Privacy Policy

1. Introduction

Welcome to MemoSpark ("we", "our", "us"). MemoSpark is an educational mobile application designed to help children and families learn through flashcards and structured memorization techniques. We are committed to protecting your privacy and ensuring the safety of children who use our app.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application MemoSpark, available on iOS and Android platforms. Please read this policy carefully. By using MemoSpark, you consent to the practices described herein.

2. Data We Collect

We collect the following types of information:

• Account Information: Email address, username, and password (securely hashed and never stored in plain text).
• Learning Data: Flashcard decks you create, cards, quiz scores, and learning progress.
• Authentication Data: If you choose to sign in with Google, we receive basic profile information from Firebase Authentication.
• Push Notification Tokens: If you enable notifications, we store your Expo Push Token to send reminders.
• AI Usage: When using AI-powered flashcard generation, your prompts are processed to create educational content.
• Device Information: Basic device identifiers for app functionality and crash reporting.

3. How We Use Your Data

We use the collected information for the following purposes:

• To provide and maintain the MemoSpark service.
• To personalize your learning experience and track your progress.
• To authenticate your account and keep it secure.
• To send push notifications (study reminders) if you opt in.
• To generate AI-powered flashcards based on your requests.
• To display non-personalized advertisements.
• To improve our app and develop new features.
• To respond to your inquiries and provide customer support.

4. Advertising & AdMob

MemoSpark uses Google AdMob to display advertisements. In compliance with COPPA (Children's Online Privacy Protection Act) and Google's policies for child-directed apps, we only serve non-personalized ads.

Non-personalized ads do not use personal data for ad targeting. They are based on contextual information such as the general content of the app, rather than user behavior or profiles.

We have configured AdMob to treat all users as children under age, ensuring COPPA compliance across the entire app experience.

5. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing: Request limitation of how we use your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing of your personal data.
• Right to Withdraw Consent: Withdraw consent at any time where we rely on consent.

To exercise any of these rights, please contact us at the email address provided below. We will respond within 30 days.

6. Children's Privacy (COPPA Compliance)

MemoSpark is designed for use by children with parental supervision. We comply with the Children's Online Privacy Protection Act (COPPA) and applicable Florida state laws regarding minors' privacy:

• We do not knowingly collect personal information from children under 13 without verifiable parental consent.
• Parental supervision is recommended for all users under 13 years of age.
• We display only non-personalized, COPPA-compliant advertisements.
• We do not share children's personal information with third parties for marketing purposes.
• Parents can review, delete, or refuse further collection of their child's data by contacting us.

If you are a parent or guardian and believe your child has provided personal information without your consent, please contact us immediately, and we will take steps to remove such information.

7. Data Security

We implement industry-standard security measures to protect your data:

• Passwords are hashed using secure algorithms (never stored in plain text).
• Data transmission is encrypted using HTTPS/TLS.
• We use Firebase's secure infrastructure for authentication and data storage.
• Access to personal data is restricted to authorized personnel only.
• We conduct regular security reviews and updates.

8. Cookies and Similar Technologies

The MemoSpark mobile application does not use traditional browser cookies. However, we may use similar technologies such as local storage and Firebase Analytics to improve app performance and understand usage patterns. These technologies do not track users across other apps or websites.

9. Third-Party Services

We use the following third-party services that may process your data:

• Firebase (Google): Authentication, database, and analytics.
• Google AdMob: Non-personalized advertising (COPPA compliant).
• Expo: Push notification delivery.
• OpenAI: AI-powered flashcard generation (prompts only, no personal data).

Each third-party service has its own privacy policy. We encourage you to review them. We only share the minimum data necessary for these services to function.

10. Data Retention

We retain your personal data only as long as necessary to provide our services and fulfill the purposes outlined in this policy. Account data is retained until you request deletion. Learning data (decks, cards, progress) is retained as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy in the app and updating the "Last Updated" date. We encourage you to review this policy periodically. Continued use of MemoSpark after changes constitutes acceptance of the updated policy.