Your data, explained plainly.

Information we collect

• Account information — your username, and an email address if you choose to add one. Used for sign-in, password resets, and email verification.
• Content you create — the decks and flashcards you add, including the text on each card.
• Study activity — session timestamps and duration, your Hard/Good/Easy ratings, and mastery scores, used to power spaced repetition and your stats page.
• Login & security records — the IP address and time of each login. If you delete your account, we keep a minimal record (username, email, join date, deletion date, IP address) for security and abuse prevention.
• Timezone — detected automatically from your browser so session times and reminder emails match your local time. You can override this manually any time from Profile → Notifications.
• Cookies & local storage — a session cookie and CSRF token to keep you signed in and your account secure, plus a theme and timezone preference stored locally in your browser. We don't use cookies for advertising.

How we use this information

• To run the core product — scheduling cards, showing your stats, and keeping you signed in.
• To send transactional email (sign-up verification, password reset, email change confirmation) and, if you opt in, study reminder emails at the time you choose.
• To detect suspicious logins and prevent abuse of the service.
• To understand aggregate usage of the app so we can improve it.

Third parties we use

• Resend — delivers the emails described above on our behalf; your email address and message content pass through their systems for that purpose.
• Google Analytics — helps us understand how people use the app. Google may set its own cookies; see Google's Privacy Policy.
• Railway — hosts our application and database.

We do not sell your personal information, and we do not share it with anyone for advertising purposes.

How long we keep your data

We keep your account data for as long as your account exists. If you delete your account, your decks, cards, and study history are deleted; we retain only the minimal security record described above, for as long as needed for security and legal purposes.

Your choices

• Update your email or password, or delete your account entirely, from Profile → Account.
• Turn email reminders on or off, or change their schedule, from Profile → Notifications.
• Override your auto-detected timezone from the same page.

Depending on where you live, you may have additional rights — such as the right to access, correct, or export your data — under laws like the GDPR or California's CCPA. Contact us below to make a request.

Security

Passwords are stored using one-way hashing and never in plain text. The site is served over HTTPS. No method of transmission or storage is 100% secure, but we take reasonable steps to protect your information.

Children's privacy

Quick Recall is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy as the product changes. We'll update the date at the top of this page whenever we do.

Contact

Questions about this policy or your data? Email us at alantester696@gmail.com.