Privacy Policy
Last updated: 2026-10-27
This policy explains what data the Kwipsy app collects, why, who receives it, where it is processed and how long it is kept.
Who we are
Kwipsy is operated by 큅시 (Kwipsy), a sole proprietorship registered in the Republic of Korea (사업자등록). Registration number: 736-49-01198. Registered address: 203, 49 Yeondaedongmun-gil, Seodaemun-gu, Seoul, 03721, Republic of Korea. General contact: [email protected].
The person responsible for personal data (개인정보 보호책임자) is the representative of 큅시 (Kwipsy), reachable at [email protected].
The minimum age to use Kwipsy is 16.
Signing in
Kwipsy needs an account, because your decks, cards and study history sync between your devices. You can sign in in three ways:
- Sign in with Apple. Apple shares your email address with us — or a private relay address, if you choose to hide yours — and, the first time, your name if you allow it. We also keep, encrypted, a token Apple issues for Kwipsy, so that we can ask Apple to revoke Kwipsy's access when you delete your account.
- Sign in with Google. Google shares your name and email address with us. To protect this sign-in, when the sign-in screen opens the app proves to Google that it is the genuine Kwipsy app (Firebase App Check, using Apple's App Attest).
- Email and password. We confirm your email address with a code we send to it, and send another code if you reset your password. We store your password only as a one-way hash.
After signing in, you choose a username for your account.
What we collect and why
| Data | How it is collected | Purpose | Legal basis | Required or optional | Retention |
|---|---|---|---|---|---|
| Account: email address, name (when Apple or Google shares it), username, account identifier, password hash (email sign-in only), Apple token (Apple sign-in only) | You provide it when you sign in | Create and secure your account, sign you in, send you sign-in and password codes | Contract | Required | Until account deletion |
| Sign-in sessions: the device's user agent and the IP address the sign-in came from | Recorded automatically when you sign in | Keep your account secure | Legitimate interests | Required | Until account deletion |
| Decks, cards, notes and tags | You create them, import them (for example from .apkg files) or add them from the Library |
Store and sync your study content | Contract | Required | Until account deletion |
| Images and audio you add to cards | You add them from the camera, your photo library or the microphone | Store and sync your study content | Contract | Optional | Until account deletion |
| Study activity: review history, scheduling state, game results, daily goal and streak, app settings | Generated as you study and use the app | Schedule your reviews, show your statistics, keep your devices in sync | Contract | Required | Until account deletion |
| Library deck ratings: the stars you give, stored with your username | You rate a deck | Show each deck's average rating | Contract | Optional | Until account deletion |
| Device and synchronisation metadata | Generated automatically by the app | Keep your devices in sync and detect sync conflicts | Contract | Required | Until account deletion |
| Emails we send you: your email address and the message, including the code | Created when you register, sign in with a code or reset your password | Deliver the code and find out why an email did not arrive | Contract | Required for email sign-in | 30 days after sending, or up to 90 days if delivery failed |
| Purchase records: the store's transaction identifiers, the plan, its price and currency, the store's country, purchase, renewal and expiry dates and the subscription status, linked to your account identifier | Received from the App Store or Google Play when you subscribe or restore a purchase, and from their renewal notifications | Give you Kwipsy Pro on every device you sign in on; handle refunds, disputes and our accounting | Contract; after account deletion, legitimate interests | Only if you subscribe | Kept after account deletion for as long as needed to handle refunds, disputes and our accounting; they contain no name, email address or payment card details |
| Paywall data: your account identifier, a device identifier for apps from the same developer (identifierForVendor), device and app information, the approximate location derived from your IP address (region, country, city), how often you have seen the subscription screen, and your purchases | Sent automatically by the app to Superwall, which shows the Kwipsy Pro subscription screen | Show the Kwipsy Pro offer in your language and with your store's prices, and complete a purchase | Legitimate interests | Required | Kept by Superwall under its own policy |
| Crash reports: a random installation identifier, device model, system and app version, language and time zone, the error, and a log of recent events in the app (such as screens opened and network requests) | Sent automatically when the app crashes or meets an error | Find and fix bugs, keep the service reliable | Legitimate interests | Required | 90 days |
| Analytics events: which screens and features you use, your answer to "how did you hear about Kwipsy", device and app information, and subscription purchases (plan, price, trial), linked to your account identifier. Events may include the country you are using the app in, inferred from your IP address when the event arrives; we do not keep the IP address in our analytics data | Generated as you use the app, only after you agree | Understand which features are used and in which countries, improve the product | Consent | Optional | 12 months |
| Server logs: the IP address a request came from, the address it asked for, the response code and the time | Recorded automatically by our servers | Operate the service, investigate faults and abuse | Legitimate interests | Required | Overwritten automatically as the log space fills up; not archived |
| Emails you send us | You write to one of our addresses | Answer you | Legitimate interests | Optional | As long as needed to handle your request |
We do not collect payment card details: Kwipsy Pro subscriptions are bought through the App Store or Google Play, which process the payment.
Analytics is your choice
Right after the first onboarding screen, the app asks once whether you want to share usage statistics. Nothing is sent to our analytics before you agree. You can change your answer at any time in Settings → Data & privacy → Share usage statistics.
What stays on your device
- Reminders are scheduled on your device. Kwipsy does not use a push notification service.
- Reading cards aloud uses your device's built-in speech.
- Language detection runs on your device with Google's ML Kit: before reading a card aloud, the app recognises its language. The text is not sent to Google; ML Kit sends Google technical information about the device, the app and how this feature performs.
- Widgets show your daily goal, streak and decks from data the app already has on the device.
Who receives your data
We do not sell your data, and we do not use it for advertising. Kwipsy has no advertising SDK and does not track you across other companies' apps or websites.
- Hosting provider — OVHcloud runs our sync server and database on servers in Canada: your account, study content, study activity and purchase records.
- Cloudflare — carries all of the app's traffic to our servers (Cloudflare Tunnel), stores the images and audio you add to cards (R2 object storage), sends our sign-in and password emails, receives emails sent to our addresses and forwards them to our mailbox, and hosts this website.
- Our email provider — stores the emails you send us in our mailbox.
- Superwall — shows the Kwipsy Pro subscription screen and receives the paywall data described above.
- Apple and Google — receive data when you sign in with them or buy Kwipsy Pro through their stores, under their own privacy policies. Google also receives the ML Kit technical information and the App Check request described above.
- Analytics and crash reporting — these run on servers we operate ourselves, in the Republic of Korea, using open-source software (PostHog and GlitchTip); no analytics or crash-reporting company receives your data. Requests to them pass through Cloudflare's network (Cloudflare Tunnel), so Cloudflare handles them in transit.
Providers that process data for us — OVHcloud, Cloudflare, our email provider and Superwall — may use it only to provide their service to us, and must protect it at least as well as this policy describes. Apple and Google handle the data they receive as independent companies, under their own privacy policies.
The current, named list with each provider's role and region is on our Service Providers page.
Where your data is processed
Our servers are in Canada (account, study content and purchase records) and in the Republic of Korea (analytics and crash reports). Cloudflare, Superwall, Apple and Google are companies based in the United States and process data in the United States and in other countries where they operate. Your data reaches these providers over encrypted connections while you use the app.
How long we keep it
You can delete your account at any time in the app (Settings → Data & privacy → Delete account) or through our Delete Account page. Once the deletion is confirmed, you are signed out and the account can no longer be used. Its data — account, study content, study activity, ratings, images and audio — is permanently erased from our live systems 30 days later. We keep the account identifier and the dates of the deletion, with no content, so that the deleted account cannot be used again. Purchase records are kept as described in the table above. Crash reports, analytics events, server logs, the emails we sent you and the data Superwall holds are not deleted with the account; they expire as described in the table above. Deleting your account does not cancel a subscription: cancel it in your App Store or Google Play settings.
Copies of our databases — the ones we take before each update of our servers, and our backups — are deleted automatically 35 days after they are made. A deleted account's data can remain in these copies until then, so complete removal, live systems and copies together, takes up to 65 days from your request.
Crash reports are deleted after 90 days. Analytics events, where you agreed to analytics, are kept for 12 months. We do not delete inactive accounts automatically.
Your rights
Depending on where you live, you have the right to access, correct, delete, restrict, or object to the processing of your data, to receive a copy of it in a portable format, and to withdraw consent at any time where processing relies on it. To exercise any of these rights, write to [email protected].
We respond without undue delay, and normally within one month. There is no charge for making a request. We may ask you to confirm your identity before acting on a request, to make sure we are not disclosing or deleting the wrong account's data.
If you are in the European Economic Area, you can also complain to your local data protection supervisory authority. In the Republic of Korea, you can complain to the Personal Information Protection Commission (PIPC).
Children
Kwipsy is not intended for anyone under 16. Kwipsy does not knowingly allow anyone under 16 to create an account. If we learn that an account belongs to someone under that age, we close the account and delete the data associated with it. A parent or guardian who believes their child has created an account may contact us at [email protected].
How we protect it
Data is encrypted in transit. Passwords are stored only as one-way hashes, and the Apple token is stored encrypted. Access to production systems is limited to the operator.
Changes to this policy
This policy is effective as of the date at the top of this page. If we make a material change to it, we will post the change here and update that date.