Legal

Privacy Policy

Summary

• My Reviewer is offline-first. Your study content is stored on your device in an encrypted database.
• No account is required, and we do not operate a server that holds your content.
• Optional cloud backup stores an encrypted copy in your own iCloud or Google Drive.
• Usage analytics and crash reporting are on by default. You can switch them off at any time in Settings under Privacy, and they stop immediately.
• Personalized ads are off unless you turn them on.

What stays on your device

Your reviewers, cards, attached images, audio and video, study history, quiz results and statistics are written to an encrypted database on your device. They are never sent to us. Uninstalling the app removes them.

Making cards: scanning, handwriting, AI — and dictation

Scanning a page, reading a photo or PDF, recognizing handwriting, and the card suggestions the app drafts for you all run on your device, using the model built into it. Your notes are not uploaded for any of them — not to us, and not to anyone else.

Dictation is the exception, because it uses your device's own speech recognition rather than ours. The app asks for on-device recognition first, so on hardware and languages that support it the audio never leaves your phone. Where the device cannot do that, Apple or Google process the audio on their servers to turn it into text. The app receives only the text; we never receive the audio. If you would rather nothing was sent, type the card instead.

Cloud backup (optional, Pro)

If you turn on backup, the app uploads a copy of that already-encrypted database to storage you control: an app folder in your iCloud Drive on iPhone, iPad and Mac, or a private per-app folder in your Google Drive on Android. We never receive the file and we never hold the key that opens it.

On Android, signing in with Google tells the app which account to upload to. The app requests only the app-data scope, which cannot see, list or read any other file in your Drive. Your email address is used to perform that upload and is not stored by us or shared with anyone.

Analytics and crash reporting

Usage statistics and crash reports are collected by default from the first time you open the app. The app does not ask you first, and Settings under Privacy is where you control it: switching either off stops collection immediately and for good, on that device.

While collection is on, it is processed on our behalf by Google Firebase (Firebase Analytics and Firebase Crashlytics). Google acts as our processor and may process the data on servers outside your country.

What we receive, and nothing beyond it:

• An app-instance identifier generated by Firebase — not your name, email or account.
• Device model, operating system version and app version.
• An approximate region, derived by Google from your IP address.
• Your device's advertising identifier on Android.
• Which screens and features are used, and how long sessions last.
• One event recording that you reached a free-plan limit — which limit, and the number it stops at.
• If the app crashes: the error, the stack trace, and the device state at that moment.

It never includes your study content. No reviewers, cards, answers, hints, attachments, voice memos, search terms or quiz results are sent, whether collection is on or off.

There is exactly one exception, and only you can trigger it: if you tap Report on a card the AI suggested, the text of that suggestion is sent to us so we can see what it got wrong. Nothing else travels with it. If you have crash reporting switched off, the app opens your mail app instead, so the report is a message you send and can read first.

Analytics and crash data are kept for as long as our Firebase project's retention settings allow and are deleted after that. To have data associated with your installation removed sooner, turn collection off and email us at the address below.

Advertising

The free app shows ads supplied by Google AdMob. Ads are non-personalized by default. Personalized ads are shown only if you enable them in Settings and, on iOS, allow tracking when the system asks. In the EEA and the UK, Google's consent message decides what may be used before any ad is requested. Personalized ads may use your device's advertising identifier; non-personalized ads do not.

Pro removes ads entirely.

Live quizzing on your Wi-Fi

If you host or join a live quiz, the app connects directly to the other devices on the same local network. The display name you choose, the questions being played and your answers are sent to those devices so the game can run. Nothing goes through us, and nothing leaves the network.

Who else is involved

• Google Firebase — analytics and crash reporting, on by default and switchable off in Settings.
• Apple / Google speech recognition — only when you dictate, and only the audio you dictate.
• Google AdMob — ads in the free app.
• Apple and Google — process your purchase if you buy Pro. We never see your payment details.
• Apple iCloud / Google Drive — only if you turn on backup, and only into storage you own.

Children

My Reviewer is intended for people aged 13 and over. It is not directed to children and is not enrolled in the App Store Kids Category or Google Play's Designed for Families programme.

Your choices and deleting your data

• Delete individual reviewers, cards and attachments inside the app at any time.
• Uninstalling the app deletes the local encrypted database and everything in it.
• A cloud backup lives in your own iCloud or Google Drive. Delete it there, or turn backup off and remove the app folder, and it is gone.
• There is no account to close, because the app never asked you to create one.

Contact

Questions about privacy: Support, or email dev.puhgeh@gmail.com.

Changes to this policy

If this policy changes, the revised version is published on this page with a new date below.

Last updated: September 15, 2026.