Just R
EN
Download on the App Store
Download on the App Store

Privacy Policy

Effective: Last updated:

Contents

This Privacy Policy explains what personal data the Just R app (“Just R”, “the App”) and the website just-r.app collect, why, who receives it, and the choices you have. Just R is listed on the App Store as “Memorize Flash Card Maker” and under localized names in other countries.

1. Summary

Data When Why Shared with
Account details (Apple, email or phone sign-in) Only if you sign in Your account, syncing your decks Google Firebase
Your decks, cards and images Stored on your device; in the cloud when you sign in The App’s core function and sync Google Firebase
Card text you send to AI features Only after you allow AI features Generating images, voice and context OpenAI
Usage data, diagnostics, device identifiers When you use the App Analytics, crash reports, improving the App Google Firebase, Mixpanel, Meta
Advertising identifiers and ad interactions Free version Showing ads, measuring them Google AdMob, Meta
Purchase information When you buy Unlocking Premium and decks Apple (payment), analytics

We do not sell your personal data for money. Personalized advertising may count as “sharing” or “selling” under some US state laws; see Your Rights and Your Privacy Choices.

2. Who We Are

Just R is developed and published by an independent software developer based in Ukraine, the seller shown on the App Store listing of Just R (“we”, “us”). We are the controller of the personal data described in this policy. Contact: support@just-r.app.

3. What This Policy Covers

This policy covers the Just R app on iPhone, iPad, Mac with Apple silicon and Apple Vision Pro, the website just-r.app, and emails you send us. Apple’s handling of your data (the App Store, payments, iCloud, Siri dictation and speech recognition) is governed by Apple’s own privacy policy. Third-party services we use are governed by their own policies, linked in section 14.

4. Your Account and Sign-In

You can sign in with Sign in with Apple, an email address and password, or a phone number. Sign-in is handled by Google Firebase Authentication.

  • Sign in with Apple: we receive a stable Apple user identifier and, if you choose to share them, your name and email address. You can hide your email; Apple then gives us a private relay address.
  • Email: your email address and a password. Passwords are stored by Firebase in hashed form; we never see them. We may send you emails needed for the account, such as address confirmation or password reset.
  • Phone: your phone number, which is verified with a one-time SMS code sent by Firebase.

Your account gets a user ID. We use it to keep your synced decks together and to link analytics events to your account (see section 9).

5. Your Decks and Cards

Everything you create in Just R, including categories, decks, cards, translations, notes, tags, colors, images, reminder schedules and your repetition history, is stored on your device.

When you are signed in and sync is on, this content is also stored in Google Cloud Firestore and Cloud Storage for Firebase under your user ID, so that it is available on your other devices and after you reinstall. We access it only to provide the service, to fix problems you report, or when the law requires it.

When you export data to a CSV file or share a card, the file goes wherever you choose to send it.

6. AI Features (OpenAI)

Just R offers optional AI features: generating an image for a card, reading text aloud with an AI voice, and finding the context of a word or phrase. They are provided by OpenAI.

  • Only with your permission. Before you first use an AI feature, the App asks whether to allow AI features. If you decline, nothing is sent to OpenAI. You can change this choice in the App’s settings at any time.
  • What is sent: only the text needed for the request, such as the words of the card or the description you type for an image. Your name, email address, phone number and account details are not sent. Please do not put personal information about yourself or others into cards you use with AI.
  • How: the request goes from your device to the OpenAI API. OpenAI returns the generated image, audio or text, which is saved with your card on your device (and in your synced data if you are signed in).
  • OpenAI’s use of the data: OpenAI processes the request to provide the result. Under OpenAI’s API data policies at the time of writing, data sent through the API is not used to train OpenAI’s models by default and may be kept for up to 30 days to monitor for abuse. See OpenAI’s privacy policy.

AI output can be inaccurate. Check translations and context before you learn them.

7. Device Permissions

Just R asks for access only when you use a feature that needs it. You can change every permission in your device’s Settings.

  • Microphone and speech recognition: to dictate Record sentence cards. Apple’s speech recognition turns your speech into text, and Apple may process the audio under its own privacy policy. Just R keeps only the resulting text; it does not save or upload audio recordings.
  • Calendars: only if you choose Calendar reminders, to create and remove the reminder events for your decks. We do not collect your other calendar events.
  • Photos: to add a picture from your library to a card. Only the photos you pick are used.
  • Notifications: to deliver reminders.
  • Tracking: see section 11.

8. Reminders and Notifications

Spaced repetition reminders are scheduled locally on your device (or as events in your Calendar). We also use Firebase Cloud Messaging to send occasional push notifications, which gives your device a push token. You can turn notifications off in Settings → Notifications → Just R.

9. Analytics and Diagnostics

To understand how Just R is used, find bugs and improve the App, we collect:

  • Usage data: screens you open and features you use (for example creating a deck, starting a study session, opening the purchase screen), and purchase events.
  • Device and app information: device model, operating system and app version, language, approximate region derived from your IP address, and app-specific identifiers such as the Firebase installation ID and the identifier for vendor (IDFV).
  • Diagnostics: crash reports and performance measurements.

We use Firebase Analytics, Firebase Crashlytics, Firebase Performance Monitoring and Firebase Remote Config (which lets us change settings in the App without an update), all provided by Google, and Mixpanel. When you are signed in, analytics events are linked to your user ID.

We also use the Meta (Facebook) SDK to record app events, such as installs, app launches and purchases, so we can measure our advertising on Meta’s platforms, including through Meta’s Aggregated Event Measurement. Advertising identifiers are only used for this when you allow tracking.

10. Advertising

The free version of Just R shows ads from Google AdMob. To show and measure ads, and to prevent fraud, AdMob may collect your IP address, device information, app-specific identifiers, ad interactions and, only if you allow tracking, your device’s advertising identifier (IDFA).

  • Consent: where the law requires it (for example in the EEA, the UK and Switzerland), the App shows Google’s consent form (Google User Messaging Platform) before personalized ads are used. You can reopen it at any time in the App under Ads privacy settings.
  • Non-personalized ads: if you don’t allow tracking or don’t consent, you still see ads, but they are not based on your activity in other companies’ apps and websites.
  • Attribution: Apple’s SKAdNetwork may be used to measure ad installs without identifying you.

Learn how Google uses data from apps that use its services at policies.google.com/technologies/partner-sites.

11. Tracking and App Tracking Transparency

On iPhone and iPad, Just R asks for permission to track you through Apple’s App Tracking Transparency prompt. “Tracking” means linking data from Just R with data from other companies’ apps and websites for advertising or measurement, or sharing it with data brokers. If you allow it, usage data and diagnostics may be used by AdMob and Meta for personalized advertising and its measurement. If you choose Ask App Not to Track, we and our partners do not use your advertising identifier and do not track you. You can change this at any time in Settings → Privacy & Security → Tracking.

12. Purchases

Subscriptions and in-app purchases are processed by Apple. We never receive your payment card details. Apple gives the App the information needed to unlock what you bought (product, purchase date, status and renewal state). We record purchase events in our analytics to understand which plans people choose.

Where the EU or UK General Data Protection Regulation (GDPR) or similar laws apply, we rely on these legal bases:

  • Contract: to provide your account, sync, purchases and the features you ask for, including AI requests you start.
  • Consent: for personalized advertising and tracking, AI features, notifications, calendar access and other device permissions. You can withdraw consent at any time; this does not affect processing that happened before.
  • Legitimate interests: to keep the App working and secure, fix crashes, understand usage in order to improve the App, and show non-personalized ads that fund the free version. We balance these interests against your rights, and you can object (see section 20).
  • Legal obligation: to keep records required by law and to respond to lawful requests.

14. Who Receives Your Data

We share personal data only with the service providers below, who process it to provide their service to us, and when the law requires it. We do not sell your personal data for money.

Recipient What for Privacy policy
Google (Firebase Authentication, Cloud Firestore, Cloud Storage, Analytics, Crashlytics, Performance Monitoring, Cloud Messaging, Remote Config) Account, sync, analytics, diagnostics, push notifications policies.google.com/privacy
Google (AdMob, User Messaging Platform) Ads and ad consent policies.google.com/privacy
Mixpanel Product analytics mixpanel.com/legal/privacy-policy
Meta Platforms (Facebook SDK) App events and ad measurement facebook.com/privacy/policy
OpenAI AI images, voice and context, only after your permission openai.com/policies/privacy-policy
Apple App distribution, payments, Sign in with Apple, speech recognition apple.com/legal/privacy
Cloudflare Hosting this website and routing emails to support@just-r.app cloudflare.com/privacypolicy

We may also disclose data if required by law, to protect the rights and safety of users or others, or as part of a sale or transfer of the App, in which case this policy continues to apply to your data.

15. International Transfers

We are based in Ukraine, and our providers process data in the United States and other countries. Where data leaves the EEA, the UK or Switzerland, we rely on the safeguards our providers offer, such as the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

16. How Long We Keep Data

  • Account and synced content: until you delete your account. After deletion, it is removed from our active systems within 30 days; copies in providers’ backups expire on their own schedules.
  • Analytics and diagnostics: for the retention periods set in each service (for example, up to 14 months for user-level Firebase Analytics data and 90 days for Crashlytics crash reports), and for no longer than 24 months for Mixpanel events, after which data is deleted or kept only in aggregate.
  • Advertising data: kept by Google and Meta under their own policies.
  • Purchase records: as long as needed for accounting and tax law.
  • Support emails: up to 3 years after the conversation ends, so we can help with follow-up questions.

17. Deleting Your Account and Data

To delete your account, open Settings in Just R and tap Remove account. This deletes your Firebase account and the decks, cards and files synced to it. Content stored only on your device is removed when you delete the App.

You can also email support@just-r.app from the address linked to your account (or tell us your sign-in method) and ask us to delete your account and data. To ask for analytics data linked to your account to be deleted, email us as well.

18. Security

Data is sent over encrypted connections (HTTPS/TLS), and our providers encrypt stored data. Access to your synced content is limited to your account. No system is perfectly secure, so please use a strong password and keep your device locked.

19. Children

Just R is rated 4+ on the App Store because it contains no objectionable content, but it is a general-audience app and is not directed to children under 13 (or the minimum age of digital consent in your country, up to 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

20. Your Rights

20.1 Everyone

You can ask us for a copy of your personal data, to correct it, or to delete it. You can export your cards to CSV in the App at any time. Email support@just-r.app; we answer within 30 days and may need to confirm that the account is yours.

20.2 EEA, UK and Switzerland (GDPR)

You have the right to access, rectify and erase your data, to restrict or object to processing (including processing based on legitimate interests), to data portability, and to withdraw consent at any time. You can also complain to the data protection authority in your country.

20.3 California and other US states

Residents of California (CCPA/CPRA) and other states with privacy laws have the right to know what personal data we collect, use and disclose; to delete and correct it; and to opt out of the “sale” or “sharing” of personal data for cross-context behavioral advertising. We do not sell personal data for money, but personalized ads through AdMob and ad measurement through Meta may be considered “sharing”. To opt out, choose Ask App Not to Track, use Ads privacy settings in the App, or email us. We will not discriminate against you for exercising your rights. We do not use or disclose sensitive personal information for purposes that require a right to limit.

20.4 Ukraine

Under the Law of Ukraine “On Personal Data Protection”, you have the right to know how your data is processed, to access, correct and delete it, to object to processing and to complain to the Ukrainian Parliament Commissioner for Human Rights or to a court.

21. Your Privacy Choices

  • Tracking: allow or deny when asked, or later in Settings → Privacy & Security → Tracking.
  • Ad consent: Ads privacy settings in the App.
  • AI features: allow or decline when asked; change it in the App’s settings.
  • Notifications, calendars, microphone, photos: Settings → Just R on your device.
  • Account: sign out, or delete your account in the App’s settings.
  • Do Not Track: the App does not respond to browser Do Not Track signals; the website has no tracking to switch off.

22. This Website

just-r.app is a static website hosted by Cloudflare. It sets no cookies, has no ads and no third-party trackers, and loads no scripts other than structured data. Cloudflare processes your IP address and request details to deliver the pages and protect the site from attacks, and may keep these logs for a short time. If we turn on Cloudflare Web Analytics, it measures visits without cookies and without identifying you. Links to the App Store take you to Apple, whose privacy policy applies there.

23. Changes to This Policy

We may update this policy when the App or the law changes. The “Last updated” date at the top shows the latest version. If a change materially affects how we use your data, we will tell you in the App or on this website before it takes effect and, where required, ask for your consent again.

24. Governing Law

This policy is governed by the laws of Ukraine, without depriving you of the protection of the mandatory data protection laws of the country where you live.

25. Contact

Questions or requests about your privacy: support@just-r.app, subject “Privacy request”.