Where data protection law requires safeguards for a transfer, these may include an applicable adequacy decision or approved contractual safeguards. Contact us for information about the safeguards relevant to your data. Provider privacy information is linked below; those policies do not replace our own responsibilities:
Your library is not public. App access is authenticated and scoped to your account. Administrator access is described above.
On your device and in your browser
The iPhone and iPad app keeps its sign-in token and expiry in the device Keychain. The server remains the source of your library and preferences. App versions supporting offline practice also keep a protected, session-specific copy of downloaded cards, account details, practice history and pending practice results on your device. This copy survives app restarts, is excluded from backups and iCloud, and is removed on sign-out. Answers sync when the app has a connection; pending answers must sync before sign-out. Editing and account changes require an internet connection. The app does not import an earlier local or iCloud library.
The website uses essential cookies for sessions and protection against forged requests, including administrator sign-in, assistant email verification and consent, and announcement dismissal within a browser session. If the administrator selects “Remember me”, an additional essential sign-in cookie remembers that browser for seven days; signing out revokes remembered access. An optional appearance-preference cookie remembers your System, Light or Dark choice for up to one year and is shared between the public site and administrator pages. Hosting and security services may also use essential cookies. We do not add advertising pixels or cross-site tracking to the app or website.
Email delivery history
We keep email delivery metadata for 30 days to troubleshoot sign-in email problems: recipient address, email type, attempt and acceptance times, delivery status, and a limited failure category. The administrator can inspect this history, including emails sent before an account was created. This history does not contain login codes, message bodies, SMTP credentials or raw provider error messages. Acceptance means the mail service accepted the message, not that it reached the inbox. Account deletion removes matching email history from the active database.
Error diagnostics
We use Sentry to diagnose backend errors. Reports contain technical details such as exception types, stack locations, release/environment information, API version and app version. Before submission, we remove raw exception messages, request bodies, headers, cookies, query strings, user identifiers, uploaded content and stack variables. Tracing, profiling, session replay and application-log collection are not enabled.
Future paid plans
We may introduce optional premium features or paid plans. The free plan will not automatically become a paid subscription. Before introducing payment processing, we will explain the payment provider, the information shared with it, why that information is needed and any relevant retention requirements. A separate purchase flow will show the price and billing conditions before you choose to pay.
How long we keep information
We keep account information, your library, practice history and preferences while your account is active and the information is needed to provide the service. You can delete your content or account using the app. Connection retry receipts have the separate retention described above. Sign-in codes expire after ten minutes; expired code records are scheduled for daily cleanup after an additional day. App sign-in tokens expire after 90 days unless revoked sooner.
Deleting your account removes its library, reviews, tokens, and sign-in challenges from the active database. Operational logs, diagnostics and provider records have separate retention settings. Retention depends on their purpose, configured rotation or expiry, security investigation needs and applicable legal obligations. Infrastructure backups may contain earlier data until they expire under the hosting service’s backup schedule; deleting the active account does not instantly erase backup copies. Contact us for the current retention information relevant to your request.
Your choices
You can edit your account preferences in Profile, import a file you select, export your library and preferences as JSON, delete decks and cards, sign out, or permanently delete your account in the app’s Profile screen. Selected Anki packages are converted to text cards; images and audio are excluded. Import receipts contain a content hash and counts to prevent duplicate imports; the uploaded file itself is not retained.
Depending on the law that applies to you, you may also request access to or a copy of your data, correction, deletion, restriction, portability, or object to certain processing. You can raise a concern with your local data protection authority. We may need to verify that a request comes from the account holder.
For privacy questions or data requests, contact Flashcard.today at hello@flashcard.today.
Changes to this page
We will update this page when our practices change and revise the date above. Material changes will be explained through the service where appropriate.