Back to home

This Privacy Policy explains how your information is handled when you use Mora (the “App”). Mora is operated by Philipp Eder, based in the United Arab Emirates. We are the data controller for the limited data described here and process personal data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, the “PDPL”).

1. Information we process

Information you create

Your flashcards, decks, notes and study progress are stored locally on your device. There is no account system, and this content is not uploaded to us or linked to your identity.

Content you submit to generate features

When you ask Mora to build a conjugation table, detect or translate a word, generate an example sentence or produce audio, the text you entered is sent to our third-party AI and audio providers to create that result. These results are generated by artificial intelligence. The text you submit is used only to generate what you asked for and is not used to identify you.

Usage analytics

We collect aggregated product analytics (app opens, screen views, feature usage, performance metrics, and device model and OS version) to improve the App. These analytics events are tied only to a persistent analytics identifier (a random ID or your device's vendor identifier), never to your name, email or flashcard content, and we do not use them to build a profile of you.

Advertising measurement (Meta)

We advertise Mora on Instagram and Facebook and use the Meta (Facebook) SDK to measure which ads bring people to the App. The SDK sends Meta a limited set of app events, such as installs and app opens, completing onboarding, generating your first conjugation and creating your first deck, together with device information (such as device model, OS version and IP address) and an app-specific Meta identifier. It never receives your flashcard content. If you allow tracking in Apple's App Tracking Transparency prompt, the SDK may also collect your device's advertising identifier (IDFA), and our subscription provider, RevenueCat, may share subscription events (such as starting a free trial, subscribing or renewing, and their value) with Meta so we can measure which ads lead to subscriptions. You can decline tracking in that prompt, or change your choice at any time in iOS Settings > Privacy & Security > Tracking; if you decline, your advertising identifier is not shared. Meta processes this data under its own privacy policy: Meta Privacy Policy.

Subscription and purchase information

If you subscribe to Mora Pro, your purchase is processed by Apple through the App Store; we never receive your payment-card details. A subscription-management provider confirms whether a valid subscription is active so we can unlock paid features.

2. Service providers and international transfers

We rely on the trusted providers below, who process limited data on our behalf. As they operate globally, some data may be processed on servers outside the UAE (for example, in the United States or the European Union). Where personal data is transferred outside the UAE, we rely on the conditions permitted under the PDPL and on these providers' contractual and security safeguards.

• Google (Firebase Analytics) — anonymous usage analytics.
• Google Cloud Text-to-Speech — converts text you choose to hear into natural-sounding audio.
• OpenAI — generates conjugation tables, word forms, translations and example sentences from the text you submit.
• RevenueCat — manages subscription status, with no access to your flashcard content. If you allow tracking, it shares subscription events with Meta for ad measurement.
• Meta Platforms (Meta SDK) — ad attribution and measurement for our Instagram and Facebook ads, as described above.
• Apple — distributes the App and processes in-app purchases.

3. Why we process data and our lawful basis

Under the PDPL, we process data on the following bases:

• Performance of the service you request — to generate conjugations, audio and other features, and to provide and unlock subscription features.
• Our legitimate interests — to keep the App secure, fix bugs, and understand and improve how the App is used through aggregated analytics, and to measure the performance of our ads in aggregate. These analytics run by default; you can object at any time by contacting us, and we will stop processing your usage data.
• Your consent — where a specific feature asks for it, including Apple's App Tracking Transparency prompt for ad tracking (the advertising identifier and sharing of subscription events with Meta). Where we rely on consent, you can withdraw it at any time, for example in iOS Settings > Privacy & Security > Tracking.

4. Data retention

Content you create stays on your device until you delete it in the App or uninstall the App. Text submitted to generate features is retained by our processors only as long as needed to deliver the result and as described in their policies. Anonymous analytics are retained in aggregated form for the periods set by our analytics provider. Data received by Meta for ad measurement is retained as described in Meta's privacy policy.

5. Your rights

Because we do not hold information that identifies you, there is usually no personal data for us to retrieve. To the extent the PDPL applies, you have the right to:

• request access to, and information about, any personal data we hold;
• request correction of inaccurate data;
• request erasure or restriction of processing;
• object to processing and withdraw any consent you have given;
• request portability of data you have provided; and
• lodge a complaint with the UAE Data Office.

You can act on the simplest of these directly: delete your decks in the App, uninstall the App to remove all locally stored content, or turn off tracking for Mora in iOS Settings > Privacy & Security > Tracking. For any other request, contact us using the details below.

6. Children's privacy

Mora is rated suitable for ages 4+. We do not knowingly collect personal information from children, and the App does not require any personal information from any user. Content is created solely by the user on their own device.

7. Security

We take reasonable technical and organisational measures to protect data, including keeping your study content on your own device and working only with established providers that maintain recognised security standards. No method of transmission or storage is completely secure, but we work to protect your information in line with the PDPL.

8. This website

This website does not use analytics or advertising cookies. It uses your browser's local storage to remember when you dismiss the cookie notice. You can remove that preference by clearing this website's stored data in your browser.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted in the App and on this page with an updated effective date.

10. Contact and complaints

For any question or request about this policy or your data, contact us at: help.flashcardsai@gmail.com

If you are in the UAE and believe your data rights have not been respected, you may also contact the UAE Data Office. This Privacy Policy is governed by the laws of the United Arab Emirates.