Flashy

Privacy Policy

Effective: June 7, 2026

This policy describes how Flashy ("the app") collects, uses, and protects your information. Flashy is operated as an independent project; the developer ("we", "us") is responsible for the processing described below. By using the app you agree to the practices in this policy.

1. Information We Collect

We collect the minimum amount of information needed to run the app:

We do not collect device identifiers, location data, contacts, photos, microphone or camera data, advertising identifiers, or behavioural analytics. There are no third-party advertising or tracking SDKs in the app.

2. How We Use Your Information

We do not sell, rent, or trade your personal information. We do not use your content to train any machine-learning model.

3. How We Store and Protect Your Information

Your account information and content are stored with Supabase, a backend platform running on Amazon Web Services. Data is encrypted while it travels to and from our servers and while it sits in storage.

Strict access controls keep your data tied to your account only. Your decks, cards, and settings can only be read by you, not by other users and not by accident.

4. Third-Party Services

The app uses one third-party service: Supabase (database and authentication). When you sign up, sign in, or sync, your data is transmitted to Supabase on our behalf. Supabase processes this data under their own privacy policy, available at supabase.com/privacy.

5. Your Rights and Choices

If you reside in the EU, UK, California, or another jurisdiction with applicable privacy laws, you also have rights under those laws (for example, the right to object, the right to restrict processing, and the right to lodge a complaint with a supervisory authority). You can exercise any of these rights by contacting us at the email above.

6. Data Retention

We retain your account and content for as long as your account is active. If you request deletion, your account and content are removed within 30 days. Encrypted backups maintained by our infrastructure provider may persist for a short retention window (typically up to 30 days) before being permanently overwritten.

7. Children's Privacy

Flashy is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

8. International Data Transfers

Your information may be processed in countries other than your own, including the United States, where our infrastructure provider is based. Where required by law, we rely on appropriate safeguards for such transfers.

9. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you in the app or by email before the changes take effect. The "Effective" date at the top reflects the most recent revision.

10. Contact

For any privacy question or request, email us at .