Privacy Policy

Depending on how you use MuchoKarte, we collect:

• Account data — your email address, username, and a securely hashed version of your password (we never store your password in plain text). Guest accounts are created with randomly generated, throwaway credentials instead.
• Learning data — the decks, cards, and translations you create or generate, your study reviews and spaced-repetition schedules, and gamification stats such as XP and streaks.
• Preferences — settings like your default languages, self-assessed levels, daily goal, chosen interface language, and (stored only on your device) your light/dark theme choice.
• Technical data — your IP address and basic request metadata, used to keep you signed in, apply rate limits, and protect the Service from abuse. Server logs may record errors and activity.

We use your data to:

• Provide the core Service — authenticate you, store your decks, schedule reviews, and track your progress.
• Generate cards and translations you request, by sending the topics and words you choose to our AI and translation providers.
• Send you essential transactional emails, such as password-reset links. We do not send marketing email.
• Keep the Service secure and reliable — prevent abuse, enforce rate limits, debug problems, and moderate reported content.
• Improve the app and understand, in aggregate, how features are used.

MuchoKarte uses your browser's storage for functional purposes only — we do not use third-party advertising or cross-site tracking cookies. Specifically:

• Authentication tokens (a signed access token and refresh token) so you stay logged in.
• A small cookie remembering your chosen interface language, so pages load in the right language.
• Local storage for your theme preference and similar on-device settings.

We share limited data with trusted providers who process it on our behalf to run the Service:

• Cloud hosting and database — infrastructure providers (such as Google Cloud) that host the app and store your data.
• AI generation — the AI model provider (such as Google Gemini or an OpenAI-compatible API) that receives the deck topics and words you ask us to generate or translate.
• Translation — a machine-translation service (such as MyMemory) used to fill in translations.
• Email delivery — a transactional email provider used to send messages like password resets.

We share your data with these providers only as needed to operate the Service, and we may also disclose data where required by law or to protect the rights and safety of our users and the Service.

Some information is public by design. Your username is shown on decks you choose to make public, and the content of a public deck is visible to and copyable by other users. Please keep this in mind when choosing a username and when publishing decks.

We keep your data for as long as your account is active. Guest accounts and their contents are temporary and may be removed after a period of inactivity. When you delete your account, we delete your personal data and the content associated with it, except where we need to keep limited information to comply with the law or resolve disputes; residual copies may remain in backups for a short time before they are overwritten.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can:

• View and update much of your data directly in the app (for example your username and preferences in Settings).
• Request a copy of your data, or ask us to delete your account and personal data, by contacting us.

To exercise these rights, email us at support@mucho-karte.com. We will respond within the time required by applicable law.

MuchoKarte is not directed at children under 13 (or the higher minimum age of digital consent in your country). We do not knowingly collect personal data from children below that age. If you believe a child has given us personal data, contact us and we will delete it.

We take reasonable technical and organizational measures to protect your data — passwords are stored only as salted hashes, traffic is encrypted in transit, and access to systems is limited. No method of transmission or storage is completely secure, but we work to protect your information and to address issues promptly.

Our providers may process data in countries other than yours. Where that happens, we rely on appropriate safeguards for such transfers as required by applicable law.

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date below and, where appropriate, notify you in the app.

For any privacy question or request, email us at support@mucho-karte.com.