Privacy Policy for MLCards

Last updated: November 14, 2025

Welcome to MLCards! We are committed to protecting your privacy and ensuring you have a positive experience while using our app. This Privacy Policy explains how we collect, use, and safeguard your information.

1. Information We Collect

1.1 Information You Provide

• Email Address: When you create an account using email authentication
• Google Profile Information: If you sign in with Google, we receive your name, email address, and profile picture
• Username and Profile Data: Any information you choose to add to your profile

1.2 Automatically Collected Information

• Learning Activity: Flashcards you view, flip, and bookmark
• Study Progress: Your learning statistics and progress tracking
• App Usage: Features you use and how you interact with the app
• Device Information: Device type, operating system version, and app version

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the MLCards service
• Authenticate your account and keep it secure
• Personalize your learning experience with the "For You" feed
• Track your study progress and statistics
• Improve our flashcard recommendations
• Send you important updates about the app (if you opt-in)
• Analyze app usage to improve features and performance
• Respond to your support requests and questions

3. Data Storage and Security

We take data security seriously:

• Secure Storage: All data is stored using Supabase, a secure PostgreSQL database platform
• Encryption: All data is encrypted in transit using HTTPS/TLS and at rest
• Authentication: We use industry-standard OAuth 2.0 for Google Sign-In and secure password hashing for email authentication
• Access Control: Only authorized personnel have access to our systems
• Regular Backups: Your data is regularly backed up to prevent loss

4. Third-Party Services

MLCards uses the following third-party services:

4.1 Supabase

• Used for: Database hosting, authentication, and backend services
• Privacy Policy: https://supabase.com/privacy

4.2 Google Sign-In

• Used for: OAuth authentication (optional login method)
• Privacy Policy: https://policies.google.com/privacy
• We only request basic profile information (name, email, profile picture)

4.3 OpenAI (Future Feature)

• Used for: AI chat assistant (coming in future update)
• Privacy Policy: https://openai.com/privacy
• Chat conversations will be processed to provide helpful responses

5. Data Sharing and Disclosure

We do NOT sell, rent, or trade your personal information to third parties. We only share data in these limited circumstances:

• Service Providers: With Supabase and other essential service providers who help us operate the app
• Legal Requirements: If required by law, court order, or government regulation
• Safety: To protect the rights, property, or safety of MLCards, our users, or others
• Business Transfer: In the event of a merger, acquisition, or sale of assets (users will be notified)

6. Your Rights and Choices

You have the following rights regarding your data:

6.1 Access and Export

• Request a copy of your personal data
• Export your bookmarks and study history

6.2 Correction

• Update your profile information at any time in the app
• Correct any inaccurate data

6.3 Data Deletion

You have full control over your data and can request deletion at any time. We offer two types of data deletion:

Timeline: Data deletion requests are processed within 30 days. You will receive a confirmation email once completed.

Note: Some data may be retained for legal or operational purposes (e.g., anonymized analytics), but all personally identifiable information will be permanently deleted.

6.4 Opt-Out

• Disable personalized recommendations (use Browse mode instead)
• Opt out of analytics (contact us)

7. Children's Privacy

MLCards is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately, and we will delete it.

8. International Users

MLCards is available worldwide. By using our app, you consent to the transfer and processing of your data in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

9. Cookies and Tracking

MLCards uses local storage on your device to:

• Keep you logged in
• Remember your preferences (dark mode, font size, etc.)
• Cache flashcards for faster loading

We do not use cookies for advertising or tracking purposes.

10. Data Retention

We retain your data for as long as your account is active or as needed to provide services. If you delete your account:

• Personal information is deleted within 30 days
• Anonymized usage statistics may be retained for analytics
• Backups containing your data are deleted within 90 days

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new Privacy Policy in the app
• Updating the "Last updated" date
• Sending an in-app notification for material changes

Continued use of MLCards after changes constitutes acceptance of the updated policy.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to say no to the sale of personal information (we don't sell data)
• Right to access your personal information
• Right to equal service and price (no discrimination)

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your data
• Right to rectification (correction)
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

Our lawful basis for processing your data is: consent, contract performance, and legitimate interests.

---

© 2025 MLCards. All rights reserved.
Master Machine Learning & Data Science with confidence and privacy.