Privacy Policy

QuickCards helps you turn notes into flashcards and keep track of your classes. To do that we handle some of your information. This policy explains what we collect, why, who sees it, and the choices you have. We wrote it to be read, so we kept it plain.

1. About this policy

This Privacy Policy applies to the QuickCards app for iPhone, iPad and Mac, and to the QuickCards pages on madepuremedia.org (together, the “Service”). The Service is run by MadePure Media Corp, a company based in British Columbia, Canada (“MadePure Media,” “we,” “us”). We decide how and why your personal information is used, which makes us the controller (or, under some laws, the business or organization responsible for it).

By creating an account or using QuickCards you accept this policy and our Terms and Conditions. If you do not agree, please do not use the Service.

Our contact details are in Section 15. This policy has region specific notes in Section 10 for people in the European Economic Area, the United Kingdom, Switzerland, Canada, the United States, Brazil and Australia.

2. Information we collect

2.1 Information you give us

• Account details. Your email address and password, or, if you use Sign in with Apple, the name and email address (or Apple’s private relay address) that Apple shares with us. Your name is requested when you sign up. Passwords are handled by our authentication provider and we cannot read them.
• Birthday. Asked once when you sign up, to check that you are at least 13. The check happens on your device. We do not send your birthday to our servers and we do not keep it.
• Profile. A username (@handle), an avatar color, and a friend code that is created for you. You may also add your school, degree level, major and graduation year, and you can choose whether your full name or a shorter name appears on public decks.
• Your study content. Decks, flashcards, tests and test results, classes, class times, assignments and due dates, notes, and the text or files you scan, paste or import (for example a syllabus, a class schedule, a PDF or typed text).
• Public decks. If you publish a deck, we store it with the details you add: school, course code, course name, instructor name, term, title and description, along with the author name you chose to show.
• Social features. Friend requests, friendships, decks you send or receive, ratings and saves of public decks, reports you file about decks, and people you block.
• Requests and messages. School requests, and anything you send us when you contact support, including your email address and the content of your message.

2.2 Information created as you use QuickCards

• Study activity, such as your streak, whether you studied today, daily study counts, deck and card counts, and which cards you marked as known or flagged.
• Usage counters for features with monthly limits, such as image scans, tests made, and the amount of AI processing used, so we can apply free and Pro limits and protect the Service from abuse.
• Your subscription status: your plan, the Apple transaction identifier, the product, the expiry date and whether the purchase is a test or live purchase. We do not receive your payment card or Apple ID password.
• Your settings, including notification preferences, language, night mode and which tutorial steps you have seen.

2.3 Information from your device, only with your permission

• Camera. Used only when you scan a page or make a PDF. The Mac app does not use a camera; on Mac you import photos and PDFs from your files and photo library instead.
• Photos and files. Used only for the images, PDFs and documents you choose to import.
• Apple Calendar. Read only when you choose to import events. Only the events you pick are copied into QuickCards, and your Apple Calendar is never changed.
• Notifications. If you allow them, we store a push notification token for your device so we can send class reminders, study reminders and friend activity alerts. You can turn each kind off in the app or in your device settings.

You can refuse or withdraw any of these permissions in your device settings (on Mac, in System Settings under Privacy & Security). Some features will stop working without them.

2.4 Information collected automatically

• Technical data sent when the app talks to our servers, such as your IP address, device and operating system type (iOS, iPadOS or macOS), app version, time zone and language. Our hosting providers keep short term logs of requests for security and to fix problems.
• If you see ads, our ad provider collects ad related data as described in Section 6.

QuickCards does not use third-party analytics or advertising analytics SDKs to profile what you do inside the app.

2.5 What stays only on your device

Text recognition runs on your device using Apple’s own technology, so the photos you scan are not uploaded for that step. PDFs you make with the PDF maker are saved on your device (and wherever you choose to export them). Your device (iPhone, iPad or Mac) also keeps a local copy of your decks so the app works offline.

3. How we use your information

• To create and run your account, sign you in, and keep your decks, classes and tests in sync across your devices.
• To provide the features you ask for: building cards and tests from your content, importing syllabuses and schedules, calendar and reminders, friends, and public decks.
• To provide QuickCards Pro: confirming your subscription with Apple, applying higher limits, and turning off banner ads.
• To send notifications you have allowed, and service messages such as account or security notices.
• To show ads to free accounts where ads are available, and to measure and limit them.
• To keep the Service safe: preventing abuse, fraud and spam, enforcing usage limits, reviewing reports, and enforcing our Terms.
• To maintain and improve QuickCards, fix bugs, and understand overall usage in aggregate form.
• To answer your questions and requests, and to meet our legal obligations.

We do not make decisions that have legal or similarly significant effects on you by purely automated means. We do not sell your personal information, and we do not use your decks, notes or scans to advertise to you.

4. AI features and how your text is processed

Several QuickCards features use artificial intelligence (“AI”) provided by a third party: making flashcards from scanned or pasted text, building tests and answer choices from a deck, reading a syllabus or class schedule to find classes and due dates, and organizing calendar items.

• What is sent. When you use one of these features, QuickCards sends the relevant text (for example the text read from your scanned pages, the text you pasted, the contents of the deck you are testing, or the text of a syllabus or schedule you imported) through our servers to our AI provider, Anthropic, PBC (the company behind Claude). Your photos are not sent for this purpose, because the text is read on your device first.
• What it is used for. The provider processes the text only to produce the result you asked for and sends it back. We do not allow the provider to use this text to train its models, and we do not use it to advertise to you.
• Retention. We do not keep the text sent for processing beyond what is needed to deliver the result and to keep limited technical records (such as how much processing your account has used). The provider may keep it for a short period for safety and abuse monitoring under its agreement with us.
• Your choice. Please do not scan or import documents that contain sensitive information about other people, such as medical, financial or government identity details. You can decline to use these features; manual card creation does not send anything to an AI provider.
• Accuracy. AI can make mistakes. Check your cards, tests and imported dates before you rely on them.

By using these features you agree to your text being processed this way. The first time you use one of these features, the app asks for your agreement before any text is sent, and you can withdraw it at any time by contacting us or by not using the feature.

5. Who sees your information

5.1 Other students

• Your profile. Other signed-in students can view your name (or the shorter name you chose), @username, friend code, avatar color, streak and whether you studied today, how many decks and cards you have, your deck names, whether you have Pro, and any school, degree, major and graduation year you added. Profiles cannot be browsed as a list.
• Friends. When you accept a friend request, or send a deck to someone, they see what you send and your friend activity.
• Public decks. A deck you publish is visible to every QuickCards student. It shows the course details and the author name you chose. Other students can rate it, save a copy to their own library, and report it. Please do not put personal information about other people in a deck you publish.
• Copies. When another student saves or receives one of your decks, they keep their own copy. If you later delete your account or the original deck, their copy stays in their library.

5.2 Our service providers

We use these providers to run QuickCards. They may only use your information to provide their services to us, under their own contracts and privacy commitments.

• Google (Firebase and Google Cloud). Sign in, our database, file and function hosting, push notifications and server logs.
• Anthropic, our AI provider. Processes text for the AI features in Section 4.
• Apple. Sign in with Apple, App Store purchases and subscriptions (including server notifications to us about renewals, expiry and refunds), push notification delivery, and the App Store itself.
• Google AdMob. Serves ads to free accounts on iPhone and iPad, as described in Section 6.

5.3 Legal and business reasons

We may share information if the law requires it, to respond to valid legal requests, to protect the rights, safety or property of our users, the public or MadePure Media, or to enforce our Terms. If MadePure Media is involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of it, and we will tell you as the law requires.

We may also share information that has been aggregated or de-identified so that it no longer identifies you.

6. Ads

Free accounts on iPhone and iPad see banner ads from Google AdMob. There are no ads on Mac, and QuickCards Pro removes banner ads.

• What AdMob collects. To serve and measure ads, AdMob and its partners may collect your IP address, device identifiers (such as the advertising identifier where you allow it), approximate location derived from your IP address, ad interaction data, and diagnostic data such as crash and performance information from the ad software. We do not give AdMob your decks, notes, scans, name or email address.
• Consent. Where the law requires it, including in the European Economic Area, the United Kingdom and Switzerland, we show a consent form before ads are requested, and personalized ads are shown only if you agree. You can change your choice later from the privacy options in the app’s settings.
• Tracking on iPhone and iPad. The app does not ask to track you across other companies’ apps and websites. You can also limit ad personalization through the advertising settings on your device.
• If you decline. You will still see ads, but they will not be personalized from your activity in other apps and sites.

Google’s own explanation of how it uses data from ad partners is at policies.google.com/technologies/partner-sites.

7. Our legal bases (EEA, UK and Switzerland)

If the GDPR or the UK GDPR applies to you, we rely on these bases:

• Contract: to create your account and provide the Service you asked for, including AI features and subscriptions.
• Legitimate interests: to keep the Service secure, prevent abuse, enforce limits, review reports, and improve QuickCards, where these interests are not outweighed by your rights.
• Consent: for personalized ads, for push notifications, for optional device permissions, and for AI processing where consent is required. You can withdraw consent at any time without affecting what happened before.
• Legal obligation: to meet legal and tax requirements and respond to lawful requests.

8. How long we keep information

• While your account is open, we keep your account, profile and study content so the Service works for you.
• When you delete your account in the app, we erase your profile and everything under it: decks, cards, tests, classes, due items, study stats and settings. We also delete the public decks you published (with their ratings and saves), your friend links and requests, decks you sent or received through friends, your friend code and username, your push tokens, your usage records and your subscription record on our servers, and then your sign-in itself.
• What we keep after deletion. Reports you filed about other people’s decks are kept without your profile details, so that moderation counts stay accurate. Copies of your decks that other students already saved or received stay in their libraries. Apple keeps its own purchase records under its policies.
• Inactive accounts. If an account isn’t used for 2 years, we delete it and everything under it, as described above. An account with an active subscription is kept. Scheduled study reminders pause after 60 days without using the app and start again when you open it.
• Backups and logs. Copies in backups and logs are overwritten or expire on a rolling schedule, normally within 90 days.
• Legal reasons. We may keep limited information longer where the law requires it or to resolve disputes and prevent fraud.
• Deleting your account does not cancel an App Store subscription. Cancel it in your Apple ID settings first, as explained in the Terms.

9. Your choices and rights

You can do most things yourself in the app:

• See and change your information: edit your profile and account details in the app.
• Delete your account and data: open the Account screen and choose Delete account.
• Notifications: change them in the app’s notification settings or in your device settings (on Mac, System Settings, then Notifications).
• Device permissions: camera, photos, calendar and notifications can be turned off in your device settings.
• Ads: use the choices in Section 6.
• Public decks: you can unpublish or delete a deck you published. If an instructor or other person is named in a public deck and wants the name removed, email us and we will act promptly.

Depending on where you live, you may also have the right to access a copy of your information, have it corrected or deleted, receive it in a portable format, object to or restrict certain uses, withdraw consent, and complain to a regulator. To use any right, email contact@madepuremedia.org from the email address on your account. We may need to verify that it is you. We reply within the time the law requires, normally within 30 days (45 days where the law allows an extension). We do not charge a fee unless the law allows us to, for example for requests that are clearly excessive.

10. Information for specific regions

10.1 European Economic Area, United Kingdom and Switzerland

You have the rights in Section 9, plus the right to object to processing based on legitimate interests and to complain to your data protection authority (in the UK, the Information Commissioner’s Office). Our legal bases are in Section 7. Your information is transferred to countries outside your own, as described in Section 13. If we are required to appoint a representative in the EEA or UK, we will publish their details here.

10.2 Canada

We handle personal information under Canada’s PIPEDA and, as relevant, British Columbia’s Personal Information Protection Act and Quebec’s Law 25. You may ask for access to, correction of, or deletion of your information, and withdraw your consent, as set out above. Our service providers may store and process information outside your province and outside Canada, including in the United States. For Quebec residents, the person responsible for the protection of personal information can be reached at the contact address in Section 15. You may also complain to the Office of the Privacy Commissioner of Canada or your provincial regulator.

10.3 United States

If you live in a state with a comprehensive privacy law (for example California, Colorado, Connecticut, Virginia, Texas or Utah), you may have the right to know what personal information we collect and how we use it, to access it, correct it, delete it, receive a copy, opt out of targeted advertising and the sale or sharing of personal information, and not be treated worse for using these rights.

• Categories we collect are described in Section 2: identifiers (name, email, username, device identifiers), commercial information (subscription status), internet and app activity, general location from IP address, audio, visual or similar content you provide (scanned pages), educational information you choose to add (school, degree, major, graduation year, courses) and inferences used only to run features.
• Sale and sharing. We do not sell personal information for money. Where AdMob serves personalized ads, some states treat that as “sharing” for cross-context behavioral advertising. You can opt out in the app’s privacy options, in your device’s advertising settings, or by emailing us.
• Sensitive information. We do not use or disclose sensitive personal information to infer characteristics about you.
• Appeals. If we decline a request, you can appeal by replying to our email; if you are still not satisfied you can contact your state attorney general.
• Authorized agents may submit requests for you with your written permission.

10.4 Brazil

Under the LGPD you may confirm that we process your data, access it, correct it, anonymize, block or delete unnecessary data, request portability, learn who we share it with, and withdraw consent. Contact us at the address in Section 15.

10.5 Australia and other countries

We handle personal information in line with the Australian Privacy Principles and the laws that apply where you live. You may request access or correction, and complain to us first; if we do not resolve it you may contact the Office of the Australian Information Commissioner. If the law where you live gives you rights not listed here, we will honor them.

11. Children and teens

QuickCards is for people aged 13 and over. It is not directed at children under 13, and we do not knowingly collect personal information from them. In some countries the minimum age to consent to data processing is higher than 13 (for example 14, 15 or 16 in parts of the European Union). If that applies to you, you may use QuickCards only with the consent of a parent or guardian. If we learn that a person under the applicable age has created an account without that consent, we will delete the account and its data. Parents or guardians who believe this has happened should contact us at once.

12. Security

We use reasonable technical and organizational safeguards: encrypted connections, database rules that keep each student’s decks private to their account, server side verification of purchases, and re-authentication before an account can be deleted. No system is completely secure, so we cannot promise absolute security. Please use a strong, unique password and tell us right away if you think your account has been accessed without your permission.

13. International transfers

MadePure Media is based in British Columbia, Canada, and our providers operate servers in several countries, including the United States. Your information may be processed in countries that have different data protection laws than where you live. Where the law requires it, we use safeguards such as the European Commission’s Standard Contractual Clauses, the UK’s International Data Transfer Addendum, or adequacy decisions. You can contact us for details.

14. Changes to this policy

We may update this policy as QuickCards changes or as the law changes. When we make a material change we will update the date at the top and, where required, give you more notice, for example in the app, and ask for consent again if the law requires it. Using QuickCards after a change takes effect means you accept the updated policy.

15. Contact us

Questions, privacy requests, or complaints? Email contact@madepuremedia.org. This address also receives requests for the person responsible for privacy at MadePure Media.

MadePure Media Corp
8825 Forsberg Rd
Vernon, British Columbia V1B 3M6
Canada