Privacy Policy
Last updated: June 10, 2026
LeetCards is operated by LeetCards LLC ("we", "our", "us"). This policy explains what data the LeetCards mobile app collects, how it's used, and the choices you have.
1. What we collect
Account information
When you sign in with Google or GitHub, we receive from your identity provider:
- Your email address
- Your display name
- Your profile photo URL (we don't store the image itself)
- A unique user identifier
Usage data
- Which flashcards you've completed
- Topic, collection, and difficulty preferences
- App session events (app opens, screen views)
- Last-opened timestamps
Performance and crash data
- Anonymized crash reports including stack traces
- Device model and operating system version
Subscription data
If you subscribe to a paid tier:
- Purchase history and subscription status (active, expired, cancelled)
- Billing cycle (monthly or yearly)
- Tier (Plus or Pro)
We never see your payment card information. Google Play processes all payments.
2. How we use it
- Operate the app: track your progress, restore it across devices, enforce subscription access
- Diagnose problems: identify and fix crashes and performance issues
- Improve the product: understand which features and content get used
- Communicate with you: reply when you email support
We do not sell your data, share it with advertisers, or use it for marketing profiles.
3. Who processes it
We use the following third-party services to store and process your data:
- Google Firebase (Authentication, Firestore, Analytics, Crashlytics, Remote Config) — account, usage, performance data
- RevenueCat — subscription status and purchase history
- Google Play Billing — payment processing
These services are bound by their own privacy commitments and act as data processors on our behalf.
4. Data retention
We retain your account data while your account is active. When you delete your account (see how to delete your account), your personal information is removed from our systems within 30 days, with two exceptions:
- Anonymized transaction records may be retained for up to 7 years to comply with financial regulations
- Crash reports tied to anonymous identifiers may persist in Firebase Crashlytics
5. Your rights
- Access: email support@leetcards.com to request a copy of your data
- Correction: sign in to update your profile, or email us
- Deletion: use the in-app "Delete account" button or follow the steps at /delete-account
- Subscription management: manage or cancel via the Google Play subscriptions page on your device
If you're a resident of California, the EEA, the UK, or another jurisdiction with specific privacy laws, you may have additional rights. Contact us to exercise them.
6. Children
LeetCards is not directed to children under 13. We don't knowingly collect personal information from children under 13. If you believe a child has provided us their data, email support@leetcards.com and we'll delete it.
7. Security
All data is transmitted over HTTPS. Account and usage data is stored in Firebase, which provides encryption at rest. We rely on Google's security infrastructure for the underlying storage.
8. Changes to this policy
We may update this policy. Material changes will be reflected in the "Last updated" date at the top, and significant changes will be communicated in-app or by email when possible.