Flashcards Cymraeg

Privacy Policy

Last Updated: 19th July 2025

We are committed to protecting your privacy and being transparent about how we collect, use, and protect your personal information. This Privacy Policy explains our practices regarding your data when you use our flashcard application.

Information We Collect

Account Information

  • Login Details: We collect your username or email address and securely store your password using industry-standard encryption methods. Your password is never stored in plain text and is protected using advanced hashing algorithms.
  • OAuth Authentication: If you choose to log in using Google OAuth2, we only receive basic profile information necessary for account creation and authentication.

User-Generated Content

  • Flashcards: All flashcard content you create is stored securely in our database and remains private to your account. Your flashcards are never shared with other users or third parties.
  • Images: Any images you upload for flashcard creation are processed temporarily to extract information but are never permanently stored on our servers.

How We Use Your Information

Account Management

  • To create and maintain your user account
  • To authenticate your access to the service
  • To provide customer support when requested

Communication

  • Account-Related Emails: We may send essential communications about your account, security updates, or service changes
  • Update Notifications: Occasional notifications about app updates or new features (you can opt out of these at any time)
  • We will never send promotional emails from third parties or sell your email address

Content Moderation

Images uploaded to our service are automatically reviewed using Google Gemini AI to ensure they comply with our community guidelines. This automated review checks for content that may be:

  • Sexually suggestive or explicit
  • Harmful to minors
  • Promoting hate, harassment, or violence
  • Containing dangerous or illegal content
  • Toxic, profane, or inappropriate

If you believe an image has been incorrectly flagged, you can contact our support team for manual review.

Data Security and Protection

Password Security

Your account credentials are protected using enterprise-grade security measures. Passwords are encrypted using secure hashing algorithms and are never accessible to our staff.

Payment Processing

All payments are processed through trusted third-party services (Stripe or LemonSqueezy). We do not store your payment information on our servers.

Data Storage

  • Your flashcard content is stored securely in our database with appropriate access controls
  • All data transmission is encrypted using HTTPS
  • We implement regular security audits and updates to protect your information

Cookies and Tracking

We use only essential cookies necessary for the functioning of our service:

  • Session cookies to maintain your login state
  • Authentication cookies for secure access
  • We do not use third-party tracking cookies or analytics cookies

Data Sharing and Third Parties

We do not sell, trade, or otherwise transfer your personal information to third parties except:

  • Google Gemini: Images are processed through Google's AI service for content moderation purposes only
  • Payment Processors: Transaction information is shared with Stripe or LemonSqueezy solely for payment processing
  • Legal Requirements: We may disclose information if required by law or to protect our rights and safety

Important Security Recommendations

While we implement strong security measures, we recommend:

  • Avoid Sensitive Information: Do not include passwords, social security numbers, financial information, or other sensitive personal data in your flashcards
  • Use Strong Passwords: Create unique, strong passwords for your account
  • Log Out Safely: Always log out when using shared or public devices

Data Retention and Deletion

Your Control

  • You can delete your flashcards at any time from within the app
  • You can request deletion of your entire account by contacting support
  • Deleted data is immediately removed from our active database

Complete Removal

Once you delete information:

  • It is permanently removed from our database
  • It will be removed from all backups at the earliest opportunity
  • We cannot recover deleted content

Your Rights

You have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Delete your account and associated data
  • Opt out of non-essential communications
  • Request information about how your data is processed

Contact Information

If you have questions about this Privacy Policy, need to report incorrectly flagged content, or wish to exercise your privacy rights, please contact us at:

Email: [Your Support Email]

Response Time: We aim to respond to all privacy-related inquiries within 48 hours

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending an email notification to your registered email address
  • Displaying a prominent notice within the app

Your continued use of our service after any changes indicates your acceptance of the updated Privacy Policy.

Compliance

This Privacy Policy is designed to comply with applicable privacy laws including GDPR, CCPA, and other relevant regulations. We are committed to protecting your privacy rights regardless of your location.