Masterki Privacy Policy

Last updated: September 30, 2026

Overview

Masterki helps learners create and review rich Anki flashcards with text, images, drawings, audio, AI-generated media, internet image search, review mode, and optional app blocking. This policy explains what information is processed when you use the Masterki iOS, Android, and macOS apps, backend API, and website.

Information We Process

The app may send card text, selected text, image prompts, uploaded drawings, camera captures, images you choose from your photo picker, selected internet image URLs, generated card drafts, generated media filenames, and audio-generation text to the Masterki backend to fulfill your requests.

Cards, decks, media, and review history are stored locally on your device in an embedded Anki-compatible collection (and/or AnkiDroid on supported Android configurations). If you choose to connect your AnkiWeb account, synchronization occurs directly between your device and AnkiWeb.

App Blocking and Screen Time

Masterki offers optional app blocking to help you stay focused until your daily flashcard reviews are complete:

On iOS: App blocking uses Apple’s Screen Time APIs (including the FamilyControls, ManagedSettings, and DeviceActivity frameworks). All activity monitoring and shielding take place entirely on your device. Masterki does not track, log, or transmit your app usage, browsing history, or device activity to any server.
On Android: App blocking uses Android Usage Access locally to detect the foreground app and rank installed apps by recent use. Usage Access data remains strictly on your device.

Backend, AI, and Search Providers

Masterki uses a backend hosted for the app to provide AI and media features. Depending on the feature used, the backend may send submitted text, prompts, images, or audio text to third-party service providers including OpenAI, Google Gemini, Brave Search, and ElevenLabs. These providers process data strictly to generate card drafts, images, search results, imported media, or speech audio.

The backend temporarily caches generated or imported image and audio files so the app can retrieve them and store them in your local collection. Backend logs and operational analytics include request timing, endpoint names, platform, IP-derived request metadata, user agent, status codes, and feature usage counts used to operate, debug, secure, and maintain the service.

Photos and Camera

Masterki uses the system Photo Picker on iOS and Android, allowing you to grant access only to specific images you select without exposing your full photo library. Camera captures and drawings are processed solely when you actively attach them to a flashcard.

Subscriptions and Billing

Masterki offers optional Plus and Max subscriptions:

Apple App Store (iOS/macOS): Purchases and auto-renewing subscriptions are processed by Apple In-App Purchase (StoreKit 2). To verify entitlements, the app securely transmits the signed App Store transaction receipt (JWS) to our backend. We do not receive or store your credit card or payment details.
Google Play (Android): Purchases and auto-renewing subscriptions are processed by Google Play Billing and verified with the Google Play Developer API.

Account and Authentication

You may use Masterki anonymously as a guest, or optionally sign in using Sign in with Apple, Google Sign-In, or Email via Firebase Authentication. When signed in, your account identifier, email, and subscription status are used to synchronize your subscription tier and quota allowances across devices.

Website Cookies and Analytics

The website may use Google and Singular tags for analytics or conversion measurement only after you allow cookies in the consent banner. You can continue without allowing cookies.

Website Pricing and Approximate Country

To estimate local subscription prices, the Masterki web server uses a locally hosted IP database to derive an approximate country code from your request IP address. It does not request device location or send your IP address to a third-party geolocation service. The App Store or Google Play confirms final pricing at checkout.

Website Email Updates

If you sign up for Masterki updates or the Windows waitlist, your email address and mailing-list subscription are stored in Loops, our email service provider. We use them to send occasional product news and feature updates, or to let you know when the Windows app is ready. Loops receives the request metadata needed to process the signup. You can unsubscribe at any time using the link in any email. See Loops' privacy policy.

Sharing and Retention

We do not sell your personal information. We share information only with service providers strictly necessary to deliver app features, comply with legal obligations, protect the service, or operate infrastructure. Generated media and request analytics are retained as needed to operate the service and troubleshoot issues.

Your Choices and Account Deletion

You can avoid AI/media processing by not using those features. You can disable app blocking, revoke Screen Time or Usage Access permissions, sign out of AnkiWeb, or delete your account at any time directly in the app (Settings → Delete Account) or via our Account Deletion Page. Deleting your account immediately wipes your account data, entitlements, and usage history from our servers.

AI app connector

You can optionally connect an AI app, such as ChatGPT, Claude, Gemini, or Grok, so it can save new flashcards to your Masterki inbox. Setup steps are on the AI apps page. This part of Masterki is suitable for a general audience, including users aged 13 to 17.

What is collected. The card text an AI app sends (the front, the back, and an optional deck name) and the name of that AI app. If you sign in with email and password on the connect page, your email is checked by Firebase Authentication. The password is never stored. OAuth tokens and pairing codes are stored only as SHA-256 hashes.

What is not collected. The conversation itself, and your existing decks. The connector cannot read or change cards already on your device.

Use and storage. Cards wait on Masterki's servers only until the app downloads and saves them. At most 500 cards wait at once. Card text is not sold or shared, and the connector does not send it to AI providers.

Retention. Inbox cards are deleted once the app saves them. Access tokens last 7 days, refresh tokens last 365 days, and pairing codes last 10 minutes. Disconnecting an AI app revokes its access. Deleting your account removes the inbox, tokens, and pairing codes.

Your controls. Disconnect an AI app under Settings → Connect Masterki to AI apps, or delete your account in Settings.

Contact

For privacy questions or deletion requests, contact hello@masterki.org.