Privacy Policy

DigiDecks
Effective Date: September 13, 2026
Last Updated: September 13, 2026

1. Who This Policy Covers

This Privacy Policy explains how DigiDecks (“we,” “us”) collects, uses, and shares information in connection with the DigiDecks application and related services (the “Service”). It applies to everyone who uses the Service, including people who use it without an account.

This Policy is incorporated into our Terms of Service by reference. Terms not defined here have the meaning given in the Terms.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, Sections 4 and 8 describe your rights under the GDPR/UK GDPR. If you are a California resident, Section 10 describes your rights under the CCPA/CPRA.

2. Information We Collect

2.1 What Stays on Your Device

The Decks and cards you create, your study progress, and your settings are stored on your device. They are not sent to us unless you publish a Deck (Section 2.3).

We do not collect analytics or usage data about how you use the application.

2.2 When the Application Contacts Our Servers

When the application contacts our servers — for example, to browse or import Decks from the Public Catalog, to load our current Terms and Privacy Policy, or to publish — our servers and our hosting provider process your IP address and basic request information (such as the time and the address requested) to deliver the request, limit abuse, and keep the Service secure. IP addresses used to limit abuse are held in memory and discarded after a short period of inactivity. Our hosting provider's logs are kept for a limited period for security and debugging.

2.3 When You Create an Account and Publish

You create an account the first time you publish a Deck, by signing in with Google. We do not receive or store your password; authentication is handled by Google.

When you sign in, we receive and store:

• the unique identifier Google assigns to your account;
• the email address associated with your Google account; and
• the name associated with your Google account, if Google shares it.

When you publish, we store:

• the Decks you publish — their names, their cards, and the images and audio in them, along with when they were published;
• which account published them — we do not show your name or email address with your published Decks; and
• a record of what you agreed to — which versions of our Terms of Service, this Privacy Policy, and the publish notice you accepted, when, the application version you used, and your confirmations (that you meet the age requirement, and that you have the rights to publish).

If you contact us, we keep the correspondence.

2.4 Payment Information

If you buy the application through an app store, your payment is processed by Apple or Google under their own privacy policies. We do not receive or store your payment card details.

If you choose to support development through Buy Me a Coffee, that payment is handled by Buy Me a Coffee under its own privacy policy.

3. How We Use Information

We use the information described above to:

• create and secure your account, and authenticate you through Google;
• store the Decks you publish and make them available in the Public Catalog;
• keep a record of the Terms, Privacy Policy, and publish notice you accepted;
• respond to copyright complaints and enforce our Terms, including our repeat-infringer policy;
• limit abuse, maintain security, and debug the Service; and
• respond to your support requests and communicate with you about your account.

We do not sell your personal information, we do not use it for advertising, and we do not use your Decks to train artificial intelligence or machine learning models.

4. Legal Basis for Processing (EEA/UK Users)

For users in the EEA, UK, or Switzerland, we rely on the following legal bases:

Processing activity	Legal basis
Account creation, authentication, and publishing and serving your Decks	Performance of a contract (Art. 6(1)(b) GDPR)
Keeping a record of the Terms and notices you accepted	Legitimate interests (Art. 6(1)(f)) — being able to show what was agreed if it is ever disputed
Security, abuse prevention, and responding to copyright complaints	Legitimate interests (Art. 6(1)(f)) — our interest in operating a lawful, secure service

5. Who We Share Information With

• Google — to authenticate you when you sign in, under Google's own privacy policy.
• Render — our hosting provider, which runs our servers and stores our database and the files in published Decks on our behalf.
• App stores (Apple, Google) — if you buy the application through them.
• Other users — when you publish a Deck, anyone using the Service can view it, and other users may save, modify, and republish it under Section 6.6 of the Terms. There is no limited-audience sharing option: a Deck is either unpublished and kept on your device, or public. Your name and email address are not shown with it.
• Legal and safety — where required by law or valid legal process, or to protect the rights, safety, or property of us, our users, or the public, including in response to copyright complaints under Section 8 of the Terms.
• Business transfers — if the Service is transferred to another owner, including a company formed to operate it, your information may be transferred as part of that transaction, subject to this Policy or a policy providing equivalent protection.

6. International Data Transfers

We are based in the United States. If you are located outside the United States, the information described in Sections 2.2 and 2.3 is transferred to and processed in the United States by us and our hosting provider.

7. Data Retention

We keep your account information for as long as your account exists. You can ask us to delete your account by emailing gitbugsoftware@gmail.com; we will delete or anonymize your personal information within 30 days, except:

• copies retained in backups for a limited additional period;
• information we need to keep to comply with legal obligations, resolve disputes, or enforce our agreements — including the record of the Terms and notices you accepted, and records of copyright complaints and repeat-infringer terminations (Section 8 of the Terms); and
• Decks you published to the Public Catalog, and Derivative Decks other users created from them, consistent with Section 6.6 of the Terms. Deleting your account removes your account and your association with those Decks, but does not delete copies or modified versions other users have already made — the license you granted them when publishing is irrevocable and survives account deletion.

Information stored on your device stays there until you delete it or uninstall the application.

8. Your Rights (EEA, UK, and Switzerland)

If GDPR or UK GDPR applies to you, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate data;
• erase your data (“right to be forgotten”), subject to the retention exceptions in Section 7;
• restrict or object to certain processing, including processing based on legitimate interests;
• data portability — receive your data in a structured, machine-readable format;
• withdraw consent at any time where processing is based on consent, without affecting past processing;
• lodge a complaint with your local supervisory authority — in the EU, find yours at edpb.europa.eu; in the UK, the Information Commissioner's Office (ico.org.uk).

To exercise these rights, contact us at gitbugsoftware@gmail.com. We will respond within the timeframe required by applicable law (generally one month, extendable for complex requests).

9. Children's Privacy

The Service requires users to be at least 13 years old (see Section 3 of the Terms), and asks you to confirm this before you use it. We do not knowingly collect personal information from children under 13.

If we learn an account was created by someone under our minimum age, we will terminate the account and delete associated personal data. If you believe a child has provided us personal information, contact gitbugsoftware@gmail.com.

10. Your Rights (California Residents)

If the CCPA/CPRA applies to us, California residents have the right to know what personal information we collect, request deletion, correct inaccurate information, and opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information and do not believe we currently meet the CCPA's applicability thresholds, but you may still submit a request to gitbugsoftware@gmail.com and we will respond appropriately.

We will not discriminate against you for exercising any privacy right.

11. Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Policy. We will post the updated Policy in the Service and update the “Last Updated” date, and we will notify you of material changes in the Service or by email before they take effect. Continued use after changes take effect constitutes acceptance, consistent with Section 19 of the Terms.

13. Contact

DigiDecks

Privacy inquiries: gitbugsoftware@gmail.com