Privacy Policy

Effective date: October 24, 2026

Munki Flashcards ("Munki", "the app") is a flashcard study app. This policy explains what data the app handles, where it goes, and how you can delete it. Munki is designed to work fully offline and without an account; signing in is always optional.

What stays on your device

Everything you create in Munki — decks, cards, images you attach to cards, review history, study sessions, streaks, and settings — is stored in a database on your device. If you never sign in, your study content never leaves your device. If you uninstall the app, your local data is deleted with it, following your operating system's normal behavior.

Accounts and sync (optional)

If you create an account — with Google, Sign in with Apple, or an email sign-in link — we collect and store:

• Account identity: a user ID, plus the email address and name provided by your sign-in provider (or the email you entered for the sign-in link).
• Study data: your decks, cards, card scheduling state, review history, and study sessions, synced to our servers so your data is backed up and available on your other devices.

Synced data is stored with Supabase (PostgreSQL). Every record is access-controlled so only your account can read or write it (row-level security on your user ID). When the same item is edited on two devices, the most recently edited version wins. Deleting the app from a device does not delete your cloud data — sign back in to restore it.

AI features

AI features — generating a deck from a topic or from your notes or documents, and the "Explain more" chat on a card — require an account and are covered by a free monthly allowance with a fixed limit.

When you use an AI feature, the text involved — the topic you type, the notes or document text you provide, or the card you are asking about — is sent through our servers to Meta's model API, which returns the generated cards or explanation. That text is processed only to produce the response you asked for. We do not sell it, share it for advertising, or use your study content to train models. Please don't include sensitive personal information in AI prompts.

Anonymous usage analytics

To understand which features people use and to improve the app, Munki collects anonymous usage analytics through PostHog (US cloud). This covers:

• App interactions — which screens are viewed and which features are used (for example, a deck was created, a study session finished, a card was graded), described only with counts, modes, and grades.
• Device or other IDs — a random identifier created on your device for your installation of the app. It is not your name, email, or account identity, and no advertising ID is used.
• Diagnostics — basic information reported with those events, such as app version and device model.

Analytics events never include your study content: no deck titles, no card questions or answers, and no search text. Analytics are anonymous and are not linked to your account identity, even if you sign in. Session recording/replay is not used. You can turn analytics off at any time in Settings → Privacy → Usage analytics; collection stops immediately and stays off until you turn it back on.

Voice input

If you use the microphone button to dictate card text, your speech is processed by your device's built-in speech-recognition service. We do not receive, record, or store your audio.

What we never do

• No advertising, and no advertising identifiers.
• We never sell your data, and never share it with third parties for marketing.
• No location data and no contacts access.

Deleting your data

• Delete your account: Settings → Danger zone → Delete account. This permanently erases your account and all synced data from our servers, and wipes the app's local data. This cannot be undone.
• Reset local data only: Settings → Danger zone → Reset all data erases the on-device database. While signed in, your cloud data will sync back down on the next sync — use Delete account for a full wipe.
• Analytics data: to request deletion of the anonymous analytics tied to your installation, email us at the address below. Requests are completed within 30 days.

Children

Munki is not directed at children under 13, and we do not knowingly collect their data. The anonymous analytics described above are not linked to any child's identity, because they are not linked to anyone's identity.

Changes to this policy

If a future version of the app adds a new data practice, this policy will be updated before that version is released, with the new effective date noted above.

Contact

Questions about this policy, or a data request: hello@munki-cards.com