Effective Date: July 15, 2026

1. Information We Collect

None. CardLoom does not collect any personal information, usage statistics, crash reports, or analytics of any kind. The app has no server of ours and works offline on your device, except for the optional deck downloads you choose to start yourself (see Section 4).

2. Local Data Processing

CardLoom stores your decks, cards, study history, streaks, and preferences on your device, and they remain there at all times. Specifically:

• Your decks and study progress are stored locally in the app’s database.
• Application preferences are stored locally on your device.
• No data is uploaded to, processed by, or stored on any server we operate.
• Spaced-repetition scheduling, statistics, and streaks are all computed on your device.

3. No Accounts, No Cloud Sync

CardLoom has no sign-in and no account system — one device is one learner. It does not include a cloud-sync service, and we never upload your decks or progress to any server. Your data does not leave your device unless you choose to share a deck, as described next.

4. Sharing and Deck Downloads

CardLoom lets you move decks in and out of the app. These actions are always initiated by you:

• Saving & opening decks — you can save a deck as a file to share, and open a deck that you or someone else created. This stays on your device; your study progress is never included in a deck you share.
• Deck links — if you open a CardLoom deck link (for example, one a teacher posts on a website), the app downloads that deck from the web address in the link. The download goes directly between your device and whatever site hosts the deck; it is not routed through, logged by, or sent to Lacy Digital Labs.

If you never open a deck link, CardLoom makes no network connections at all.

5. Telemetry and Analytics

CardLoom does not include any telemetry, analytics, or crash-reporting frameworks. We do not track how you use the application, which decks you study, how often you use it, or any other behavioral data.

6. Tracking and Advertising

CardLoom does not use cookies, tracking pixels, advertising identifiers, fingerprinting, or any other tracking technologies. We do not display advertisements and we do not participate in any advertising networks.

7. Purchases & Payment Processing

If you purchase CardLoom through the Apple App Store, Microsoft Store, Google Play, or any other distribution platform, that platform may collect transaction and account information as part of the purchase process. The same applies to any optional in-app purchases that may be offered in the future for additional features — those transactions are processed entirely by the platform's billing system, not by us. This data is collected and managed by the respective platform, not by us. Please refer to the applicable platform's privacy policy for details:

• Apple Privacy Policy
• Microsoft Privacy Statement
• Google Privacy Policy

We do not receive, store, or have access to your payment information, Apple ID, Microsoft account, Google account, or any other account credentials. Purchase or restore of in-app purchases is handled by your platform using receipts that are validated locally on your device — no purchase data is sent to any server we operate.

Direct purchases of the Linux version. The Linux edition of CardLoom is sold directly from our own online store rather than through a platform app store. When you buy it this way, a few commerce partners are involved and a limited amount of information is handled off your device:

• Merchant of Record — Lemon Squeezy. Our store is operated by Lemon Squeezy, which acts as the Merchant of Record for the sale. To meet tax and Know-Your-Customer (KYC) requirements, Lemon Squeezy collects your name, billing address, and email address during checkout.
• Payment processing — Stripe. The financial transaction is processed by Stripe, which handles your payment-card details. We never see or store your card information.
• What we keep. From this process Lacy Digital Labs receives and retains only your email address. We use it solely to reach you about the app you purchased — for example, to let you know when a new version, patch, or feature is available. We do not use it for marketing, and we will never sell or rent it to any third party.

You can ask us to delete your email address at any time (see “Your Data Rights” below). For how these partners handle your information, see the Lemon Squeezy Privacy Policy and the Stripe Privacy Policy.

8. Third-Party Services

CardLoom does not integrate with, send data to, or receive data from any third-party services, APIs, or cloud platforms operated by us. The application is self-contained. The only outbound network activity is the optional deck download described in Section 4, which you initiate and which goes directly to the site hosting the deck.

9. Children's Privacy

Because CardLoom does not collect any data from any user, it does not knowingly or unknowingly collect information from children under the age of 13 (or any other age). The application is safe for users of all ages.

10. Your Data Rights

Because CardLoom does not collect, process, or store any personal data, there is no personal data to access, correct, delete, or transfer. Your decks and study data exist only on your device under your full control. You can save your decks to share them at any time, or delete your data by removing decks in the app.

The one piece of personal data we may hold is the email address collected when you buy the Linux version directly from our store (see “Purchases & Payment Processing” above). You may ask us to access or delete that email address at any time by contacting our support center; we will delete it promptly, after which you will no longer receive our update notices for the app.

If you have any questions about your data, please contact us using the information below.

11. Data Security

Since CardLoom does not collect or transmit your personal data, there is no risk of your data being intercepted, breached, or exposed through our application. Your data is protected by your device's built-in security and any encryption you set up at the device level.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. Any changes will be posted on this page with an updated effective date, and we encourage you to review this page periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Lacy Digital Labs LLC
Contact us through our support center