Privacy Policy

Placeholder. The production privacy policy lands before the public Phase 2 launch — it covers UK GDPR, the ICO Children's Code obligations for under-13 users, data minimisation, retention periods, subprocessors, and the right-to-erasure flow.

Test results

When you take a test we store the whole attempt: every question exactly as it was asked, the answer you gave, whether it was marked right, the marks awarded, how long you spent on each question and on the test, and whether you chose to test before the deck was ready. Attempts are append-only — once a test is submitted, neither you nor anyone else can change what it recorded.

Who can see it. You can, on /tests. An admin of any organisation you belong to — for a family account, the parent who set it up — can read exactly the same rows, and the page tells you their name. They can read; they cannot change or delete anything. The people who operate Flashcards can access accounts for support and safety. Nobody else can: database row-level security, not application code, is what enforces this.

How long. For the life of the account. Deleting your account deletes your attempts and their items with it, in the same cascade as your decks and reviews.

Automated marking. Answers are marked by a deterministic engine on the server. Where a language model is involved in marking, the item is labelled as model-marked in your results and counted on your progress page, so you can see how much of a score was a judgement call rather than an exact match. In practice that means one thing: when the engine cannot match a SHORT written answer to the answer key, that one question, its mark scheme and your answer are sent to Anthropic to be re-marked against the key. It can only ever award a mark the engine refused — it is never allowed to take one away — and the reason it gives is shown to you next to the question.

What a test changes. Unless you turn it off before you start, the marks feed back into your review schedule: a card you got wrong comes back sooner, a card you got right moves further out. Your results screen says how many cards were rescheduled, every time. Generated practice questions are not tied to a card, so they change nothing. A question a model marked wrong never demotes a card.

Cookies & analytics

We use Google Analytics to understand how the app is used — which pages and decks are opened, which features get used, how long study sessions last. It is off by default: nothing is stored on your device and no analytics cookie is set unless you accept the banner. If you reject — or simply ignore it — it stays that way, and nothing else about the app changes.

When you accept, Google Analytics sets the _ga and _ga_* cookies (about 2 years) to tell one browser apart from another between visits, and usage is linked to your account id — a random identifier, never your name or email — so we can see how each family member's studying is going. Google processes this data on our behalf in the United States. No advertising use: we run no ads and no remarketing; advertising signals stay switched off even when you accept analytics.

Your answer is stored in this browser only, under flashcards:consent — the choice is per browser and per device. Clearing this site's data erases the answer, and we'll ask again next time. You can change your mind here, any time, with one tap:

Strictly-necessary cookies — the sign-in session (Clerk) and the short-lived invite-code cookie — are always on: the service cannot function without them, and they are never used for analytics.