Privacy policy — Flash Feed

Last updated: 4 October 2026

The short version

Flash Feed doesn't ask for your name, email or any account, and has no analytics or ads. Your decks, cards and progress stay on your iPhone. If your phone can't make cards itself, or you choose the server, the text of the page you're making cards from is sent to our server, turned into cards, and not stored or logged. To keep fair use fair, the app sends a random install code, not linked to you, your Apple ID or your device's advertising ID, and we keep a daily and monthly page count against it for up to 40 days. To check that a request really comes from the Flash Feed app, the server also keeps a public key that Apple's App Attest created for your copy of the app (for up to 60 days after you last make cards), and it holds no name or account. Our server runs on Cloudflare, which sees your IP address to deliver the request.

What stays on your device

• The text you scan or paste. Photographs of pages are read on your phone and are not kept after the cards are made. The text is stored on your phone; whether it is also sent to our server is described under How cards are made.
• The cards and decks you make or import, and your review history.
• Your streak, XP, level and badges.
• Your settings, including reminder preferences and quiet hours.

All of it lives in the app's own storage on your iPhone. Deleting the app deletes all of it.

How cards are made

There are two ways, and the app asks you before it uses the second.

• On your iPhone, with the AI model built into it (Apple Intelligence), on an iPhone that supports it. The text never leaves the device.
• On our server, when your phone can't do it or you say yes to "Use the server". The first time, a screen explains this and asks. You can turn it off at any time in Settings, and cards you have already made keep working. Writing cards by hand needs neither.

What reaches our server — only if you use it

• The text of the page you are making cards from (read from your photo on your phone first — photos are never sent). It is passed to an AI model to write the cards and is not stored or logged by us.
• A random install code, made by the app the first time it needs the server. It isn't your name, your Apple ID or your device's advertising ID, and it doesn't say anything about you. We keep a count of pages made against it, per day (2 days) and per month (40 days), so that nobody can run up the bill — that is all it is used for.
• An App Attest key, so the server can tell that a request comes from the real Flash Feed app on a real iPhone rather than from a script. The private half stays in your iPhone's Secure Enclave and never leaves it; the server keeps only the public half and a counter, next to your install code, until 60 days after you last made cards. It says nothing about you and is not an account.
• Your IP address, which any request to any website reveals. Our server runs on Cloudflare (Workers and Workers AI), which handles the request on our behalf and sees it; our code doesn't read or keep it. What Cloudflare does as our provider is governed by its own terms.

Never sent: your photos, your decks and cards, your review history, your streak, your name, email or location.

Notifications

Reminders are scheduled by the app on your device. Nothing about them is sent anywhere. The app only asks for notification permission when you turn reminders on, and you can turn them off at any time in Settings.

The purchase

Flash Feed is free to use. Studying is always free, and you can make up to 30 cards a month from pages or imported from a file or a friend's deck at no charge; writing cards by hand is never limited. Two subscriptions, monthly and annual (the annual with a 7-day free trial), remove the monthly limit. Purchases are handled by Apple: we never see your payment details, and we receive only what Apple tells us about whether a subscription is active. The app keeps a count of the cards you have made this month on your own device (in the Keychain, so that deleting the app does not reset it); it is never sent to us.

Sharing

If you use "Share my streak", the app renders an image of your own numbers — streak, level, cards reviewed, best combo — and hands it to the iOS share sheet. It contains no deck names and no card text. If you share a deck's progress, the image or PDF holds counts and percentages and, unless you switch it off, the deck's name — never a card's words. If you share a deck with a friend, the file contains the deck's cards, because that is what you are sending. In every case the app hands the result to the iOS share sheet, and where it goes from there is entirely your choice.

Children

Flash Feed is made for a general audience and is rated 4+. It is not placed in the App Store's Kids Category. There is no account to create, no profile, no messaging and no way for anyone to contact you through the app, and it never asks anyone's age or name. The server route described above is available to every user.

Reporting a problem with a card

Report a problem on a card opens an email to us in your own mail app, with the card's question, answer and source quote filled in so we can see what you saw. Nothing is sent until you press send, you can edit or delete any of it first, and what we receive is what you send, together with your email address.

Changes

If a future version sends more off the device than is described above, this policy will be updated and the app will ask before doing it.

Contact

Write to support@flashfeed.app.