← All apps

Factstore — Privacy Policy

Last updated: 2026-09-04

1. Overview

Factstore is a flashcard learning app with optional family profiles, quiz tracking, and AI-assisted card generation. This privacy policy explains what personal data the app processes, for what purposes, on which legal bases, and what rights you have.

2. Controller

Stonemiller
Föttingerweg 13
90431 Nürnberg, Germany
Email: info@stonemiller.eu

3. Data We Process

3.1 Data stored locally on your device

By default, Factstore stores all of your data exclusively on your device in a local SQLite database. This includes:

This local data is never transmitted to our servers unless you explicitly enable the cloud sync feature.

3.2 Cloud sync (optional, opt-in)

If you enable cloud sync in the settings and create an account, the data listed in 3.1 as well as the following is transmitted to and stored at our processor Supabase (see §5):

Cloud sync is fully optional. The app is fully functional offline without an account. A single account can be shared by a family — profiles within the app keep learning progress separate per member.

3.3 AI-assisted card generation (optional, user-configured)

Factstore can optionally generate flashcards from material you provide — typed text, a document, or a photo — using an AI provider you configure in the settings:

What is sent. For a PDF, CSV or Excel file, the text is extracted on your device and only that extracted text is transmitted — the file itself never leaves your device. For an image you pick from your photo library, the image is transmitted so the model can read the text in it; it is downscaled before sending. Nothing is transmitted until you start an import, and nothing is transmitted at all if you do not use this feature.

3.4 Error reports and user feedback

We use Sentry (see §5) to detect and fix crashes and errors. When an error occurs, the following is transmitted:

Error reporting is switched on by default and can be switched off at any time under Settings → Privacy → Send error reports. The setting is read when the app starts, so it takes effect from the next start; while it is off, no error reports are sent at all. The feedback form uses the same service and is therefore unavailable while error reporting is off.

If you submit the in-app Feedback form, we transmit:

We do not collect:

Photos are the one exception, and only on your initiative: an image you pick from your photo library for card generation is sent to the AI provider you configured, as described in §3.3. Factstore never reads your photo library on its own, and picked images are not transmitted to us.

4. Purposes and Legal Bases (GDPR Art. 6)

PurposeLegal basis
Local app functionalityArt. 6(1)(b) — contract performance
Cloud sync (when enabled)Art. 6(1)(a) — consent / Art. 6(1)(b) — contract
AI card generation (when configured)Art. 6(1)(a) — consent (by configuring and using the feature)
Error monitoringArt. 6(1)(f) — legitimate interest in reliable software
User feedbackArt. 6(1)(a) — consent (by submitting the form)

5. Third-Party Processors

We use the following processors under Art. 28 GDPR data processing agreements:

6. International Data Transfers

Some processors (notably Supabase Inc., Sentry, and Google) are based in the United States and may process data outside the EU/EEA. For such transfers we rely on the EU-US Data Privacy Framework and/or the EU Standard Contractual Clauses (SCCs) where applicable.

7. Retention

8. Deleting Your Account

You can delete your Factstore account at any time, from within the app:

  1. Open Settings → Synchronisation.
  2. Tap Delete account and confirm.

What is deleted. Your account — the email address and the credentials belonging to it — and everything synced under it: profiles, decks, cards and quiz results. The deletion takes effect immediately and cannot be undone.

What is kept. The data held locally on your device is not affected, so the app keeps working without an account, exactly as it does before you register. To remove that data as well, delete the decks in the app or uninstall it.

Error reports and feedback are separate. Crash reports carry no account identifier and are therefore not part of the account deletion; they expire on the schedule in §7. If you submitted the in-app feedback form, the email address you entered there is likewise retained under §7 — write to us if you want it removed sooner.

If you can no longer reach the in-app option — because you uninstalled the app, or cannot sign in — send a request from the email address the account uses to info@stonemiller.eu and we will delete it for you.

9. Your Rights (GDPR Art. 15–22)

You have the right to:

To exercise these rights, contact us at info@stonemiller.eu.

10. Supervisory Authority

You may lodge a complaint with the data protection authority of your EU member state. For the controller's place of residence (Germany), the competent authority is the State Commissioner for Data Protection of the respective federal state.

11. Security

All cloud-synced data is transmitted via HTTPS/TLS. Passwords are hashed by Supabase's authentication service (bcrypt-based) and never stored in plain text. Row-level security (RLS) ensures that each authenticated user can access only their own data.

12. Children's Privacy

Factstore is a learning app that can be used by learners of any age, including children, typically under the guidance of a parent or teacher. The app does not require a real-world identity: profiles within the app may use any name or nickname. When a parent or guardian enables cloud sync, they act as the data controller for any child profiles they create; no data is transmitted unless cloud sync is explicitly enabled.

13. Changes to This Policy

We may update this policy as the app evolves. Material changes will be announced in the app or on this page. The “Last updated” date above reflects the current version.

14. Contact

For any privacy-related questions, please contact info@stonemiller.eu.