PairIt is a voice-driven spaced-repetition flashcard app, currently in public beta on Apple TestFlight (anyone with the public TestFlight link can join), with a companion web app at app.pairit.cards for signing in and managing your decks. This policy describes what data PairIt collects, when, and how it is used, in the app and on the web.
That is everything PairIt collects by default. No analytics, no telemetry, no advertising trackers, no third-party SDKs that phone home.
You can create a PairIt account with Sign in with Apple or Google, in the app (Settings → Account) or on the web at app.pairit.cards/account. An account is optional; the app works without one. The web deck editor at app.pairit.cards/decks requires an account, because it shows and edits the backed-up copy of your decks. If you create one, PairIt stores the following on its servers (hosted by the developer on cloud infrastructure; see "Who handles data for PairIt" below):
This data is sent over HTTPS, is used only to provide sync and your account, is not sold or shared with anyone other than the service providers described below, and is not used for advertising. You can delete your account at any time in the app (Settings → Account → Delete my account) or on the web (app.pairit.cards/account → Delete my account). That removes your account, your sessions, and the backed-up decks and progress from PairIt's servers and revokes the Apple connection if you used Apple. Decks already on your devices are not deleted by this. Signing out stops syncing but keeps your decks on the device.
If — and only if — you turn on "Help improve PairIt — share practice data with the developer" in the Settings drawer, PairIt will additionally send the following information to a server controlled by the developer (Rodj Martin):
This data is transmitted over HTTPS and stored in a database on a server controlled solely by Rodj Martin. It is not shared with any third party. It is not used for advertising. Only Rodj Martin has access to it.
This setting is OFF by default. Developer-designated internal testers may have this setting enabled by default as part of their testing agreement. You can turn it on or off at any time from the Settings drawer. Turning it off stops all future data sharing immediately; it does not by itself delete previously collected data (see "Your rights" below).
If the app misbehaves, you can tap "Send diagnostics" (Settings → Feedback) or tick "Attach log" when reporting an issue. Only then, and only for that one tap, PairIt sends the developer the app's recent diagnostic log (the last part of a text file the app keeps on your device), the app build, your device model and iOS version, a random per-install identifier, a short summary of your local data (counts only, such as how many decks you have), and any note you type. If you are signed in to a PairIt account, your account identifier and email are included so the developer can reply. Before anything is sent, the app removes the text of your spoken answers and of the cards it read aloud from the log, unless you choose to include them (useful when the problem is with speech recognition). "Send diagnostics" asks you each time, unless you tell it to remember your answer; a remembered answer, yes or no, is shown under the button in Settings → Feedback, and "Ask me again" clears it. When reporting an issue, the "Include the words I said and the card text" box decides. Without the words, what remains is timing, scores, errors and app state, and the server removes those fields again as a second check. This is never automatic, and it is separate from the beta data-sharing setting above. Diagnostic uploads are kept for up to 60 days and then deleted, are used only to investigate problems, and are not shared with anyone other than the service providers described below.
If you use Report an Issue or Request a Feature in the app (or the equivalent on the web), PairIt receives what you type, plus your name and email if you are signed in, the app build and the platform. PairIt records each report as an issue in a private repository on GitHub, so the developer can track and answer it, and keeps a short record of it (issue number, title, reporter, build, platform) in its own database. Reports are visible only to the developer and the people he works with on PairIt. Because a report is stored by GitHub, deleting your PairIt account does not delete reports you have already sent; email [email protected] and they will be removed. Please do not put anything sensitive in a report.
When your app or browser talks to PairIt's servers, the servers and the companies that run them (see the next section) necessarily handle your IP address, the time and type of the request, and basic device and browser details such as the user agent. PairIt uses this only to run the service, to limit abuse (for example, to slow down repeated sign-in attempts or uploads from one address), to keep the service secure and to investigate faults. The server keeps IP addresses in memory for rate limiting, and the infrastructure providers below keep ordinary access and error logs for a short time under their own policies. PairIt's own administration pages record which administrator opened which page and from which address. PairIt does not use this information to build advertising profiles and does not use cookies or similar technology for tracking. The web app uses your browser's local storage only for the sign-in and settings described above.
PairIt does not sell your personal information, does not share it for cross-context behavioural advertising, does not track you across other companies' apps or websites, and contains no third-party advertising or analytics SDKs. PairIt does rely on service providers that process data on its behalf and only for running the service:
PairIt may also disclose information if the law requires it, to protect people's safety or the service from abuse or fraud, or as part of a merger, sale or change of ownership of PairIt (in which case this policy will continue to apply to the data, or you will be told before it changes). Some of these providers are in the United States or other countries, so your information may be processed outside the country where you live.
Data is sent over HTTPS. Session tokens are stored hashed, Apple's refresh token is kept only to let you revoke the connection, database backups are encrypted, and the server's database access is limited to what the service needs. No system is perfectly secure, and PairIt cannot guarantee that data will never be accessed or lost; see the Terms of Service. If a breach affecting your personal information occurs, PairIt will notify you as the law requires.
Independent of the beta data-sharing setting and of whether you have an account, PairIt stores your decks, your review progress and your per-card practice history (counts, response times, dates) locally on your device so that the app can work offline and show you statistics about your own progress. This local data:
Beta-shared data is retained for the duration of the PairIt TestFlight beta. When PairIt exits beta and is released on the App Store, one of the following will happen and will be communicated in advance:
Continued ongoing collection past beta will not occur unless this policy is updated and re-disclosed in the app.
At any time, you may:
PairIt uses the information described above to provide the app, the website and your account; to sync and schedule your reviews; to respond to you and to reports; to keep the service secure and prevent abuse; to understand faults and make the service better (using the data you choose to share, and counts and timings that are not tied to the words you said); and to meet legal obligations. Where the law asks for a legal basis, PairIt relies on providing the service you asked for (contract), its legitimate interest in running and securing it, your consent where you turn on an optional setting such as beta data sharing (which you can withdraw at any time), and legal obligation. PairIt will not use your data for a purpose that is incompatible with these without telling you first.
PairIt is not directed at children under 13 (or under 16 where local law sets a higher age) and the developer does not knowingly collect data from children. If you believe a child has shared data with PairIt, please email [email protected] and the data will be deleted.
If this policy changes, the updated version will be published at the same URL and the effective date at the top will be updated. Material changes will be communicated via TestFlight release notes, in the app or by email, and anything that would collect more data than you have agreed to will need your choice before it starts.
Questions? Email [email protected].