Effective date and last updated: 6 October 2026.
This policy covers the release versions of Repetition Rebels distributed through the Apple App Store and Google Play.

The short version

• We collect as little as possible: your flashcard decks, study history and settings stay on your device. No account needed.
• Your data only goes elsewhere when you use an optional feature: AI (straight to the AI service you picked, not to us), cloud sync with your own iCloud or Google Drive, or online content such as decks, images and links. Your device’s own backup, if enabled, may also keep a copy.
• We only receive what you send us yourself, such as support emails (you review them before sending), plus purchase records from Apple or Google (never your card details).
• No ads, no tracking, and we never sell or share your personal data. Apple and Google may give us anonymous statistics, such as download counts and crash reports, from users who agreed to share them.

Your data and choices

Feature	What happens with your data
Studying	Flashcard decks, progress and settings are processed locally. We run no back-end servers that collect your study data.
Optional AI: manual mode	You copy prompt instructions from the app and paste them into an AI app or website of your choice. You decide whether to attach PDFs or other context documents there. Repetition Rebels does not send these to the AI service; that service handles what you submit under its own privacy policy.
Optional AI: API mode	Only after your explicit opt-in, the app sends prompts and the content of any context files you attached (documents or images) directly to your chosen AI service, not through Altalogix servers. If these files contain sensitive or private information, it may be disclosed to that service. If you supply an API key, it is stored in secure on-device storage (iOS Keychain or Android EncryptedSharedPreferences) and sent directly to the AI service to authenticate requests.
Optional cloud sync	Study data goes to your Apple iCloud or Google Drive account to synchronise devices, not to Altalogix. Disabling sync stops synchronisation but does not delete existing cloud copies.
Online content	Downloading flashcard decks, loading remote images or opening links connects directly to the relevant host, which receives your IP address and standard request information.
In-app purchases	Apple or Google handles payment. The app uses purchase information to unlock features. Altalogix receives transaction reports (such as product, date, country and order reference) from Apple or Google for accounting, tax and refund handling, but not your payment-card details.
Support	We receive your email address and what you send. The contact form adds OS/app versions, build and available deployment details, and a support reference to your draft. Detailed diagnostics and logs are opt-in and may include device info, and technical or affected content information. You can inspect the draft email and attachments before sending them. Note that without enough information, we may be unable to resolve your issue.

Basic offline study requires no personal data to be sent to Altalogix. Optional features need the information described above to work.

You can stop future sharing by disabling cloud sync or choosing not to start further AI requests. This does not delete data already sent. To request deletion of support correspondence, email support [at] altalogix [dot] be; manage existing cloud copies and AI submissions with the relevant provider.

Why we process data

Our GDPR legal bases are contract for processing necessary to provide requested app features (Article 6(1)(b)), legitimate interests in answering questions and resolving problems for support and submitted diagnostics (Article 6(1)(f)), and legal obligation where processing is required by law (Article 6(1)(c)).

Flashcard study scheduling runs locally. We do not make automated decisions about you that have legal or similarly significant effects.

Recipients and international transfers

We use secure EU-hosted email services to receive and answer support emails. We may disclose information where legally required.

Altalogix itself does not transfer your personal data outside the European Economic Area (EEA). When you use optional features, your device connects directly to services you choose (such as Apple iCloud, Google Drive, AI services or content hosts), some of which may process data outside the EEA. Those providers are responsible for their own international transfers, typically relying on an adequacy decision such as the EU-U.S. Data Privacy Framework or on Standard Contractual Clauses. See Apple’s privacy policy, Google’s privacy policy, and your chosen AI service’s or content host’s policy for their own processing, retention and international transfers. AI intermediaries may forward requests to model providers. Altalogix remains responsible for its own processing.

Tracking and US privacy disclosures

We do not track your activity across other companies’ apps or websites, or use advertising or cross-service tracking SDKs.

• California / US Privacy Rights: Altalogix BV does not sell your personal information, nor do we share your personal information for cross-context behavioural advertising (as defined under the CCPA/CPRA), and we have not done so in the preceding 12 months.
• Do Not Track & Opt-Out Signals: Because the app does not track users or collect analytics across third-party websites, it does not alter its behaviour in response to web browser Do Not Track (DNT) or Global Privacy Control (GPC) signals.

Children’s privacy

Repetition Rebels is not directed to children under 13 (or 16 in the EEA/UK), and we do not knowingly collect personal data from children. If you believe a child has provided us with personal information (for example, via support email), please contact us so we can delete it.

How long data stays

Uninstalling the app removes local study data stored directly in the app. However, operating system backup mechanisms (such as Android Auto Backup or iOS iCloud Backup), exported files, and cloud sync copies may preserve your data and restore it upon reinstallation. You can manage or delete these separately through your device or cloud service settings.

We keep support messages and submitted diagnostics while needed to investigate, resolve and follow up on your issue. Records needed for a legal obligation or dispute are kept only for as long as that purpose requires.

Your rights

Where applicable under GDPR or US state privacy laws, you can request access, correction, deletion, restriction or a portable copy of your personal data, and object to processing based on legitimate interests. Contact us below; we respond within one month (or 45 days where applicable under US state laws), explaining any lawful extension within that time. For another provider’s independent processing, contact them directly.

You can complain to the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), or another competent supervisory authority, including where you live or work in the EU/EEA.

Security

Your study data is stored on your device. It only leaves the device through optional features you turn on, or through your device’s own backup if you have enabled it (see How long data stays). Any API key you supply is kept in secure on-device storage. Deck previews don’t load remote images or open links by default, so previewing a deck doesn’t contact other hosts. Once you import a deck, content it links to may be loaded over the network, which shares your IP address with those hosts. No system is completely secure: only import decks from sources you trust, and avoid including sensitive information in AI prompts, context files or support attachments unless it is needed.

Changes

We may update this policy from time to time. When we make changes, we will update the effective date at the top of this policy. For material changes, we will also provide notice through our website, app store release notes, or within the app.

Who we are

Altalogix BV, a Belgian private limited company, is the controller for the processing it determines for Repetition Rebels and support.
Registered office: Karel Schurmansstraat 40, 3010 Kessel-Lo, Belgium.
Enterprise / VAT number: BE 0889.037.167.
Privacy questions and requests: support [at] altalogix [dot] be.
App support: support [at] repetitionrebels [dot] be