Inkword Flashcards

Privacy Policy

Effective date: July 25, 2026

This Privacy Policy explains how Inkword Flashcards (“Inkword,” “we,” “us”) collects, uses, and shares information when you use our mobile app and this website. It is written in plain language as a starting point — not legal advice.

Information we collect

  • Account data: email address and name when you create or sign in to an account (for example via Google sign-in).
  • Content you submit: photos or text you scan, words and phrases you select, native-language preference, and flashcards or decks you create.
  • Usage and entitlement data: scan counts for the daily free quota, subscription status, and app events needed to run the product.
  • Device information: basic technical data such as device type and app version, used to keep the service reliable.

How we use your information

  • To provide the core product: read text from the page you scan, generate flashcards for the words and phrases you select, schedule them for review, and sync your decks when you are signed in.
  • To enforce the free tier's library limit and Pro entitlements. Scanning and reviewing are not metered.
  • To process subscriptions and restore purchases.
  • To respond to support requests you send us.
  • To improve reliability and understand how the product is used (for example product analytics).

Third-party processors we use

We use the following services to operate Inkword Flashcards. Each processes data only as needed for its role:

  • Supabase — authentication and database. Processes account data (email, name / auth identity) and your app content (scans, phrases, flashcards, decks) stored for your account.
  • OpenAI API — language-model inference. Processes the words and phrases you select, together with the sentence each one appeared in, to generate flashcard explanations in your language. Scanning alone sends nothing: the page stays on your device unless you choose words from it. Do not submit content you are not comfortable sending to this processor.
  • RevenueCat — subscription and purchase management. Processes purchase receipts, subscription status, and identifiers needed to update your Pro entitlement.
  • Our server hosting provider — operates the machines our API runs on. Handles the same data in transit and in server logs, never as a separate consumer of your content. We will name the provider on request.
  • PostHog — product analytics on this website only. Receives anonymous page and click events with a random identifier that is discarded when you leave the page; it is never given your email, your account, or anything you scan. The Inkword app itself sends no analytics.

Legal bases and sharing

We share data with the processors above to provide the service you request. We do not sell your personal information. We may disclose information if required by law or to protect the rights, safety, and integrity of Inkword and our users.

Data retention

We keep account and content data while your account is active and as needed to provide the service. You can delete your account and everything in it from inside the app — Profile → Delete account. It removes your decks, cards and scans along with the account itself, and the same email and password no longer sign in. Backup and legal retention windows may apply for a limited time after deletion.

Children

Inkword Flashcards is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children.

Your choices

  • You can use limited free features without a paid subscription.
  • You can sign out, or delete your account outright, from Profile inside the app.
  • You can manage or cancel a subscription in your Apple ID subscription settings.

International transfers

Inkword's servers are in the United States (Northern Virginia), and the processors listed above are United States companies. If you use Inkword from outside the United States, your data is transferred there and processed there.

For users in the European Economic Area, the United Kingdom and Switzerland, that is a transfer to a third country. Where a recipient is certified under the EU–U.S. Data Privacy Framework, the transfer relies on the European Commission's adequacy decision of 10 July 2023; where it is not, it relies on the European Commission's Standard Contractual Clauses. Write to us at the address below and we will tell you which applies to a given processor and send you a copy of the clauses.

Changes

We may update this policy from time to time. The effective date at the top will change when we do. Continued use of the service after an update means you accept the revised policy.

Contact

Questions about privacy? Email us at [email protected] (placeholder — replace with your real support address before store submission).