What Flash collects, why, who else handles it, how long it is kept, and your rights.
Flash is run by Rumbo Software LLC, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, United States ("we", "us"), which decides how your personal information is used and is responsible for protecting it. The person in charge of protecting personal information is the company's managing member. For anything in this policy, or to use your rights, email [email protected].
Your name, email address, passkey public keys, your decks/cards/tags, and your review history (needed for scheduling). Sessions and tokens are stored only as SHA-256 hashes. There is no advertising, no third-party analytics and no tracking cookies.
We measure how Flash is used on our own server, with no analytics service. For visitors who are not signed in we keep only aggregate counts: page views (counted once you scroll, tap or type on the page), signups, and the site a visit came from. To count each visitor once a day we hash the connection's address and browser type with a key that changes daily and is never written to disk, so nothing that identifies a visitor is stored. For accounts, we record which features you use (that you imported a deck, studied from the app, or connected an assistant, for example) together with your account so we can see what helps people learn. When you connect an assistant, these records also note the kind of device you used (browser, operating system, phone or computer, and whether an app's built-in browser showed the page) and which assistant asked and by which of its routes (its website or its app), so we can fix connections that fail on one kind of device or app. They never include your address, never the contents of your cards, and they are deleted with your account. They also note how you reached a page when the link was one of ours (from an assistant's panel or one of our emails, as a fixed label, never the address of the page you came from), and which version of Flash was running. We keep the language your account reads in, as your browser, your assistant or your phone reports it (or as you choose it), so pages and emails can be in that language; and on the sign-in and connect pages we count which language visitors' browsers ask for, once a visitor a day, without keeping who they are. Your review history notes how long each card was on screen before you graded it, which helps scheduling and shows us whether studying works. For the emails we send, we keep whether each one was delivered, delayed, bounced or reported as spam (our email provider tells us), when you first opened its link, and on days a reminder was not sent, why. We do not track whether you opened an email. If you ask to hear when the phone apps are out, we keep that you asked, so we can send that one email. Payment amounts and dates are kept as bookkeeping after an account is deleted, with the account's name removed.
Our server keeps a request log (the connection's address, browser type, which page or endpoint was asked for, the result, and for a connect from an assistant the website that sent you, by its name only) for 14 days, to fix problems and stop abuse. We never use it to measure how people use Flash.
When one of the website's own scripts fails in your browser, or the browser blocks something under the page's security policy, the page tells our server: the error's message (at most 300 characters), which of our scripts and which line, the page's address with any numbers and codes in it removed, and your browser's family (for example "Safari (mobile)"). We count these to find and fix what broke. They are not linked to your account, your address or anything else that identifies you, and errors from browser extensions or other websites are never sent.
Where the law asks us to name a reason (a "legal basis") for each use, these are ours:
Flash sets these cookies, each to make the site work or to keep a choice you made:
__Host-flash: your sign-in session, for at most 30 days;__Host-flash-ceremony: for the length of a sign-in with a passkey,
Google or Apple, at most 5 minutes;flash-theme: the light or dark theme you chose;flash-decks-folded and flash-decks-archived: the decks
you folded in the list, and whether it shows archived decks;flash-tz: your browser's time zone, so dates and "today" are
yours;flash-metrics-range: the period chosen on the dashboard of the people
who run Flash, for them only.Preference cookies last at most a year. Your browser also keeps, on your device only: the card editor's advanced view if you turned it on, what it needs to resume an interrupted upload of a recording for card generation, the answers in progress of a session in an assistant's study panel, and, for as long as a tab is open, the scroll position, the draft of your message in the feedback window and a mark that keeps the page from reloading twice when your time zone changes. None of them is used for advertising or to measure an audience. Flash keeps no language cookie: the language comes from your account, the page's address or your browser.
You can send us feedback from the Feedback button on the website or from the app. We keep what you wrote, the topic you picked (bug, idea or other), your account, and a few lines about where it came from: the page or screen you were on, technical details such as the window size, theme and browser, any error the page showed, and any screenshot you add. Assistants you connect cannot send us feedback for you.
Feedback is stored on our server and emailed to the people who run Flash, so we can read it, answer you at your account's email address, and fix or improve Flash. We never use it for marketing. If you delete your account, what you wrote stays, without your name or email address.
The Flash app keeps the decks you make or import in it, their media and your review history on your phone, not on our server. Up to 1,000 cards sync on the Free plan, and every card with Flash Pro: a copy goes to your account on our server and from there to your other signed-in devices, the website and the assistants you connect. A card that does not sync stays only where it was made. For each phone that syncs we keep an identifier made for that purpose, the app version, when it last synced, and when the oldest card it holds that does not sync was made, so each phone receives only what it has not seen and the oldest cards sync first; a phone that has not synced for 400 days is forgotten. We also keep which of your cards sync and when each was made, for each review a phone sent which earlier review the phone had seen (so that two grades of the same card made out of sync count once), and the text of an edit that a newer edit of the same card replaced, so that it is not lost. All of this is deleted with your account. When a subscription ends, the 1,000 oldest cards keep syncing and every other copy stays where it is: on the phone, and in your account until you delete them. Signing out of the app leaves the phone's decks on the phone; deleting your account can also delete them.
When you make cards from your own material, we keep what you give it (the file, or the text you paste), the AI's reading of it, your instructions, the cards it wrote and your conversation about them. For a recording we also keep its transcript, its sound in parts and pictures of its slides, so the review can show the passage a card rests on and play the few seconds where it was said. What you gave it, its reading and its transcript are deleted 30 days after you last make cards from it, two days after you add it if you never do, and when you delete your account. The cards you keep are your cards like any other. For each request to an AI provider we record which model ran, how much it read and wrote, and how long it took, for billing and limits, never what was sent.
Voice study, in the Flash app and on the website, uses your microphone only while a voice session is listening for an answer, and only after you allow it. The sound goes through our server to Soniox, which turns it into text; neither we nor the app keep the recording. On the website, if our recognizer is not set up, your browser's own speech recognition does this instead, under your browser maker's terms. The text of your answer is held in memory for up to ten minutes so it can be graded and is never written to our database; the grade is saved in your review history like any other. We record how long each recognition ran, for billing and limits, never what was said.
If you connect an AI assistant (Claude, ChatGPT, Grok, Mistral, Gemini, or another MCP client), that assistant reads your due cards and submits your grades through an OAuth-scoped connection you can revoke at any time. Your conversations with the assistant happen on that assistant's platform under its own privacy policy.
These companies do work for us and receive only what that work needs. Vultr runs our server, in New Jersey, United States, where your account and its data live. Cloudflare proxies traffic to our server and, as any proxy does, keeps its own short-term request logs (addresses and browser types) for security. We look at those only to investigate abuse or automated traffic, never to measure how people use Flash. Cloudflare R2 stores media on your cards and our backups, which are encrypted. Cloudflare Turnstile checks, on the sign-up and password reset forms, that a person and not a program is sending them: the page loads its widget from Cloudflare, and our server sends Cloudflare the widget's token and the connection's address to check it. Resend sends our emails: account emails (verification links), the reminders you turn on, and the feedback you send, to the people who run Flash. Expo carries the notifications you allow in the app (study reminders, and word that cards you asked for are ready) to Apple or Google, which show them on your phone: it receives the phone's push address and the notification's text.
Stripe sells Flash Pro on the website as the merchant of record (Managed Payments, through its Link service), and Apple or Google sell it in the app. They process payment details and handle sales tax as sellers, under their own privacy policies; we never see your card number. Google and Apple also sign you in when you choose them, and share your name and email address with us.
Some features send what you give them to a provider that does the work and sends the result back. Anthropic (Claude) makes cards from the material you give card generation (text, PDFs, photos, and for a recording its transcript and pictures of its slides, never its sound), checks them, and reads a card's text to mark which language each part is in, so voice study pronounces it right. Google (Gemini) grades the answers you give in voice study, and answers the questions you ask about a card there, from the card and the text of what you said. Soniox reads card text aloud when you study with a natural voice, turns your spoken answers into text when you answer out loud, and turns the sound of a recording you give card generation into text; we delete the recording from Soniox once it is transcribed. None of them is used unless you use that feature. Each handles what we send under its own terms: Anthropic's Commercial Terms, Google's Gemini API terms, and Soniox's privacy policy.
Our server is in the United States, and so are most of the companies above; some of them also work from other countries where they have facilities. If you live outside the United States, your data is transferred there and, if you live in Quebec, communicated outside Quebec. For transfers from the European Union, the United Kingdom and Switzerland, we rely on the EU-US Data Privacy Framework (and its UK and Swiss extensions) where the company is certified under it, and otherwise on the standard contractual clauses in its data processing agreement with us.
Decks you shared stop being shared when you delete your account; copies other people saved to their own accounts stay theirs.
Depending on where you live (the European Union, the United Kingdom, Switzerland, Brazil, Quebec and the rest of Canada, California and other US states, and many other places), you have the right to know what we hold about you and get a copy of it; to take it elsewhere; to correct it; to have it deleted; to restrict or object to its use, including any use based on our legitimate interest; to withdraw a consent you gave; to know which companies receive it; and not to be treated differently for using these rights. Flash makes no decisions about you with legal or similar effects by automated means alone.
Most of this you can do yourself. Export everything (Anki .apkg or CSV) whenever you like. Change your name and settings in Settings. Delete your account yourself from Settings › Delete account: it removes your cards, review history, media, passkeys, sessions, and connected AIs at once, and cancels an active Pro subscription bought on the website so nothing bills again. Turn reminders off in Settings or from any reminder. For anything else, or if you prefer a person, email [email protected] from your account's address (or have someone you authorize write for you). It costs nothing, and we answer within 30 days.
If you think we have mishandled your data, tell us first if you like; you can also complain to the data protection authority where you live, such as your country's authority in the European Union, the Information Commissioner's Office in the United Kingdom, the Federal Data Protection and Information Commissioner in Switzerland, the ANPD in Brazil, the Commission d'accès à l'information in Quebec, or the Office of the Privacy Commissioner of Canada.
Flash is for people 13 and over. Where the law asks for a parent's or guardian's permission at an older age (under 14 in Quebec, for example), that permission is needed. If we learn that a child under 13 has an account, we delete it.
We do not sell your personal information, share it for targeted advertising, or show ads.
Connections to Flash are encrypted, sessions and tokens are stored only as hashes, and backups are encrypted. If a breach of your data puts you at risk, we tell you, and the authorities where the law requires it.
We announce material changes ahead, by email and in Flash, and date each version.
Last updated 2026-10-17.