Privacy Policy

1. Data We Collect

Flash Fluency collects and stores limited personal data to operate the service and personalize your learning:

• Email address and sign-in identifier. You create an account using Sign in with Apple or Sign in with Google. We receive your email address and an account identifier from that provider. Flash Fluency does not create or store passwords.
• Learning proficiency data. We track your progress across vocabulary, grammar, and pronunciation in order to personalize your study material and generate appropriate content for your level.
• Ask Flash questions. The questions you submit through Ask Flash are stored so that we can improve our sentence examples and exercises.
• Translation exercise responses. The translations you write are sent to third-party AI providers for grading and feedback (see Section 3). They are not stored by Flash Fluency.
• Content you submit for study material. When you submit text, lyrics, or video links to generate study material, that content is processed to extract vocabulary and grammar. The extracted vocabulary and grammar are added to your study material. Your original submission is not stored by Flash Fluency.
• Voice recordings. When you use pronunciation practice, your recording is processed in memory to produce a pronunciation assessment and is then discarded. We do not store your voice recordings. The resulting pronunciation scores are stored as part of your learning proficiency data.
• Push notification token. If you enable notifications, we store a device token issued by Firebase Cloud Messaging so that we can deliver them.
• Subscription data. If you purchase a subscription, RevenueCat assigns an account identifier and processes purchase and receipt information to manage your entitlements. We do not receive or store your payment card details.

2. Cookies and Tracking Technologies

The Flash Fluency mobile app does not use analytics, advertising, or cross-app tracking technologies. There is no Firebase Analytics, no advertising SDKs, no third-party trackers, and no advertising identifiers. Analytics collection is disabled at the SDK level.

We do process a device push notification token through Firebase Cloud Messaging in order to send notifications, and we use RevenueCat to manage subscriptions. Neither is used for advertising or cross-app tracking.

Any temporary session data is discarded when your session ends.

3. Third-Party AI Services

Flash Fluency uses third-party AI providers to power certain features. Depending on the feature, the following data is transmitted for processing:

• Ask Flash. The questions you submit, your conversation with the assistant, and the flashcard or feedback item you are asking about are sent to OpenAI to generate responses.
• Translation exercises. The translations you write are sent to OpenAI for grading, and to Alibaba Cloud (Qwen) for a labeling step that produces detailed feedback.
• Study material generation from your content. Text, lyrics, or video links you submit are sent to OpenAI to screen the content and to extract vocabulary and grammar.
• Pronunciation practice. Your voice recordings are never sent to any third-party AI provider. Pronunciation analysis runs on infrastructure operated by Flash Fluency.

Each provider processes data under its own privacy policy. We transmit only what each feature requires, and never your account credentials or payment information. Flash Fluency does not control how these providers store or use the data they process.

Study sentences, lessons, and audio that you receive are generated from our own vocabulary and grammar catalog. That process does not involve your personal information.

Important notice: AI-generated responses may not always be accurate. Please verify important information independently before relying on it.

4. Where Your Data Is Processed

Flash Fluency is operated by Flash Fluency Co., Ltd., a company registered in Seoul, Republic of Korea. Your data is processed outside Korea:

• Account data, learning data, and all storage are hosted on Microsoft Azure in the United States.
• OpenAI processes data in the United States.
• Alibaba Cloud (Qwen) processes data through its international gateway in Singapore.
• Google Firebase and RevenueCat process data in the United States.

By using Flash Fluency, your personal data is transferred to and processed in these countries.

5. Other Service Providers

In addition to the AI providers listed in Section 3, we use:

• Microsoft Azure for hosting, storage, and computation.
• Apple and Google for account sign-in.
• Google Firebase for push notification delivery.
• RevenueCat for subscription and entitlement management.

6. Data Security

We implement industry-standard security measures to protect your personal information against unauthorized access, including:

• AES-256 encryption for data at rest.
• TLS 1.2 or higher for data in transit.
• Secure authentication protocols to protect user accounts.

7. Data Retention

We retain your data only as long as necessary for the purposes described in this policy.

When you delete your account, your personal data is removed from our live systems immediately. Residual copies may persist in encrypted backups and are purged within 30 days.

8. Your Rights

Depending on the laws that apply to you, including Korea's Personal Information Protection Act (PIPA), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA), you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data (see Section 9).
• Object to or restrict certain processing of your data.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us at contact@flashfluency.net.

9. Account Deletion

You can delete your account and all associated data at any time from the Settings section of the app. Deletion is permanent and cannot be undone. Timing is described in Section 7.

If you have any difficulty deleting your account, contact us at contact@flashfluency.net.

10. Age Requirements

Flash Fluency requires users to meet the following minimum ages:

• Republic of Korea: 14 years or older.
• European Union: 16 years or older, unless verifiable parental consent has been obtained.
• Elsewhere: 13 years or older.

We do not knowingly collect personal data from users below the applicable minimum age. If a parent or guardian believes their child has provided personal information, they may request its deletion by contacting us at contact@flashfluency.net.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated version number and date. We encourage you to review it periodically.

12. Contact

If you have questions about this Privacy Policy, contact us at contact@flashfluency.net.