QuackDeck — Privacy Policy
Last updated: 26 April 2026
QuackDeck ("the app", "we", "our", "us") is a flashcard app published by Fun Stuff Studio. We've built QuackDeck as a local-first app: by default, what you create stays on your device. This policy explains what data we handle, why we handle it, and the choices you have.
If you have any questions, email us at contact@funstuff.studio.
1. Summary
- Without an account, QuackDeck stores everything on your device only. We never see your decks, cards, study history, photos, or recordings.
- If you sign in and turn on sync through the Pro plan, your study data and any media you attach are stored on our backend, Supabase, so you can use QuackDeck across multiple devices.
- We do not use analytics, advertising, tracking, or crash-reporting SDKs. We do not sell or share your personal data.
- We ask for camera, photo library, and microphone access only so you can attach media to your flashcards. The app never opens these in the background.
2. Information We Collect
2.1 Information stored only on your device
When you use QuackDeck without signing in, the following stays on your device and is never transmitted to us:
- Decks, cards, tags, and any text you type
- Photos, audio recordings, and other media you attach to cards
- Study history, including ratings, due dates, and intervals
- App preferences, including theme, accent color, notification schedule, and layout settings
This data lives in the app's local database, SQLite. Uninstalling the app deletes it.
2.2 Information collected if you create an account
If you choose to sign in with Google to enable cross-device sync, we receive and store, through our backend provider Supabase:
- Your email address, name, and Google account identifier as provided by Google Sign-In
- Your decks, cards, study history, and media, synchronized to your account so they can be restored on another device
- A subscription status flag indicating whether your Pro entitlement is active
You can use the app without signing in. Signing in is optional.
2.3 In-app purchases
If you subscribe to QuackDeck Pro, the purchase is handled entirely by Apple's App Store or Google Play. We do not see or store your payment card details. We receive only the purchase receipt and product identifier needed to verify your subscription.
2.4 Notifications
QuackDeck schedules local reminders on your device using the operating system's notification service. We do not operate a push-notification server, and we do not see when or whether your device shows a reminder.
2.5 Information we do not collect
We do not collect:
- Location data
- Contacts
- Browsing history
- Advertising identifiers
- Crash logs or telemetry
- Analytics events
3. Permissions We Request and Why
| Permission | Why we ask | When we use it |
|---|---|---|
| Camera | To take a photo and attach it to a flashcard. | Only after you tap the camera button inside a card editor. |
| Photos / Photo library | To pick an existing image from your gallery and attach it to a flashcard. | Only after you tap the image-picker button. |
| Microphone | To record an audio clip and attach it to a flashcard. | Only after you tap the record button. |
| Notifications | To deliver the study reminders you schedule inside the app. | Only at the times you configure. |
You can deny or revoke any of these permissions in your device settings. The rest of the app will continue to work.
4. How We Use Your Information
We use the information described above only to:
- Run the app's core features, including decks, reviews, and media attachments.
- Synchronize your data across your devices if you sign in.
- Confirm whether your Pro subscription is active if you subscribe.
- Reply to you if you contact us at the support email.
We do not use your data for advertising, profiling, or training machine-learning models.
5. Sharing and Third Parties
We share data only with the service providers strictly required to run the app:
- Google Sign-In — if you choose to sign in, Google handles the authentication step and provides us with the identifiers described above. See Google's privacy policy.
- Supabase, Inc. — our backend host. If you sign in, your synchronized data and uploaded media are stored on Supabase infrastructure. See Supabase's privacy policy.
- Apple App Store and Google Play — these services process subscription payments and provide receipts.
We do not sell, rent, or share your personal information with advertisers or data brokers.
We may disclose information if required by law, legal process, or to protect the rights, safety, or property of Fun Stuff Studio, our users, or others.
6. Data Retention
- Local data is retained on your device until you delete the relevant deck, card, or attachment, or until you uninstall the app.
- Synchronized data for Pro users is retained for as long as your account exists.
- If you delete your account, we delete your synced decks, cards, reviews, and uploaded media within 30 days, except where we are legally required to retain certain records, such as billing receipts.
- Your account record is retained until you request deletion.
7. Your Rights and Choices
You have the following choices, regardless of where you live:
- Use the app without an account. No account, no server-side data.
- Stop syncing. Sign out from inside the app to stop syncing further changes.
- Delete your account and synced data. Email contact@funstuff.studio from the address associated with your account, and we will delete your synced data within 30 days.
- Export your data. Email us and we will provide a copy of your synced data in a portable format.
If you are in the European Economic Area, the United Kingdom, or Switzerland, GDPR and UK GDPR may give you additional rights to access, correct, restrict, or object to processing of your personal data, and to lodge a complaint with your local data-protection authority. Our lawful bases for processing are performance of the contract you enter into when you create an account, your consent for optional features, and our legitimate interests in keeping the app secure and functional.
If you are in California, the CCPA/CPRA gives you the right to know, delete, correct, and limit the sharing of your personal information. We do not sell your personal information and we do not share it for cross-context behavioral advertising.
8. Security
We protect your data with industry-standard measures:
- Authentication tokens are stored in your device's secure keystore, such as iOS Keychain or Android Keystore.
- Network requests use HTTPS with TLS.
- Backend access is restricted by row-level security so each account can only read its own rows.
No system is perfectly secure. If we ever experience a data incident that affects you, we will notify you as required by applicable law.
9. International Transfers
Our backend, Supabase, and authentication provider, Google, may store and process data outside your country, including in the United States. By using the synchronized features of QuackDeck, you understand that your data may be transferred to and processed in jurisdictions with different data-protection laws than your own. Where required, we rely on standard contractual clauses and other lawful transfer mechanisms.
10. Children's Privacy
QuackDeck is intended for users 13 years of age and older, or 16 in jurisdictions where that is the applicable digital-consent age. We do not knowingly collect personal information from children below that age. If you believe a child has provided us with information, email contact@funstuff.studio and we will delete it.
11. Changes to This Policy
We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of this page and, for material changes, surface a notice inside the app the next time you open it. Continued use of the app after changes take effect means you accept the updated policy.
12. Contact
Fun Stuff Studio
Email: contact@funstuff.studio
For questions about this policy, requests to access or delete your data, or any privacy concern, please email us at the address above. We aim to respond within 14 days.