Back to NeoCards

Privacy Policy

NeoCards

Last updated: February 1, 2026support@matheu.app

This Privacy Policy explains how Matheu (“we”, “our”, or “us”) collects, uses, and protects information when you use the NeoCards mobile application.

1Information We Collect

a. Account & Identity

  • Email address (for authentication)
  • Firebase Auth user ID
  • Linked sign-in providers (Email/Password, Google)

We use Firebase Authentication to secure your account and allow you to access your data across devices.

b. Profile & Preferences

  • Language preferences (source/target)
  • Daily goal minutes and onboarding inputs (e.g., acquisition source)
  • Notification and email preferences, reminder time, timezone
  • Tutorial completion, review prompt, and paywall display status

These settings personalize your learning experience and notification timing.

c. User Content

  • Decks and flashcards (front/back text, images, learning status)
  • AI context for cards (definitions, synonyms, examples)
  • Review history and study progress (Spaced Repetition data)
  • Usage stats such as daily study time and monthly image searches

This data is stored in Cloud Firestore to sync your progress across devices.

d. Device & Diagnostics

  • Crash logs (via Firebase Crashlytics)
  • Analytics events (feature usage and app performance)
  • Push notification token (FCM) for reminders and alerts

e. Subscription & Purchase Information

  • Transaction identifiers issued by Apple App Store / Google Play Store
  • RevenueCat customer IDs and entitlement status

We do not store your credit card or financial information. Payments are processed by Apple or Google.

f. Communications

  • Email address for transactional emails and optional marketing emails
  • Email notification preferences and engagement status

2How We Use Information

  • To provide and sync the service across devices (decks, cards, reviews, settings).
  • To generate AI context via Cloud Functions and OpenAI (translations, synonyms, examples).
  • To enable image search with caching and usage limits (Freepik API).
  • To schedule reviews, track goals, and send reminders (notifications and emails).
  • To verify subscriptions and show paywalls when limits are reached (RevenueCat).
  • To improve reliability and prevent abuse (analytics, crash logs, rate limiting).

3Data Storage & Security

  • User data is stored in Google Cloud Platform (Firebase) in the United States.
  • Callable Cloud Functions process requests in us-central1 and europe-central2 regions.
  • Data is encrypted in transit and at rest by Firebase/Google Cloud.
  • Authentication is handled via secure tokens; we never see or store your password.
  • Access to protected fields is restricted by Firestore security rules and server-only functions.

4Third-Party Services

Firebase (Auth, Firestore, Crashlytics)

Authentication, Database, & Diagnostics

https://policies.google.com/privacy

Google Sign-In

OAuth sign-in provider

https://policies.google.com/privacy

RevenueCat

Subscription management

https://www.revenuecat.com/privacy

OpenAI

AI Content Generation (API)

https://openai.com/privacy

Freepik

Image search API (icons) with caching

https://www.freepik.com/privacy

Brevo (Sendinblue)

Email delivery and lifecycle messaging

https://www.brevo.com/legal/privacypolicy/

Google ML Kit

On-device translation models

https://policies.google.com/privacy

Apple App Store

In-app purchases and review prompts (iOS)

https://www.apple.com/legal/privacy/

Google Play

In-app purchases and review prompts (Android)

https://policies.google.com/privacy

We use OpenAI's API for AI context. Data sent to the API is not used to train OpenAI's models.

5Data Deletion

You have full control over your data. You can permanently delete your account and all associated data directly within the app:
Profile Screen → Delete Account

This action is immediate and irreversible. It removes your user profile, decks, cards, review history, and usage stats from Firebase, and deletes your Firebase Auth account. If you opted in to emails, your contact is removed from Brevo.
For more details, visit our Data Deletion page.

6Children’s Privacy

NeoCards is not directed to children under 13. If we become aware that we have collected personal data from a child under 13 without parental consent, we will delete that information.

7Contact

Questions about your privacy? Email support@matheu.app