Effective Date: March 9, 2026
Last Updated: July 7, 2026
1. Introduction
This Privacy Policy describes how applications and web services developed and published by Aleksander Styrcz (“we,” “our,” or “us”) handle information when you use our products, including:
• mobile and desktop applications available on the Apple App Store (the “Apps”)
• web applications hosted on byaleksander.com (such as Flashcards at byaleksander.com/flashcards)
• this website (byaleksander.com)
This Privacy Policy applies to all applications, web applications, and related services developed and published by Aleksander Styrcz.
We respect your privacy and are committed to protecting it. Our products are designed to operate primarily on your device, and most data remains under your control.
⸻
2. No Account Registration
Our Apps and web applications do not require user accounts or registration.
You can use them without providing personal information such as a name or email address.
⸻
3. User-Provided Content
Our Apps and web applications may allow you to import, create, or export content, including files such as:
• TXT
• CSV
• RTF
• ASFC
• APKG
• Image files
• Audio files
By default, files and content are processed locally on your device or in your browser.
Our Apps and web applications do not automatically upload, transmit, or store your files or personal content on servers operated by us.
When exporting files, you choose the destination using the system file interface (for example local storage, iCloud Drive, or other storage providers supported by your device).
The only exception is when you voluntarily choose to submit content for publication in the Flashcards public deck library, as described in Section 9.
⸻
4. Device Permissions
Microphone
Our Apps may request permission to access your device microphone in order to record audio when you explicitly use recording features (for example, recording audio for flashcards).
Audio recordings remain stored locally on your device unless you choose to export or share them.
⸻
Camera
Our Apps may request permission to access your device camera when you choose to capture images within the App (for example, scanning a fuel pump display).
Captured images are processed locally on your device. Some Apps may use on-device optical character recognition (OCR) to read text from images you capture. OCR processing happens on your device and is not sent to us.
Captured images remain stored locally on your device unless you choose to export or share them.
⸻
Photo Library
Our Apps may allow you to select images from your photo library using the system photo picker.
Our Apps only access the specific images you explicitly select. Selected images are processed locally on your device.
⸻
Location
Our Apps may request permission to access your location while you use the App.
Location may be used when you explicitly use features that depend on it, such as embedding location information in photos you capture, confirming a place associated with an entry you create, or displaying and searching for nearby places on a map.
Location data is used to provide these features and is stored locally on your device as part of your content or settings. We do not receive or store your location on our own servers.
Some map, search, or geocoding features may rely on services provided by Apple or other system frameworks, which process requests according to their own privacy policies.
⸻
Text-to-Speech
Some Apps may offer text-to-speech features that read card or study content aloud using speech synthesis provided by your device or browser.
Text processed for speech is handled locally on your device or in your browser and is not sent to us.
⸻
Network Volumes
Browshell may request permission to access network volumes in order to browse SMB network shares that you connect to.
⸻
Push Notifications
The Flashcards App may request permission to send push notifications when you submit a deck for publication.
If you grant permission, a device token is sent to our server only as part of that submission. It is used solely to notify you if your deck is approved for the public library. The token is deleted when the submission is approved or rejected.
Push notifications are delivered through Apple Push Notification service (APNs) and are governed by Apple’s privacy policy.
⸻
5. File Access
Our Apps may use the system document picker interface to allow you to import or export files.
Through this interface, you can select files from locations such as:
• Local device storage
• iCloud Drive
• Third-party storage providers supported by the operating system
Our Apps only access files that you explicitly select.
⸻
6. Share Extensions
Our Apps may support operating system share extensions, which allow you to import files or content from other applications.
Content shared through this feature is processed locally on your device and is not transmitted to us.
⸻
7. App and Browser Settings
Our Apps and web applications may store certain preferences and settings locally (for example interface preferences or feature settings) in order to improve your experience.
On mobile and desktop Apps, these settings remain stored only on your device and are not transmitted to us.
On web applications such as Flashcards, decks, media, and settings are stored in your browser using technologies such as IndexedDB and local storage. This data remains in your browser and is not transmitted to us unless you choose to submit a deck for publication (see Section 9).
⸻
8. Remote Connections (Browshell)
Browshell is a remote file and terminal client that connects directly to servers and services you configure, such as SSH, SFTP, WebDAV, FTP, FTPS, SMB, and S3.
When you use Browshell:
• Connection details (such as host, port, and username) may be saved locally on your device
• Passwords and secret keys may be stored in your device Keychain if you choose to save them
• You may use the system Passwords or iCloud Keychain picker to autofill credentials you select
• Terminal sessions, file transfers, and server monitoring data (such as CPU, memory, and network statistics) travel between your device and your server
Browshell does not send your credentials, terminal output, remote files, or server data to servers operated by us. All remote communication is between your device and the servers you connect to.
⸻
9. Flashcards Public Deck Library
Flashcards (App and web application) includes an optional public deck library hosted on byaleksander.com. Using the library is voluntary.
Browsing and downloading
You may browse and download publicly available decks from our server. Downloading a deck copies it to your device or browser; it does not modify decks you already have locally.
We maintain aggregate download counts per published deck. These counts are not linked to individual users.
Submitting a deck for publication
If you choose to submit a deck for publication, you upload a copy of the deck file (.asfc) along with metadata such as:
• Deck name and public description
• Language (and optional second language)
• Optional author name for public attribution
• Optional private note to the reviewer
• Source (web or iOS)
• Timestamp of your acceptance of the publication terms
• Optional push notification device token (iOS only; see Section 4)
Study statistics are removed from the uploaded copy. Submitting for publication does not change the deck or progress on your device.
When you submit, we also collect limited technical information for review and abuse prevention:
• IP address
• Browser or App version and operating system (from User-Agent)
• Approximate country and city (from server headers or an IP geolocation lookup)
Review and publication
Submissions are reviewed before publication. We may approve or reject any submission for any reason.
• If approved, the deck is published in the public library and may be downloaded by anyone. If you provided a push notification token, we send a one-time approval notification via Apple Push Notification service.
• If rejected, the submission and associated data (including any push notification token) are deleted. No notification is sent.
By submitting, you agree to the Flashcards publication terms available at byaleksander.com/Flashcards/api/PUBLICATION_TERMS.md.
⸻
10. Internet and Third-Party Services
Some of our products connect to the internet for limited functionality.
For example, a product may:
• fetch publicly available reference data (such as currency exchange rates) needed for a feature you have enabled
• use Apple system services (such as map search or geocoding) to help identify places or locations you interact with
• open another app or website when you explicitly choose to do so (for example Apple Maps or Google Maps for navigation)
• browse or download from the Flashcards public deck library, or submit a deck when you choose to do so (see Section 9)
These routine requests do not include your imported files, recordings, photos, or other personal content stored locally in the App or browser, except when you voluntarily submit a deck for publication.
We may use third-party services for specific purposes, such as IP geolocation lookups during website analytics or deck submission processing. Any third-party service you open through an explicit action, or whose service we use for a specific function, is governed by that service’s own privacy policy.
⸻
11. Feedback Emails
Our Apps may include a feature that allows you to contact us via email for feedback or support.
When you use this feature, your device’s default email client will open so that you can send a message voluntarily.
We only receive the information that you choose to include in that email.
⸻
12. Data Collection
We do not:
• Automatically collect personal data through our Apps during normal local use
• Track users across apps or websites
• Use advertising identifiers
• Sell personal data
• Build user behavior profiles
Information we receive is limited to:
• What you voluntarily send to us (for example through email or contact forms)
• What you voluntarily submit when publishing a Flashcards deck (see Section 9)
• Basic technical data collected when you visit our website (see Section 17)
⸻
13. Data Storage
By default, user content created, imported, or recorded within our Apps and web applications remains stored locally on your device or in your browser unless you choose to export it to another location (such as iCloud Drive or another storage provider).
We do not maintain servers that store your local files or personal content, except when you voluntarily submit a deck for publication in the Flashcards public library (see Section 9). Approved decks are stored on our server and made publicly available.
⸻
14. Data Retention
• Local data (on your device or in your browser) remains until you delete it or uninstall the App or clear your browser storage.
• Flashcards submissions that are rejected are deleted promptly. Approved decks remain published until removed by us. Submission metadata and push notification tokens are deleted when a submission is approved or rejected.
• Website analytics and contact form data are retained only as long as needed for the purposes described in this policy, after which they are deleted or anonymized.
⸻
15. Data Security
Because our products primarily store data locally on your device or in your browser, protection of that data depends on your device and browser security settings.
We recommend using device passcodes and keeping your operating system and browser up to date.
Server-side data (such as published decks and submission records) is protected using reasonable technical and organizational measures appropriate to the nature of the data.
⸻
16. Children’s Privacy
Our products can be used by people of all ages, including children.
Our products do not require account creation and do not knowingly collect personal information from users during normal local use, including from children.
Any information we receive is limited to what a user voluntarily sends to us (such as through email communication) or voluntarily submits (such as a deck for publication).
Published decks in the Flashcards public library may contain user-submitted educational content visible to anyone. We review submissions before publication but do not guarantee the suitability of published content for any particular age group.
⸻
17. Website Usage Data
When you visit our website (byaleksander.com), including web applications such as Flashcards, basic technical information may be processed to ensure the proper operation and security of the website.
This may include:
• IP address
• Requested pages and URLs
• Referrer
• Date and time of requests
• Browser, operating system, and device type
• Screen dimensions and time zone
• Approximate country and city (derived from IP address)
• An anonymous session identifier stored in your browser’s session storage (not a cookie)
This data is processed solely for:
• Maintaining website functionality
• Security and abuse prevention
• Basic, privacy-friendly, self-hosted analytics
We do not:
• Use advertising cookies or third-party analytics platforms
• Track users across other websites
• Sell or share analytics data with third parties for marketing purposes
IP geolocation may involve sending your IP address to a geolocation service provider solely to determine approximate location. We do not receive any other data from that provider about you.
⸻
18. Contact Forms and Communication
When you contact us through forms on our website, we may collect the information you provide, such as:
• Name
• Email address
• Message content
Additionally, certain technical data (such as IP address and request metadata) may be processed for security and abuse prevention purposes.
This information is used solely to:
• Respond to your inquiry
• Provide support
• Prevent spam or misuse
We do not use this data for marketing purposes or share it with third parties.
⸻
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
If changes are made, the updated version will be posted on this page with a revised “Last Updated” date.
⸻
20. Contact
If you have any questions regarding this Privacy Policy, you may contact:
Aleksander Styrcz
Email: hello@byaleksander.com