FlashRun Privacy Policy

Last updated: October 9, 2026

This policy covers the FlashRun app for iPhone and the flashrun.io website.

Your library

Your decks, cards, pictures, notes, saved articles and scans, review history, and settings are stored on your iPhone. If iCloud is on for FlashRun, they sync through your own iCloud account, which we can’t read.

FlashRun backs up your library automatically to a FlashRun folder in iCloud Drive, or on your iPhone if iCloud Drive is off. Backups made by the FlashRun app aren’t encrypted, and each one records your iPhone’s name, model, and iOS version, and your install ID.

AI features

Mnemonic and concept image prompts, Create with AI (including deck chat and Add Cards with AI), and Get Root and Get Wazn send only the text they need: the word and its meaning, what you type, and, for Create with AI, your chosen languages and level, some common words you already have in your library, and the deck you’re adding words to. These requests go through our relay to Anthropic, our AI provider. The relay removes your install ID and device key first, so Anthropic receives only the text. FlashRun asks before your first AI request, and you can choose All AI, On-device only, or Off at any time in Settings ▸ Data ▸ AI & Privacy. Studying and sync never send anything to an AI service.

If you use your own Anthropic API key, it’s sent with each request, so Anthropic can link those requests to your account. Our relay doesn’t store it. The key stays in your iPhone’s keychain even after you delete the app, so remove it in Settings ▸ Data ▸ AI & Privacy first.

Image creation, translation, voices, and some image prompts run on your iPhone or through Apple. If Image Playground offers another provider’s style and you use it, that provider receives your prompt.

What we receive and keep

FlashRun gives each install a random ID that isn’t based on you or your device. The app sends it, with the app and iOS version, to our relay with AI requests and a daily update check. We use it to apply fair-use limits, and we don’t know who it belongs to unless you email us.

We keep:

• The install ID and a device key that proves the app is genuine, until you ask us to delete them.
• Monthly AI usage counts, while we need them for monthly limits.
• Logs of requests and errors, which include your Support ID and IP address, for up to 7 days.
• Emails you send us, until you ask us to delete them.

We never store your text, the AI’s answers, or your API key. All traffic uses HTTPS. No system is perfectly secure, which is why we keep so little.

Other information

• Motion: AirPods head motion, and your iPhone’s motion to tell a nod from a bump, are read as they arrive and are never stored or sent.
• Web pages you share: FlashRun loads the page from its website to save its text, so that site, and any services it uses, sees your IP address, as in any browser.
• Purchases: Apple handles payment. We only learn whether your subscription is active.
• Crash reports and App Store statistics: if you’ve chosen to share with app developers in iOS Settings, Apple sends us crash reports and anonymous usage statistics.
• Links: dictionary sites (RAE, Etymonline, and ejtaal.net) and links you’ve saved open inside FlashRun, under those sites' own privacy policies.
• Support email: FlashRun adds a summary (app and iOS version, iPhone model, plan, deck and card counts, languages, and your Support ID, the start of your install ID) and a log of recent app activity. Neither includes card text or deck names, and you can read or remove both before you send.

How we use and share data

We use this information only to run and improve FlashRun, apply fair-use limits, prevent abuse, and answer your emails and customer support requests. We share it only with these providers, as far as FlashRun needs: Apple (iCloud, App Attest, Apple Music, purchases), Cloudflare (relay and website), Anthropic (AI features), and Google (support email). Each provider protects your information under its own privacy terms, at least as well as this policy does. We don’t sell personal information or use it for advertising.

We may disclose information if the law requires it. If FlashRun LLC is sold or merged, this information may transfer to the new owner under this policy.

Deleting your information

Delete cards and decks in the app, FlashRun’s iCloud data in iOS Settings ▸ [your name] ▸ iCloud, and backups in the Files app. To have the relay’s records or your emails deleted, write to support@flashrun.io with your Support ID.

Children

FlashRun isn’t directed at children under 13, and we don’t knowingly collect their information. If you believe a child has sent us information, write to us and we’ll delete it.

Outside the United States

Our relay runs on Cloudflare’s global network and Anthropic processes AI requests mainly in the United States, so your information may be processed outside your country.

If you’re in the EU or UK, this is why we’re allowed to use your information:

• AI request text: you agreed when FlashRun asked before your first AI request. You can withdraw that at any time by turning AI off in Settings ▸ Data ▸ AI & Privacy.
• Relay records: we need them to run FlashRun and prevent abuse.
• Emails: you wrote to us, and we need them to reply.

You can ask what data we hold about you, have it corrected or deleted, object to its use, or complain to your data protection authority.

Changes

We’ll post changes here and update the date above. Changes take effect when they’re posted. If a change means new information leaves your iPhone, we’ll post it before releasing the version that sends it.

Contact

FlashRun LLC · support@flashrun.io