Morywise Privacy Policy

Last updated: 6 November 2026.

Morywise is a flashcard app made by Dexaloop, run by Muhammad Jaisal Padayattu Poyil in Kozhikode, Kerala, India. "We" means Dexaloop. Write to us at support@dexaloop.com.

The short version

• You can study without an account. Your cards and progress stay on your phone and in your own iCloud.
• Accounts are optional and for people 18 and over. An account holds your name, email, country, the date you ticked the 18+ box with the version of the Terms, and your "Send me updates" choice.
• Purchases need no account. They follow your Apple Account.
• The AI card maker sends only the text of pages you choose, or a topic you type. It goes through our server to Anthropic, or to DeepSeek when Anthropic is unavailable.
• If you use AI cards, we keep the cards the AI makes and what you do with them for 180 days. They have no link to you unless you tick a box. If you do not want this, do not use AI cards. The rest of the app works without them.
• Videos are Google ads. Nothing reaches Google's ad systems until you tap a video door.
• Ads are personalised only if you ticked the 18+ box and allow tracking. Everyone else gets non-personalised ads.
• We have no analytics of our own, apart from anonymous daily counts of AI cards.

What stays with you

Your cards, reviews and progress stay on your phone. If you turn on iCloud sync or backup, they also go to your own private iCloud. We cannot read that.

"Save a copy" makes a file that you control. It holds your own cards and your progress. It holds no Morywise-made content.

The 18+ box

Before an account or the AI card maker, the app shows an unticked box: "I am 18 or over, and I agree to the Terms of Use and Privacy Policy". The app never asks your birth date.

We do not check the tick. The app uses it to decide what you can use and how ads work, as this policy explains. It stays on your phone unless you make an account, and then the date you ticked it and the version of the Terms go to our server.

Before your first AI page, a second box sits beside it: "Link my AI cards to my account to help improve them". It starts unticked and it is optional. Only the 18+ box is needed to continue. See "Cards we keep to improve the AI".

Accounts

An account is optional and is for people 18 and over. You sign in with Sign in with Apple or Google.

• Who handles sign-in. Firebase Authentication, a Google service, handles it. It holds your user id and what your sign-in provider gives it, such as your email and name.
• What we keep. Our server, on Cloudflare, keeps one row: your user id, name, email, country, your "Send me updates" choice, the date you ticked the 18+ box and the version of the Terms. Accounts made before the box may hold no date. If you tick the link box, your AI cards also carry your user id.
• Why. To save your account and, if you ticked "Send me updates", to email you updates. We send no marketing email without that tick.
• Country. The app suggests it from your phone's region. You can change it.

Log out forgets the session on your phone. Your cards stay.

Delete my account is in Profile. After you confirm, your row, the AI counts held under your account, the AI cards linked to your account, and your Firebase user are removed. AI cards with no link stay until their 180 days end, because nothing says they are yours. Our server's automatic history can hold a deleted row for up to 7 days, pages already sent to Anthropic are deleted within 30 days, and DeepSeek keeps what it received as its own policy says. If you signed in with Apple, we also ask Apple to revoke the link. Your cards and progress stay on your phone. Your chapters, passes, Pro and top-up cards are not removed, because they follow your Apple Account.

Deleting an account does not cancel Pro. Cancel Pro in Settings, under Apple Account, Subscriptions.

Purchases

Apple takes the payment. We never see your card or bank details, and Apple does not give us your name.

The app makes a random install id and keeps it in your phone's Keychain. It says nothing about who you are. Our server keeps it with Apple's signed purchase records:

• transaction ids, product, purchase, end and refund dates, and whether it was a free trial
• the App Store country of the purchase
• top-up cards bought, used and left

We use these to check a purchase, open what you paid for, work out end dates, apply Apple's refunds and count AI cards. We also read notices from Apple about renewals and refunds.

This data is not joined to your account. Your purchases follow your Apple Account, not your Morywise account.

The AI card maker

The card maker is for people who tick the 18+ box. It also needs Pro or top-up cards, apart from one free try. It does not need an account.

• What is sent. The phone reads your page. Only the text of the pages you choose is sent. Pictures, photos and PDF files stay on your phone. If you type a topic instead, the words you type are sent.
• Consent. The app asks you to agree before your first page or topic. The same screen tells you that we keep the cards.
• Who receives it. The text goes through our server to Anthropic, PBC, which runs the Claude AI model. When Anthropic is unavailable, for example during an outage, it goes instead to DeepSeek, which runs the DeepSeek AI model. In the app we call them "our AI partner".
• What our server keeps. No page and no topic you type. It logs token counts and the model used, and counts your pages and cards so it can apply limits. It also keeps the cards and counts described below.
• What Anthropic keeps. Anthropic's API keeps inputs for up to 30 days by default, according to its privacy page dated 1 July 2026. By default it does not use API data to train its models. We have no zero-retention agreement.
• What DeepSeek keeps. DeepSeek's privacy policy says it collects, processes and stores personal data in the People's Republic of China. It keeps what it receives as that policy says. We have no zero-retention agreement with DeepSeek.
• Replies, for a short time. If a reply is lost on its way to your phone, your phone asks again and is not charged again. For this our server keeps the cards of each reply for up to 7 days, under a random number only your phone holds. It holds no user id, and neither your page nor your typed topic.
• The one free try. Each install can make up to 10 AI cards from a typed topic once, with no Pro and no top-up cards. To allow it only once, our server keeps a record of it: your random install id, the time, and whether the cards arrived. It keeps no topic and no account id with it. If the try fails, the record is removed and the try stays unused.
• Identity. We send Anthropic and DeepSeek no name, email or user id with the text. If your page or topic contains personal details, they go with the text, so choose your pages and words with care.

See Anthropic's policy: https://www.anthropic.com/legal/privacy and DeepSeek's: https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html

Cards we keep to improve the AI

We keep cards from everyone who uses AI cards. You cannot use AI cards and leave this out. If you do not want it, do not use AI cards. The rest of the app works without them.

• What is kept. The front and back of each card the AI makes, the sentence it quotes if it has one, your edited version if there is one, what happened to it (you accepted it, edited it or deleted it, or our check threw it out, and why), its language, the version of our prompt, and the day. At most 6 cards from any one page. We never keep the page.
• Cards hold what your page held. If your page had personal details, a card made from it could contain them. Choose your pages with care. We do not keep a topic you type, but we do keep the cards made from it, and they may repeat its words. Those cards have no quoted sentence.
• Unlinked, the default. The card has no user id, no install id and no IP address. Nothing on it says who you are. We cannot find it, show it to you or delete it for you, even if you ask, because nothing says it is yours.
• Linked. If you tick "Link my AI cards to my account to help improve them" and you are signed in, the card also carries your account's user id. If you are not signed in, it stays unlinked even with the box ticked.
• Turning the link off. The switch is in Profile, under Privacy. Turning it off takes your user id off the cards already kept and links no new ones. The cards stay, unlinked, until their 180 days end. If you are signed out when you turn it off, this happens when you next sign in.
• Deleting your account deletes your linked cards.
• How long. 180 days, linked or not.
• What we do with them. We read them to see where the AI goes wrong and to test better prompts. They may go to Anthropic when we test a prompt. Nothing we keep goes into the live prompt by itself: a person writes each change.

We also count, for each day, prompt version and language, how many cards were made, kept by our check, thrown out and why, accepted, edited and deleted. These counts come from everyone who uses AI cards and carry no id of any kind.

Rewarded videos and ads

The only ads are rewarded videos from Google AdMob. They play only when you tap a video door. They never play during review or practice. Pro members never see them, and the ad software is not started for Pro members.

Ads are personalised only if you ticked the 18+ box and allow tracking. Everyone else gets non-personalised ads.

Nothing reaches Google's ad systems until you tap a video door. After your first video, the app checks your consent status with Google at each launch, unless you have Pro.

When you tap a video door for the first time, this happens in order:

1. In the EEA, UK and Switzerland, Google's consent form. 2. If you ticked the 18+ box, Apple's tracking popup. 3. The video.

If you have not ticked the box: ads are not personalised and the tracking popup is not shown.

If you ticked the box: you see Apple's popup. Ads are personalised only if you tap Allow. If you refuse, you get non-personalised ads. The video and its reward are the same either way. Apple itself refuses tracking on child accounts and accounts under 18 by birth year.

All ads are requested at the general audience content rating.

What is used to target ads

Google chooses the ad. These things are used:

• your answer to Apple's tracking popup
• your coarse location, which Google estimates from your IP address
• the fact that the ad is inside this app
• if you tapped Allow: your advertising identifier, and what Google links to it

We do not give Google your name, email, country, age, cards or progress.

What we send to Google with a video

We send your random install id, the chapter id and a one-time code. Google sends these back to our server to confirm the video was finished. Our server keeps the install id, the chapter, the code and the time, so it can open the cards for 7 days.

What Google's software collects

Google's ad software says it collects:

• coarse location from your IP address
• a device identifier: the advertising identifier if you allowed tracking, or another app-scoped id
• which ads you saw
• how you interact, such as launch taps and video views
• crash, performance and other diagnostic data

Google uses this for advertising and analytics. Its own terms cover it: https://policies.google.com/technologies/partner-sites

Your choices

• Do not tap a video door. Nothing else in the app needs one.
• Change tracking in iPhone Settings, under Privacy & Security, Tracking.
• Where Google requires it, Profile shows "Ad privacy choices".
• Pro removes videos.

Report this ad

After a video you can report the ad. We store the reason, your note if you write one, and the time. We store no id with it. Please do not put personal details in the note.

Content downloads

Free chapters come from our public content server. Those requests carry no identifiers. Paid chapters come through our server, which uses your install id to check what you own. Cloudflare runs both, and like any host it sees your IP address when your phone connects.

Analytics

We have no analytics or crash tracking of our own, apart from the anonymous daily AI counts above. Google's ad software collects what is listed above, and only after you tap a video door.

Who receives data

| Company | What it does for Morywise | Data | Its policy | |---|---|---|---| | Apple | App Store, payments, iCloud, optional sign-in | Purchases; your iCloud data | Apple's | | Google (Firebase Authentication) | Sign-in, for account holders | User id, email, name | https://firebase.google.com/support/privacy | | Google (AdMob, consent form) | Videos, after you tap a video door | Listed above | https://policies.google.com/privacy | | Cloudflare | Runs our server, database and downloads | Everything our server keeps | https://www.cloudflare.com/privacypolicy/ | | Anthropic | AI card maker | Text of pages you choose; topics you type; cards we keep, when we test a prompt | https://www.anthropic.com/legal/privacy | | DeepSeek | AI card maker, when Anthropic is unavailable | Text of pages you choose; topics you type | https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html |

We do not sell your data. These companies may process data outside your country.

How long we keep data

• Account row and Firebase user: until you delete your account.
• AI page text and typed topics on our server: not kept.
• AI replies, kept so a lost reply is not charged twice: up to 7 days, with no id of you.
• AI cards we keep, linked or not: 180 days.
• The free AI try record (install id, time, used or not): kept, so the try cannot be taken twice. It has no automatic end date.
• Anonymous daily AI counts: kept. They hold no id and have no automatic end date.
• AI page text and typed topics at Anthropic: up to 30 days by default.
• AI page text and typed topics at DeepSeek, when it stands in: as DeepSeek's policy says.
• Purchase records, top-up balances, AI counts tied to a purchase: we keep these, because end dates, refunds and top-up balances depend on the whole history. They have no automatic end date yet.
• Video records and ad reports: kept. They have no automatic end date yet.

Your choices and requests

You can see and change your account details in Profile, and delete your account there. To stop updates, untick "Send me updates".

To ask about your data, or to ask us to correct or delete it, write to support@dexaloop.com. You may have further rights under the law where you live.

AI cards with no link cannot be found or deleted by person. AI cards linked to your account can be: unlink them in Profile, or delete your account.

Purchase and video records carry an install id, not a name or email. We may not be able to find yours from your email alone.

Children

Morywise is used by students and by adults. Under India's Digital Personal Data Protection Act, 2023, anyone under 18 is a child.

This is what the app does for anyone who leaves the 18+ box unticked:

• no account, so no name or email reaches our server
• no cloud AI
• no tracking popup
• non-personalised ads

Some limits you should know:

• The box is what the learner tells the app. We do not verify it.
• Someone under 18 who ticks the box anyway is treated as an adult.
• Videos are still ads without the tick, though not personalised.
• The install id, purchase records and video records exist for every learner, whatever their age. So does the free AI try record, for anyone who uses the try. Google also receives the install id with a video.
• We do not collect parental consent, because under-18s cannot make accounts.

A parent who wants a child's data removed can write to support@dexaloop.com.

Changes

If this policy changes, we will update the date at the top and publish the new version at https://dexaloop.com/morywise/privacy.