Privacy Policy

Data controller

The data controller responsible for your personal data is the Shale Team, operating within the European Union. You can contact us at leinonen.elias@gmail.com.

What data we collect

When you use the Shale app, we collect your email address, name (if provided by your authentication provider), and a unique identifier from Apple or Google when you sign in. We also collect the flashcard decks and cards you create, as well as your study progress and usage metrics to provide the app's core functionality.

Why we use your data

We use your data to provide, maintain, and improve the Shale application. This includes securely syncing your flashcards and progress across devices. Our legal basis for this processing is the performance of a contract with you (GDPR Article 6(1)(b)).

How long we keep your data

We retain your account data and flashcards as long as your account remains active. If you choose to delete your account via the Profile tab in the app, all associated data (flashcards, progress, and personal info) is permanently and immediately deleted from our servers.

Data processors

Your data is stored securely in MongoDB Atlas and hosted on Render. We use Google Analytics and Glyphex to measure website traffic. In the mobile app, we use PostHog for analytics and optional session replays (opt-in only). For AI flashcard generation and prompt analysis, we securely transmit data to OpenAI. For processing payments and managing auto-renewable subscriptions, we use Apple (StoreKit) and RevenueCat. We do not sell your personal data to third parties.

Screen Time API (Family Controls)

Shale utilizes Apple's Screen Time API (Family Controls) strictly for the purpose of blocking distracting apps so you can focus on studying. No data regarding your app usage, blocked apps, or screen time habits is ever transmitted to our servers, sold to third parties, or used for advertising. All Screen Time data remains strictly local and secure on your device in compliance with Apple's developer guidelines.

Your GDPR rights

If you are in the European Economic Area or UK, you have the right to access, rectify, erase (Right to be Forgotten), restrict, or port your personal data, and to withdraw consent at any time. You can permanently delete your account directly inside the Shale mobile app.

To exercise any other rights, email leinonen.elias@gmail.com. We will respond within 30 days.

Changes to this policy

We may update this Privacy Policy as Shale evolves. The latest version will always be available on this page.