Privacy Policy
1. Files Handled by the App
Excel import, FlashCard creation, editing and saving, and PowerPoint shuffle processing are performed on your device. The contents of Excel and PowerPoint files are not uploaded to our backend for these operations. If you use system file selection, saving, or sharing features, those operations use services provided by your device platform.
2. Information We Collect
We may collect or generate the following information as needed to provide free usage limits, optional email linking, purchases, purchase restoration, and subscription management. Registration, sign-in, and an email address are not required to purchase or restore purchases.
- Your normalized email address if you choose optional email linking
- One-time password hashes and records of issue time, expiration, use, attempt count, and originating IP address if you choose optional email linking
- Installation identifier, device identifier, device name, platform, and app version
- A hashed device fingerprint, usage date, usage count, action type, and IP address used to enforce free limits
- Subscription status, product and entitlement identifiers, purchase and expiration dates, and purchase events received from RevenueCat
- Diagnostic logs used for troubleshooting and security
3. Information Stored on Your Device
The installation identifier and RevenueCat user identifier are stored on your device. If you choose optional email linking, the verified email address, access token, and rotating refresh token are also stored using secure operating-system storage. Our backend stores a hash of the refresh token rather than the raw refresh token.
4. How We Use Information
We use this information for optional email linking and maintaining linked sessions, sharing purchase status across supported devices, checking subscriptions, restoring purchases, enforcing free usage limits, preventing abuse and excessive OTP requests, customer support, troubleshooting, and compliance with applicable app store requirements. We do not sell personal information or use it for third-party advertising.
5. Payments and Subscriptions
Payments are processed by the app store from which you obtained the app. We do not collect or store credit card numbers. RevenueCat receives purchase, renewal, cancellation, and related events from the app store to manage subscription status for the app.
6. Third-Party Services
We use RevenueCat for subscription management, AWS for the API, database, email delivery, and logs, and the applicable app store operator for payment and distribution. Each provider processes information under its own terms and privacy policy.
7. Data Retention
Authentication, device, usage, and subscription records are retained as necessary to operate the service, resolve purchase issues, prevent abuse, and comply with legal or platform requirements. Expired OTP records become eligible for deletion after the limited operational period for which they are needed.
8. Access, Correction, and Deletion
If you use optional email linking, you can delete your FlashCard account, with re-verification when needed, by selecting Delete Account from the app menu. Deletion removes your email address, signed-in devices, authentication information, and the association with account data managed by us. If you cannot use the app, you may request deletion by contacting c.yao@maiasoft.co.jp.
Deleting your account does not cancel or refund an app store subscription. If a subscription is active, cancel it in the applicable store before deleting the account. Certain records managed by payment providers, including purchase records, may be retained for fraud prevention, legal compliance, purchase disputes, or platform obligations.
9. Security
We use reasonable safeguards, including TLS transport, secure operating-system storage, token hashing and rotation, authentication rate limits, and restricted backend access. No transmission or storage method can be guaranteed completely secure.
10. Children
The app is not directed to children below the age at which parental consent is required by applicable law. Contact us at c.yao@maiasoft.co.jp if you believe a child has provided personal information.
11. International Processing
Information may be processed outside Japan or your country of residence in locations where we or our service providers operate.
12. Changes
If this policy is updated, the revised content and effective date will be provided in the app or on its listing page.
13. Contact
For privacy questions, contact c.yao@maiasoft.co.jp.