Privacy Policy

Last Updated: September 6, 2026

FlashQuest ("FlashQuest," "we," "our," or "us") is a flashcard and study app with AI-powered deck creation, spaced repetition, timed quizzes, real-time multiplayer battles, social features, and a community deck library. This policy explains what information FlashQuest collects, how it is used, and how you can control it.

Guest Mode vs. Signed-In Mode

FlashQuest can be used without creating a registered account. Core guest decks, study progress, and preferences are stored on your device. Connected features are different: if you choose an AI, community, referral, notification, support, or multiplayer feature, the data needed for that feature may be sent to our service providers even before you register. FlashQuest identifies this transmission in the app and asks for any required consent before sending AI content.

When you create an account and sign in, certain data is synced to our servers to enable cloud backup, cross-device sync, social features, multiplayer, community deck publishing, and leaderboards. A temporary guest workspace may be transferred to the registered account so that the starter deck, nickname, and onboarding progress are not lost.

Information We Collect

Depending on whether you use a guest or registered account and which features you choose, we may collect the following:

Account information

• Email address (for account creation and authentication)
• Display name and username (visible to other users on leaderboards, friend lists, and published decks)
• Authentication data from Apple Sign In or email-based login

Before FlashQuest starts an account request, it asks for birth month and year to check whether the person is at least 13. If the result is under 13, the exact month and year stay on the device only for that check and are not sent to FlashQuest; the device retains only the month when eligibility can be checked again. For an eligible signed-in account, birth month and year are stored privately to enforce age-appropriate account and Community access. They are not displayed to other users.

Subscriptions and AI credits

If you view, purchase, or restore FlashQuest Pro, Apple and RevenueCat process the purchase information needed to provide the subscription. FlashQuest and RevenueCat associate purchase history, product and transaction identifiers, subscription status, renewal or expiry dates, and refund or cancellation information with your FlashQuest account identifier. We use this information to validate purchases, restore access, prevent fraud, provide support, and understand subscription performance. Apple handles payment details; FlashQuest does not receive your payment card number.

FlashQuest also records AI credit reservations, usage and confirmed failure refunds to enforce your allowance and avoid duplicate charges. Subscription processing and credit accounting are necessary to provide these features and are separate from optional product analytics. Purchase history is linked to your account; we do not use it to track you across other companies' apps or websites for advertising.

Study content

• Flashcard content, deck names, descriptions, and categories
• Text, notes, images, or documents submitted for AI-powered flashcard generation
• Decks published to the community library

Study progress and activity

• Study session results, scores, streaks, and XP
• Spaced repetition scheduling data
• Leaderboard rankings and statistics

Social and multiplayer data

• Friend connections and friend requests
• Challenge invitations and results
• Arena battle room participation, scores, and round-by-round activity

Device and notification data

• Push notification tokens (used to deliver friend requests, challenge invitations, streak reminders, and deck moderation notices)
• Device platform (iOS/Android)

Optional analytics

• App usage events and feature interactions, if you have opted in
• Crash reports and diagnostics

App update delivery

FlashQuest automatically checks Expo's update service for compatible maintenance updates when the app starts. These operational requests may include your IP address, an installation identifier, device platform, app runtime and update identifiers, and limited update or startup failure diagnostics. They help deliver the correct update, avoid incompatible or failed updates, and restore a working version. Update checks also run in guest mode and are separate from optional product analytics and Sentry crash reports. They do not require a FlashQuest account.

How We Use Information

• Create and manage your account
• Validate and restore subscriptions, account for AI credits, and support billing enquiries
• Provide study modes, spaced repetition, and progression features
• Generate flashcards using AI-powered tools
• Enable friends, challenges, and leaderboard features
• Operate real-time multiplayer Arena battles
• Operate the community deck library
• Send push notifications you have opted into
• Monitor app stability and diagnose issues
• Moderate community content and enforce our Terms of Service
• Respond to support and privacy requests

AI-Powered Features

When you choose an AI feature, including deck creation, note/image/document import, answer-distractor generation, hints, or explanations, the content needed for that request may be processed by third-party AI service providers. Before the first transmission, FlashQuest presents an in-app disclosure and asks for consent. Declining consent keeps the content from being sent to the AI service. You can review or change this choice in Settings > Data & Privacy.

Community Decks

When you publish a deck to the community library, your username, deck name, description, category, and card content become visible to all FlashQuest users. You can unpublish your decks at any time from the Explore screen.

Other users can report published decks for inappropriate content, spam, copied content, or inaccuracy. Decks that receive multiple reports may be automatically hidden and the author notified.

Multiplayer and Arena

Arena battles require server-side processing to manage room state, synchronize questions, track scores, and determine results in real time. Room data, player names, scores, and battle outcomes are processed during the session and stored for battle history.

Push Notifications

FlashQuest may send push notifications for friend requests, accepted requests, challenge invitations, challenge results, streak reminders, and deck moderation notices. You can manage notification permissions in your device settings or in the app's Settings screen.

Optional Analytics

FlashQuest collects optional product analytics and sends Sentry crash/diagnostic reports only if you opt in. You are asked during onboarding and can change this at any time in Settings > Data & Privacy. When enabled, this optional telemetry is limited to allowlisted operational fields and should not include raw search text, discussion content, AI responses, or raw AI parsing errors. When disabled, optional analytics and Sentry crash reporting are not sent. The operational app update requests described above still occur.

Sharing of Information

We do not sell personal information. We share information only with service providers that help operate FlashQuest:

• Supabase (cloud hosting, database, authentication)
• Apple (App Store purchase processing and subscription management)
• RevenueCat (purchase validation, subscription access and billing analytics; RevenueCat Privacy Policy)
• Third-party AI providers (deck generation, only when you initiate it)
• Sentry (crash reporting, only when opted in)
• Mixpanel (analytics, only when opted in)
• Expo (push notification and app update delivery, including the operational update information described above)

Your username, display name, and published deck content are visible to other FlashQuest users through social features and the community library.

Publishing also makes the deck and publisher identity accessible through community web pages and sharing previews. Unlisted links may be forwarded by recipients. Unpublishing or deleting your account does not remotely erase independent copies previously saved on other users' devices; contact us about unlawful content or a privacy concern involving a shared copy.

If you submit a copyright complaint or appeal, we process the contact information, disputed-content identifiers, statements, and supporting evidence you send to assess and resolve it. We may share the relevant allegations and evidence with the affected publisher or claimant when needed to respond fairly, and disclose information where legally required. We do not routinely publish complaint contact details. These records are retained only as needed for moderation, dispute resolution, or legal obligations. Do not include unrelated sensitive information.

Data Retention

We retain account and study data for as long as your account is active. A deletion request may remain pending while FlashQuest removes stored files, revokes a linked Apple authorization credential when one is available, and completes bounded retries. After deletion is confirmed, we may retain limited records as necessary for abuse prevention, moderation enforcement, fraud prevention, legal compliance, and dispute resolution. Retained records are not used for product features or marketing.

Account Deletion

You can request account deletion directly in the app: Profile > Account > Delete Account. The app shows the request status while the service removes the account's stored files and related account data. FlashQuest does not present deletion as complete, clear the local workspace, or sign you out until the service confirms completion. If a deletion attempt cannot finish, the app reports that state so it can be retried or escalated rather than claiming that the data is gone.

If you cannot access the app, you can request account deletion by emailing privacy@flashquest.net with the email address or username associated with your account.

Your Choices

• Use FlashQuest in guest mode without creating an account
• Delete your account in the app (Profile > Account > Delete Account)
• Disable optional analytics in Settings > Data & Privacy
• Manage push notifications in device settings or the app
• Unpublish decks from the community library
• Remove friends and decline friend requests
• Contact us at privacy@flashquest.net

Children's Privacy

FlashQuest accounts and connected features are not directed to children under 13 and are limited to people age 13 or older. Local-only guest study can remain available without creating an account or using connected services. FlashQuest uses a neutral age screen before account authentication or AI use. An under-13 result blocks account and connected features without transmitting or retaining the submitted birth month and year; only a conservative local recheck date is kept. If an existing account is identified as under 13, processing is limited to eligibility verification, support, and protected deletion; cloud sync, AI, push, analytics, and social features are stopped while the app presents the account-deletion process. We do not knowingly retain personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us so we can restrict and delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date above.

Contact

General support: support@flashquest.net

Privacy questions or deletion requests: privacy@flashquest.net