Privacy Policy

Last updated: 14 February 2026

ATPLCards ("we", "our", "the app") is a flashcard application for ATPL exam preparation. We take your privacy seriously and collect only what is necessary to provide the service.

1. Information We Collect

Account information. When you sign in with Apple or Google, we receive your name, email address, and a unique user identifier provided by the sign-in service. If you use Sign in with Apple's email-hiding feature, we only receive your relay email address.

Study data. Your flashcard review history, ratings, and progress are stored to power the spaced repetition algorithm and sync across your devices.

User-created content. Any cards you create within the app are stored in your account.

We do not collect:

• Location data
• Contacts or phone data
• Device identifiers for advertising
• Browsing or search history

2. How We Use Your Information

• To provide and maintain the app, including syncing your study progress across devices
• To schedule flashcard reviews using the FSRS spaced repetition algorithm
• To authenticate your identity when you sign in

3. Data Storage and Security

Your data is stored locally on your device and, when you sign in, synced to our backend hosted on Supabase (cloud infrastructure). Data is encrypted in transit (TLS) and at rest. Row-level security ensures you can only access your own data.

4. Third-Party Services

We use the following third-party services:

• Supabase — authentication and cloud database
• Apple Sign In / Google Sign In — authentication only

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Data Retention

Your data is retained for as long as your account is active. If you delete your account, your data will be permanently removed from our servers within 30 days.

6. Your Rights

You can:

• Request a copy of your data
• Request deletion of your account and all associated data
• Withdraw consent at any time by deleting your account

7. Children's Privacy

ATPLCards is not directed at children under 16. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

9. Contact

If you have questions about this privacy policy or your data, contact us at [email protected].