Privacy Policy

Last updated 27 September 2026

Your decks, your cards and your study history stay on your phone. The app creates an account for you automatically so it can count your AI allowance; you can sign in with Google if you want that account to follow you to another phone. This page explains what leaves the phone, and why.

What stays on your device

Your decks, folders and cards; what you have answered and when; your streak and daily goal; and your settings. None of it is uploaded to Esora or readable by us. Uninstalling the app deletes it, and nothing we hold can restore it.

The one exception is backup, which you switch on yourself: it copies your decks and cards to your own Google Drive. The file is yours, visible in your Drive, and the app can reach only the files it created there. We never receive it.

Your account

On first launch the app signs in anonymously with Firebase Authentication, a Google service. That gives you an account identifier — a random string, not tied to your name or your phone — and it is how your allowance is counted.

Signing in with Google is optional and links that same account to your Google identity, so a new phone finds your plan and your backups. When you do, we receive the email address of the account you chose. We use it to recognise you and to contact you about your account; we do not add it to a mailing list, because there is no mailing list.

What we receive, and when

Only when you ask the app to make cards, or when it checks your remaining allowance:

WhatWhy
Your account identifier So the allowance, the free trial and your plan belong to someone. It is not your advertising ID and not your phone number.
What you type, or the photo you take The topic, word or picture you hand to the card generator, plus the deck's two languages and how many cards you asked for.
The words already in that deck Sent with the request so the generator does not hand you words you already have. Only the words themselves, and only from the deck you are adding to.
Your IP address Seen by our server the way it is by every site you visit. It is stored with your account and used to spot automated abuse of the free allowance.

What we store, and for how long

We do not store what you type, the photos you send, or the cards that come back. What we keep is this:

RecordKept
Your account identifier, your plan, your IP address, when the account was created, and when your free AI trial began Until you delete your account
Your email address, if you signed in with Google. Held by Firebase Authentication rather than in our own database Until you delete your account
Your remaining allowance and when it renews Until you delete your account
One line per generation: which model, how many tokens, how long it took, whether it worked, and the error if it did not — never the words themselves. A failure message can occasionally quote a fragment of the model's own reply Up to 24 months, for cost and abuse investigation, or until you delete your account
If our abuse thresholds are crossed: the account identifier and IP address involved, and what was tripped Up to 12 months, including after the account is deleted
That an account was deleted, and when, identified only by a one-way hash of its identifier. Nothing in it names you Kept, so we can confirm a deletion happened if asked

Who else sees it

We do not sell data. There are no advertising networks, no analytics SDKs and no third-party trackers in the app.

What we never collect

No name, no phone number, no contacts, no calendar, no location, no microphone. No advertising identifier. No list of the other apps on your phone. The camera and photo library are used only for the picture you choose to hand to the generator, and only at that moment. We ask for an email address only if you choose to sign in.

Deleting your account

In the app: open Settings → Delete account. It takes effect straight away. If you signed in with Google, you will be asked to choose that Google account again to confirm it is you.

What is deleted: your account, plan, remaining allowance and generation history from our database, and your sign-in — including your email address — from Firebase Authentication.

What is not:

If you subscribe: cancel in Google Play first. The app will not delete an account with an active subscription, because deleting the account would not stop the payments.

Without the app: email support@adeckie.com from the Google address you signed in with, and we will delete the account within 30 days. If you never signed in, we have no email address to match, so we cannot tell which account is yours: delete it from the app before you uninstall.

Children

Adeckie is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child's data is held, write to us and we will delete it.

Where you live

The app is available worldwide and our servers are operated by Supabase. Data may be processed in a country other than your own.

If you are in the European Economic Area or the United Kingdom: we process your account, allowance and generation records to provide the service you asked for, and your IP address and abuse records in our legitimate interest of keeping a free allowance from being abused. You have the right to access, correct, delete, export and object to the processing of your data, and to complain to your local supervisory authority. Write to us and we will act.

If you are in California: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and you have the right to know what we hold and to have it deleted.

Wherever you are, the same request works: email us and we will delete what we hold.

Changes

If this policy changes in a way that affects you, the date at the top changes and the new version appears here before it takes effect.

Who we are

Esora, publisher of Adeckie. Questions about this policy or your data: support@adeckie.com.