Privacy Policy for FLASH - Smart Study Cards

Last Updated: January 15, 2025

Introduction

4Sight Education Ltd ("we," "our," or "us") operates the FLASH - Smart Study Cards mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

By using FLASH, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide Directly

When you use FLASH, you may provide us with:

• Account Information: Email address, username, and password when you create an account
• Educational Information: Your exam type (GCSE, A-Level, etc.), exam board, and selected subjects
• Study Content: Flashcards you create, including questions and answers
• Voice Recordings: Temporary audio recordings when using the voice answer feature (processed immediately and not stored)
• Images: Photos you upload for the image-to-flashcard feature (processed and not retained in original form)
• API Keys: Your personal OpenAI API key (stored securely on your device only)

Information Collected Automatically

When you use our App, we automatically collect:

• Usage Data: Study patterns, flashcard interactions, and feature usage
• Device Information: Device type, operating system, and app version
• Performance Data: App crashes, errors, and performance metrics

Information We Do NOT Collect

• We do NOT collect location data
• We do NOT access your contacts
• We do NOT collect financial information (all payments for API usage go directly to OpenAI)

How We Use Your Information

We use the collected information to:

1. Provide Core Services

• Create and manage your account
• Store and organize your flashcards
• Track your study progress using the Leitner box system
• Generate AI-powered flashcards based on your curriculum

2. Improve User Experience

• Personalize your study recommendations
• Remember your subject selections and preferences
• Optimize app performance

3. Ensure Security

• Authenticate users and prevent unauthorized access
• Detect and prevent fraudulent activities

Data Storage and Security

Where Your Data is Stored

• User Data: Stored securely in Supabase cloud infrastructure
• API Keys: Stored locally on your device using secure storage
• Voice/Image Processing: Processed in real-time and not permanently stored

Security Measures

We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Encrypted password storage
• Secure authentication tokens
• Regular security audits

Third-Party Services

FLASH integrates with the following third-party services:

Supabase

• Purpose: Database and authentication
• Data Shared: Account information, flashcards, study progress
• Privacy Policy: https://supabase.com/privacy

OpenAI (User-Provided API)

• Purpose: AI-powered features (card generation, voice assessment)
• Data Shared: Text content for processing, temporary voice transcriptions
• Note: You use your own API key; we don't have access to your OpenAI account
• Privacy Policy: https://openai.com/privacy

Expo

• Purpose: App development and updates
• Data Shared: Anonymous app performance metrics
• Privacy Policy: https://expo.io/privacy

Data Sharing and Disclosure

We do NOT sell, trade, or rent your personal information. We may share your information only in these circumstances:

1. With Your Consent: When you explicitly agree to share
2. Legal Requirements: To comply with legal obligations or court orders
3. Protection: To protect our rights, privacy, safety, or property
4. Business Transfers: In connection with a merger or acquisition (users will be notified)

Your Rights and Choices

You have the right to:

1. Access Your Data: View all information we have about you
2. Update Information: Correct any inaccurate data
3. Delete Your Account: Remove your account and associated data
4. Export Your Data: Download your flashcards and study progress
5. Opt-Out: Disable specific features like voice assessment

To exercise these rights, contact us at privacy@4sighteducation.com

Children's Privacy

FLASH is designed for students aged 13 and above. We do not knowingly collect information from children under 13. If we discover we have collected information from a child under 13, we will delete it immediately.

Data Retention

We retain your data as long as your account is active. You may delete your account at any time through the app settings. After account deletion:

• Personal data is removed within 30 days
• Anonymized usage statistics may be retained for analysis

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the app
• Updating the "Last Updated" date
• Sending an email notification for significant changes

Contact Us

Additional Rights for EU/UK Residents

If you are located in the EU or UK, you have additional rights under GDPR including:

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

California Residents

California residents have specific rights under CCPA. To exercise these rights, please contact us using the information above.

---

By using FLASH, you acknowledge that you have read and understood this Privacy Policy.