Privacy Policy

Last updated: 28 September 2026

Flash is a local-first app. Your decks, cards and review history are stored on your device and are never sent to us. There is no account to create. The only data that leaves your phone is what Apple and RevenueCat need to process a purchase, described below.

The short version

We do not run a server for Flash. Nothing you study is uploaded, synced or analysed by us.
No account, no email, no password. We cannot identify you.
No analytics, no advertising, no tracking. Flash contains no analytics SDK and no ad SDK.
Purchases go through Apple. We never see your payment details. RevenueCat, our subscription provider, receives an anonymous identifier and your purchase receipt so the app knows what you own.

Who we are

Flash is made by AlleyApp, a company registered in the Netherlands (KVK 75853663). For the purposes of the General Data Protection Regulation (GDPR), AlleyApp is the data controller for the limited personal data described in this policy. You can reach us at contact@fyvit.com.

What Flash keeps on your device

Everything Flash needs lives in a database inside the app's private storage on your device:

your decks and cards, including any hints, examples, tags and personal notes you write;
your review history — each answer you give, when you gave it, and the scheduling state the app derives from it;
your settings, such as reminder time, appearance and whether typed answers are on;
a record of your subscription status, cached so the app works without a network connection.

This data does not leave your device unless you move it, for example through a device backup (see Backups and new phones). We have no access to it and cannot recover it for you.

What leaves your device

Flash makes network requests to exactly two parties, and only for purchases:

Apple, through the App Store's in-app purchase system, when you buy or restore a subscription. Apple's handling of that data is described in Apple's Privacy Policy.
RevenueCat, which manages your Flash Unlimited subscription status on our behalf. Their Privacy Policy can be viewed here.

Flash does not contain analytics, crash-reporting, advertising or social SDKs. It does not read your contacts, location, photos, or anything outside its own storage.

Purchases and subscriptions

Flash offers an optional paid tier, Flash Unlimited, as a monthly or yearly subscription. Payment is processed entirely by Apple; we do not store or collect your payment card details.

To know whether your device is entitled to Unlimited, the app talks to RevenueCat. RevenueCat receives:

an anonymous app user identifier that RevenueCat generates on your device — it is not linked to your name, email or Apple ID;
your App Store purchase receipt and the transactions in it, so the purchase can be validated and restored on another device signed in to the same Apple ID;
ordinary request metadata: device model, operating system version, app version, locale and IP address.

We use this to unlock what you paid for and to see aggregate subscription figures. We do not use it to identify or contact you, and we do not sell it.

Reminders, speech and imported files

Reminders. If you turn on a daily review reminder, Flash schedules a local notification on your device. No push server is involved and nothing is sent anywhere.

Pronunciation. Hearing a card read aloud uses your device's own speech synthesis. The text is handed to the operating system, not to us; whether it is processed on the device or by Apple depends on the voice you have installed and is governed by Apple's policies.

Imported decks. Anki packages and spreadsheets you import are read on your device and written into Flash's local database. The file is never uploaded.

Backups and new phones

Because Flash keeps its data in your device's standard app storage, it is included in the backups you already control — iCloud Backup and computer backups — if you have them turned on. Restoring a device from such a backup brings your decks and history with it. Those backups are made by Apple on your behalf and are covered by Apple's privacy policy, not ours.

Your subscription belongs to your Apple ID rather than to a device. On a new phone, Restore purchases in the app recovers it.

Retention and deletion

Your study data stays on your device until you delete it. Deleting a deck removes it; deleting the app removes everything. We hold no copy.

Purchase data held by RevenueCat is retained for as long as needed to honour your subscription and to meet accounting obligations. You can ask us to have it deleted; see Your rights.

Legal basis (GDPR)

We process purchase-related data because it is necessary to perform the contract you enter into when you buy Flash Unlimited (Article 6(1)(b) GDPR), and to comply with legal obligations such as bookkeeping (Article 6(1)(c)). We do not process any other personal data, and we do not rely on consent or legitimate interest for anything in Flash.

Your rights

Under the GDPR you may ask to access, correct, delete or receive a copy of personal data we hold about you, and to object to or restrict its processing. In practice:

For study data, you already have full control: it is on your device, and the app lets you edit, export by re-import elsewhere, or delete it.
For purchase data, write to contact@fyvit.com. Because we cannot identify you ourselves, we will ask you for the anonymous identifier shown in the app's Settings, or for your App Store order details, so that we can locate the record with RevenueCat.

You also have the right to lodge a complaint with a supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens.

Children's privacy

Flash is not directed at children under 13, and because it collects no personal data beyond what a purchase requires, it knowingly collects none from them. Purchases require an Apple ID, which is subject to Apple's own age rules. If you believe a child has made a purchase, contact us and we will help you resolve it with Apple.

Changes to this policy

If Flash ever changes what it does with data — for example by adding sync — we will update this page first, change the date at the top, and say what changed. Continuing to use the app after a change means you accept the updated policy.

Contact us

By email: contact@fyvit.com