Privacy Policy
NotionDeck is a language-learning and flashcard app with a learner's dictionary, translation, grammar help, AI-made cards, conversation practice and live speaking practice with Cuddle. This policy explains what data the app processes, why, who processes it for us, and how you can delete it.
Data we process
- Account: your email address and an account ID (Firebase Authentication). Passwords are handled by Firebase and never seen by us.
- Study data: decks, cards, study progress and statistics, learning-path and conversation progress, your chosen language and settings, stored in your account so they sync across devices.
- Content you give AI features: words you look up, text you translate, check or turn into cards, photos and PDF pages you choose for card generation, and what you write or say in conversation practice.
- Speaking with Cuddle: your voice during a talk (streamed live, not recorded or stored by us), the written transcript and feedback report of each talk, your speaking level and the short notes Cuddle keeps to remember you (for example your interests), and the first name you give Cuddle, if any. Transcripts, reports and notes are stored in your account. Topics, texts and links you use to make a talk are stored with the talk you made, also after you remove it from your list, so we can improve the ready-made talks; they are deleted with your account.
- Books: the text of books you add in Reading, stored in your account.
- Purchases: credit packs you buy (product, date, store transaction ID) and your credit balance. Payment details are handled by Apple or Google and never seen by us.
- Uploads: card images and audio, Anki packages and PDFs/photos for card generation. Packages and PDFs/photos are deleted after they are read.
- Usage records: how many AI actions your account used each day and month, to apply fair-use limits, and for each AI request the feature, its size and cost (not its content), kept for 180 days to price credits.
- Notion (optional): if you connect Notion, your Notion name, email, avatar and workspace details, an encrypted access token, and the databases you choose to share.
- Reports: problems you report in dictionary entries or lessons.
AI processing (OpenAI and Google Gemini)
AI features are provided by OpenAI and Google (Gemini). The first time you use one, the app asks for your permission. When you use them, the content you enter for that feature (for example a word, a paragraph, a photo or PDF page, or a conversation line) is sent to OpenAI to create the answer. Speaking with Cuddle uses Google Gemini: your voice is streamed to Gemini during the talk, together with the talk's instructions (the topic, your level, the first name you gave, and Cuddle's notes about you); the transcript is sent to Gemini for the feedback report; and a topic, text or link you choose to make a talk is sent to Gemini, which may open the link. We do not send your email or account details to either provider. Under OpenAI's API terms and Google's paid Gemini API terms, this data is not used to train their models and is kept by them only for a limited period for abuse monitoring. You can turn AI features off at any time in Settings → AI allowance; studying and saved content keep working.
Microphone, speech and camera
The microphone is used only while you speak: in conversation practice, your speech is turned into text by your device's speech service; in Speaking with Cuddle, your voice is streamed to Google Gemini as described above and is not recorded by us. The camera and photo library are used only when you choose a photo to make cards. Nothing is recorded or accessed in the background.
Service providers
- Google Firebase (authentication, database, file storage, hosting, servers).
- OpenAI (AI features, as described above).
- Google Gemini (Speaking with Cuddle, as described above).
- RevenueCat, Apple App Store and Google Play (purchases of credit packs; RevenueCat receives your account ID).
- Notion (only if you connect it).
- Wiktionary/Wikimedia, Free Dictionary API and Unsplash (the words you look up, to show dictionary entries, recordings and pictures).
- Our own read-aloud server, a rented server that turns dialogue lines into speech (it receives only the line's text).
- Expo (app updates).
We do not sell your data, show ads, or track you across other apps and websites.
Public dictionary website
The dictionary website can be used without an account. Words you search for there are processed the same way, and your IP address is used briefly to apply daily limits.
Retention and deletion
Your data is kept while your account exists. You can delete your account at any time in the app: Settings → Delete Account. This permanently deletes your account, study data, uploads, talks and speaking notes, usage records, credit balance, the Notion connection and leaderboard entries from our servers. We keep the store transaction IDs of past purchases, with the account ID they were credited to, to handle refunds and disputes. Server logs, which can include your account ID, are deleted automatically after 30 days. You can also ask us to delete your data by emailing the address below. Data on your device is removed when you sign out or delete the account in the app.
Children
NotionDeck is not directed at children under 13, and we do not knowingly collect data from them.
Your rights
Depending on where you live (for example under the UK or EU GDPR), you can ask to access, correct, export or delete your data, or object to its processing. Contact us and we will reply within 30 days.
Changes
If this policy changes, we will update the date above and, for important changes, tell you in the app.
Contact
MISA LUNA LIMITED, United Kingdom. Privacy questions: plab2appdev@gmail.com.