Privacy Policy

Knowmad: Words & Flashcards
Effective Date: October 19, 2026

Oleksandr Baralei ("we," "us," or "our") built Knowmad: Words & Flashcards ("Knowmad" or "the App") as a commercial application. This Privacy Policy explains what information the App collects, what it does not collect, how user content is stored, and how users control analytics and app data.

By using the App, you agree to the practices described in this Privacy Policy.

Information Collection and Use

Knowmad does not require user accounts, registration, or authentication. We do not collect directly identifying information such as your name, email address, Apple ID, or account credentials. If you contact us by email, we receive your email address, as described in Support Requests and Bug Reports below.

Your content is private to you. Your PDF books and everything you create from them, including flashcards, saved words, known words, and study progress, are stored on your device and, if you are signed in to iCloud, synced through your personal iCloud account. We do not operate a server that stores this content, and we do not have access to your iCloud data.

If you choose to connect your own third-party AI provider key, certain AI features send text from your books and flashcards directly from your device to the provider you selected. This is optional, off by default, and described in AI Features below.

The App sends anonymous analytics events, as described below, to help us understand app usage and improve the product. You can turn this off at any time.

The App also downloads a list of available AI models from our website, as described in AI Features below.

Your Choices

Analytics is on by default. You can turn it off at any time in the App's Settings, under Privacy, by turning off Share Anonymous Analytics. When you turn it off, the App sends one last event recording that analytics was turned off and records no further events. Events recorded earlier that are still waiting to be sent, for example because your device was offline, may still be sent.

We do not track you across apps or websites and do not request the App Tracking Transparency prompt.

Your Books and Study Content

You can import PDF books into the App and create flashcards (with text and images), saved words, known words, and study progress from them.

This content remains on your device and, if you are signed in to iCloud, in your personal iCloud account. It is not visible to other users. We do not send PDF contents, PDF titles, filenames, flashcard text or images, saved words, selected text, or other study content to analytics.

iCloud Sync

When you are signed in to iCloud, the App syncs the following data through your personal iCloud account:

• Your PDF books, through iCloud Drive, unless you choose to store them on this device only.
• Your flashcards (including images), saved words, known words, book records (file name, language, and reading and study history), language preferences, and AI engine choices, through CloudKit.
• Your translation language settings, through iCloud key-value storage.
• Your AI provider key, if you add one, through iCloud Keychain (see AI Features).

iCloud and CloudKit are Apple services governed by Apple's Privacy Policy and your personal iCloud settings. We do not have access to your iCloud account or iCloud data.

You can delete books, folders, flashcards, saved words, and known words inside the App, and delete all books stored in iCloud from the App's storage settings. To remove all of the App's data from iCloud, use your device's iCloud storage settings.

AI Features

The App offers optional AI features, such as word definitions, example sentences, synonyms, word translation, and flashcard question generation and refinement. How these run depends on your device and your settings, and you are always in control of which engine is used.

On-device (Apple Intelligence)

On supported devices, these features can run on your device using Apple Intelligence through Apple's Foundation Models framework. This processing happens on your device. Your books, flashcards, saved words, and selected text are not sent to us or to any third-party AI provider. Apple Intelligence availability and operation are controlled by Apple and your device settings, and are governed by Apple's terms and privacy policies.

On-device translation

The App can translate a word you select using Apple's on-device translation. This processing happens on your device; the word is not sent to us or to any third-party AI provider. Downloading a language for offline translation is handled by Apple's system services.

Your own AI provider key (optional)

You may choose to connect your own account with a third-party AI provider, currently OpenAI or Google (Gemini), by entering an API key you obtain from that provider. This is entirely optional and is off by default. Before anything is sent, the App names the provider and asks for your permission on each device.

If you connect a key and use an AI feature with it, the App sends only what that feature needs, directly from your device to the provider you chose:

• For a word: the word, its part of speech, and the sentence it appears in, or the text you selected.
• For example sentences: the word and up to 20 words from your saved vocabulary in that language, so the examples can use words you already know.
• For flashcards: the text of the flashcard answer you are working on.

When you verify a key, the App sends a short test request to check that the key and model work. These requests do not go through any Knowmad server, and we never receive, store, or process the text you send, the results returned, or your API key.

Your API key is stored in your device's Keychain and, if you use iCloud Keychain, synced across your own devices through your Apple account. Removing a key deletes it from all your devices and stops new requests to that provider.

Content you send this way is handled by the provider you chose, under that provider's own terms and privacy policy, for example OpenAI's Privacy Policy or Google's Privacy Policy. You are responsible for your own account with that provider, including any usage charges, and that account is subject to the provider's own terms, which generally require the account holder to be an adult.

AI model list

To show which AI models you can choose, the App downloads a short list of models from our website, getknowmad.com, which is hosted by Cloudflare. The request contains no information about you, your books, or how you use the App. Like any web request, it shows your device's IP address, the time of the request, and basic technical details (app and system version) to the hosting provider. We do not use this to identify you.

Purchases and Subscriptions

Paid access is handled through Apple's App Store and StoreKit. Apple processes purchases and subscriptions. We do not receive or store your payment card number, bank account details, Apple ID password, or other payment credentials.

The App uses your App Store purchase and subscription status to unlock paid features, restore purchases, and show your subscription state. This happens on your device and is not sent to us, apart from the analytics events described below.

If analytics is on, the App sends two purchase-related events: when a subscription screen is shown (and which part of the App showed it), and when a new subscription is purchased (monthly or yearly). These events do not include payment card information, receipt data, Apple ID, book content, flashcard content, or other personal study content.

Analytics

We use the privacy-friendly analytics service TelemetryDeck (provider: TelemetryDeck GmbH, Von-der-Tann-Str. 54, 86159 Augsburg, Germany) to analyze anonymous app usage data. TelemetryDeck does not use the data for cross-app or cross-website tracking. For users in the European Union, this processing is based on our legitimate interest in understanding how the App is used so that we can improve it (Art. 6 para. 1 lit. f GDPR). You can object at any time by turning off Share Anonymous Analytics.

TelemetryDeck states that the data it processes is anonymized and does not allow conclusions to be drawn about personal information, that it stores no IP addresses (not in logs, not in its database), and that it uses no cookies or tracking technologies and no persistent identifiers that could be traced back to individuals. The source code of the TelemetryDeck SDK is open source and available on GitHub.

TelemetryDeck states that its app SDK data includes app-defined actions, a timestamp rounded to the nearest hour, device and app metadata, and optional metadata defined by the app publisher. By default, it also includes an anonymized user ID for each app installation. The App does not use that ID: every installation of the App sends the same fixed value in its place, so analytics events carry no device or user identifier.

Following TelemetryDeck's app privacy guidance for this setup, we disclose the App's analytics in App Store Connect only as Usage Data → Product Interaction, used for analytics, not linked to the user's identity, and not used for tracking.

What Analytics May Include

• Anonymous event names from a predefined catalog, such as app launched, study session completed, word saved, or subscription screen shown.
• Device model, operating system version, app version, build information, locale, time zone, region, screen properties, and system preferences such as language, appearance, and accessibility settings, plus similar app/device metadata.
• Whether Apple Intelligence is available on the device, whether an AI provider key is set up, and which AI provider is the default. Never the key itself or the model name.
• Session duration, the hour and day of the week, usage counters such as first-use date, number of sessions, and days the App was used, and feature usage events, used to understand which features are used. The usage counters are calculated and stored on your device and sent as values with each event.
• A random session identifier that groups the events of one app session. A new one is created for each session, and it is not derived from any device identifier. Because every event also carries the usage counters described above, events from different sessions on the same installation could still be matched together.

What Analytics Never Includes

• Your name, email address, Apple ID, or account credentials.
• Payment card information, receipt data, or banking information.
• PDF file contents, titles, or filenames.
• Flashcard contents or any text you have typed or captured.
• Saved word contents.
• Selected text or annotation contents.
• iCloud account identifiers.
• Device identifiers, such as Apple's vendor identifier (identifierForVendor) or advertising identifier.
• Precise location or GPS coordinates.

Offline Analytics Behavior

If your device is offline when an analytics event is recorded, the TelemetryDeck SDK stores the event on your device and sends it when a connection is available. Turning analytics off stops new events from being recorded, but events stored before you turned it off may still be sent.

TelemetryDeck Links

• TelemetryDeck Privacy Policy
• TelemetryDeck Privacy FAQ
• TelemetryDeck App Privacy Guide
• TelemetryDeck Terms of Service

Diagnostics

Apple may provide us with crash reports and performance data through TestFlight (for beta testers), App Store Connect, and Xcode Organizer. For App Store users, this happens only if you have chosen to share analytics with app developers in your device settings.

Diagnostic information may include crash data, performance data, device model, operating system version, app version, and similar technical information needed to diagnose and improve app stability. We do not use diagnostics to track you across apps or websites, and diagnostics are not intended to include your book contents, flashcard contents, saved words, or other personal study content.

Apple's handling of TestFlight, App Store, and developer diagnostic data is governed by Apple's terms and privacy policies.

Support Requests and Bug Reports

If you email us or send a bug report from the App's Settings, we receive your email address and whatever you choose to send. A bug report email includes device and app details and recent technical logs from the App as an attachment. Nothing is sent unless you send the email yourself, and you can review it before sending. We use this information only to answer you and fix problems, and we delete it on request.

Log Data and Cookies

The App does not use cookies. The App does not collect web browsing history. Web pages you open from the App may set their own cookies; the App cannot read them.

The getknowmad.com website sets no cookies. It uses Cloudflare Web Analytics, which counts page views and records the page, the page you came from, your browser, your country and how fast the page loaded, without cookies and without identifying you. The site is hosted by Cloudflare, which processes your IP address and request details to deliver the pages.

The App does not send application logs to any server of ours. Anonymous analytics, Apple-provided diagnostics, and bug reports you choose to send are described in the sections above.

Links to Other Sites

The App may contain links to external websites or services not operated by us, such as legal, support, App Store, or Apple service pages. We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party sites or services. We encourage you to review the privacy policy of every site or service you visit.

Children's Privacy

The App is rated 4+ and contains no age-restricted content, but it is not directed at children under 13. We do not knowingly collect directly identifying information from children under 13.

Because the App does not require accounts and does not collect names, email addresses, or similar direct identifiers, there is no account profile we can use to identify a child user.

The App's optional connection to a third-party AI provider (see AI Features) requires you to obtain and use your own account with that provider. Those provider accounts are subject to the provider's own terms, which generally require the account holder to be an adult (18 or older, or the age of majority where you live). Knowmad does not create or manage those accounts.

If you believe a child has provided personal information through a support request or other direct contact with us, please contact us so we can delete it.

Your Rights

Privacy laws such as the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and similar laws may give users rights to access, correct, export, or delete personal information a company holds about them, and to object to its processing.

Because the App does not require an account and does not collect directly identifying information, we do not hold a user profile or account identifier that we can look up, export, correct, or delete on your behalf. Analytics events carry no user content and no device or user identifier, and we do not try to work out which events came from a particular person. TelemetryDeck keeps anonymized analytics data as described in its privacy policy. If you have emailed us, you can ask us to access or delete that correspondence.

You remain in direct control of your data:

• Turn off analytics at any time by turning off Share Anonymous Analytics in Settings to stop new analytics events from being recorded.
• Remove your content by deleting books, folders, flashcards, saved words, and known words inside the App. This data lives on your device and, if you are signed in to iCloud, in your personal iCloud account.
• Manage iCloud data through the App's storage settings and your device's iCloud settings.

If you are in the European Union or the United Kingdom, you also have the right to lodge a complaint with a data protection supervisory authority. If you have questions about these rights, contact us using the details below.

Security

We value your trust and use commercially reasonable means to protect information handled by the App. Your books and study content remain on your device or within your personal iCloud account, which is protected by Apple's security infrastructure. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted with an updated effective date. You are advised to review this Privacy Policy periodically for any changes. Continued use of the App after changes are posted constitutes acceptance of the revised policy.

Contact Information

If you have any questions or suggestions about this Privacy Policy, please contact us:

Oleksandr Baralei
Email: support@getknowmad.com