Privacy Policy

Effective date: 2026-07-20 · Last updated: 2026-07-20

1. Introduction

DuckyStudy is a study companion offering a focus timer, subject-based time tracking, flashcards with spaced repetition, study groups, and achievements. This policy applies to the mobile applications, their supporting services, and this website.

2. Information We Collect

2.1 Account & Authentication

• Anonymous user ID — generated by Firebase Authentication so we can sync your progress across devices. No email or password is required by default.
• Optional Google Sign-In — if you choose to sign in, we receive your Google account email and display name.

2.2 Profile & Study Data (Firebase Firestore)

• Nickname you choose in-app
• Selected duck character skin and unlocked achievements
• Study streak counters and aggregated study statistics
• Flashcard decks, notes, and SM-2 spaced-repetition state

2.3 Study Group Presence (Firebase Realtime Database)

• User ID, nickname, current status (focusing / break / idle), current subject, session duration, and cheer counts
• Report payloads submitted through the in-app moderation flow are stored for administrator review only

2.4 Analytics (Firebase Analytics → BigQuery)

We log app-usage events to understand feature usage and improve the App. Examples: session_start, session_complete, subject_switch, cheer, rewarded_ad_view. These events include a Firebase installation ID, device model, OS version, app version, and country.

2.5 Crash Reports (Firebase Crashlytics)

When the App crashes we collect a stack trace, device model, OS version, and app state at the time of the crash to diagnose and fix bugs.

2.6 Push Notifications (Firebase Cloud Messaging)

We store an FCM token so we can send you streak reminders and notifications when someone sends you a cheer. You can disable notifications in your device settings.

2.7 Advertising (Google AdMob)

• We display banner, interstitial, and rewarded ads through Google AdMob.
• On iOS, AdMob only uses the Identifier for Advertisers (IDFA) if you grant App Tracking Transparency consent.
• On Android, AdMob uses the Google Advertising ID subject to your device settings.

2.8 User Acquisition Attribution (Google Ads UAC)

To measure the effectiveness of our advertising, we receive install-referrer information from the app store campaign that brought you to the App.

2.9 Purchases (Google Play Billing / Apple StoreKit)

In-app purchases are processed by Google Play or Apple. We receive a purchase token or transaction ID to unlock features. We do not receive your payment card details.

2.10 Local Storage on Your Device

We store study sessions, notes, collections, and preferences locally using Room DB / SharedPreferences (Android) or Core Data / UserDefaults (iOS). This data stays on your device unless you sync it to your account.

3. How We Use Your Information

• Provide core App functionality (timer, flashcards, study groups, collections)
• Sync your profile and progress across devices
• Deliver in-app advertisements through AdMob
• Analyze feature usage to improve the App
• Diagnose crashes and technical issues
• Send push notifications you have opted into
• Process in-app purchases and restore prior purchases
• Prevent abuse and enforce our terms

4. Legal Basis for Processing (GDPR / EEA & UK)

Where GDPR applies, we rely on the following legal bases:

• Performance of a contract — to deliver the App and its features you request.
• Consent — for personalized advertising (via ATT on iOS or in-app consent flows where required), push notifications, and optional analytics where required by law.
• Legitimate interests — improving the App, preventing fraud and abuse, and understanding aggregate usage. You may object at any time by contacting us.
• Legal obligation — retaining transaction records where required.

5. Data Sharing

We do not sell your personal information. We share data only with service providers who process it on our behalf:

We may also disclose information if required by law, to enforce our terms, or to protect the rights, property, or safety of our users or others.

6. Data Retention

• Account and study data — retained while your account is active. Deleted within 30 days after you request account deletion.
• Analytics events — retained in Firebase Analytics and BigQuery for up to 26 months.
• Crash logs — retained for up to 90 days.
• Purchase records — retained as required by tax and accounting laws.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Delete your account and personal data
• Receive a copy of your data in a portable format
• Restrict or object to certain processing
• Withdraw consent at any time (for consent-based processing)
• Lodge a complaint with your local data protection authority

You can request account deletion from within the App (Settings → Account → Delete Account) or by emailing 4wl.apps+duckyheals@gmail.com.

8. Children's Privacy

DuckyStudy is designed for students, including minors. We take additional precautions to protect younger users:

• Study groups only allow preset messages — free-text chat is disabled to prevent inappropriate contact.
• Real names are not displayed; users choose a nickname.
• In Korea, in accordance with PIPC guidelines, users under 14 require verifiable parental consent before creating an account.
• We do not knowingly collect data from children under 13 in jurisdictions covered by COPPA. If you believe a child has provided personal information without parental consent, contact us at 4wl.apps+duckyheals@gmail.com and we will delete the data.

9. International Data Transfers

Our service providers (primarily Google Firebase) process data on servers located in the United States and other regions. Where required, we rely on Standard Contractual Clauses or other approved transfer mechanisms.

10. Security

We use industry-standard measures to protect your information, including TLS encryption in transit, Firebase security rules restricting access to your own data, and administrative access controls. No system is 100% secure — please use a strong password on your Google account if you sign in with Google.

11. Third-Party Links

The App and this website may contain links to third-party sites. We are not responsible for the privacy practices of those sites.

12. Cookies & Local Storage

The App itself does not use browser cookies. Firebase SDKs and local databases (Room / Core Data / SharedPreferences / UserDefaults) store data on your device to keep you signed in and remember your preferences. This website uses no tracking cookies.

13. Region-Specific Disclosures

13.1 European Economic Area, United Kingdom, and Switzerland (GDPR)

DuckyHeals is the data controller for your personal data. You may contact us at 4wl.apps+duckyheals@gmail.com to exercise the rights listed in Section 7.

13.2 California, USA (CCPA / CPRA)

California residents have the right to know what personal information we collect, request deletion, request correction, and opt out of the "sale" or "sharing" of personal information. We do not sell your personal information. To submit a request, email 4wl.apps+duckyheals@gmail.com.

13.3 Republic of Korea (PIPA / PIPC)

We process personal information in accordance with the Personal Information Protection Act. Users under 14 must obtain parental consent. For inquiries, contact our privacy representative at 4wl.apps+duckyheals@gmail.com.

14. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date above. Material changes will be announced in the App.

15. Contact Us

DuckyHeals
Email: 4wl.apps+duckyheals@gmail.com