Effective Date: October 5, 2025
Last Updated: October 5, 2025
This Privacy Policy describes how Inertia360 ("we", "us", or "our") collects, uses, and protects your personal information when you use our web applications and services.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address: Used for authentication and account management
- Password: Stored securely using industry-standard encryption (we never store passwords in plain text)
1.2 Application-Specific Data
Different applications collect different types of data as needed for their functionality:
📚 Inertia360 Flashcards
- Flashcard content: The questions and answers you create
- Deck information: Names and organization of your flashcard decks
- Study progress: Review history, difficulty ratings, and spaced repetition data
- User preferences: Your last selected deck and app settings
Data Storage: This data is stored using Google Firebase services (Firestore Database and Firebase Authentication).
Additional applications may collect different data as described when you use them.
1.3 Automatically Collected Information
- Authentication cookies: Essential cookies for maintaining your login session
- Local storage: Some apps may store data locally in your browser for offline functionality
- Technical information: Browser type, device type, and basic usage statistics (only as necessary for service operation)
2. How We Use Your Information
We use your information solely to provide and improve our services:
- Account management: To create, maintain, and secure your account
- Service functionality: To provide the features of each application
- Data synchronization: To sync your data across devices
- Service improvements: To understand usage patterns and improve our applications
- Communication: To send important service-related notifications (we do NOT send marketing emails)
3. Data Storage and Security
3.1 Where Your Data is Stored
Applications using Firebase store data on Google Cloud Platform servers. The specific location depends on the Firebase project configuration, typically in the United States or Europe.
3.2 How We Protect Your Data
- Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest
- Access control: Your data is private to your account and protected by authentication
- Secure authentication: We use Firebase Authentication with industry-standard security practices
- Firestore security rules: Database rules ensure users can only access their own data
3.3 Data Retention
We retain your data for as long as your account is active. When you delete your account, all associated data is permanently deleted.
4. Third-Party Services
We use the following third-party services to provide our applications:
4.1 Google Firebase
Some applications use Firebase for:
- Authentication (Firebase Auth)
- Database storage (Cloud Firestore)
- Web hosting (Firebase Hosting)
Firebase is subject to Google's Privacy Policy and Firebase Data Processing Terms.
4.2 Other Services
Future applications may use different services, which will be documented here when implemented.
5. Your Rights (GDPR Compliance)
If you are in the European Economic Area (EEA), you have the following rights:
- Right to access: You can view all your data within the application
- Right to data portability: You can export your data in standard formats (JSON/CSV where applicable)
- Right to erasure: You can delete your account and all associated data at any time through the application settings
- Right to rectification: You can edit and update your data within the application
- Right to withdraw consent: You can delete your account to withdraw consent for data processing
How to Exercise Your Rights
- Export your data: Use the export feature within each application (typically found in deck/file menus)
- Delete your account: Look for the account/user menu (usually shows your email address) and select "Delete Account". The exact location may vary by application.
- Contact us: If you cannot find these options or need assistance, email us at the contact information below
6. Cookies and Tracking
6.1 Essential Cookies
We use essential cookies that are strictly necessary for the operation of our services:
- Authentication cookies: To maintain your login session
- Security cookies: To prevent fraud and secure our services
These cookies do not require consent under GDPR as they are essential for the service to function.
6.2 Analytics and Optional Cookies
We currently do NOT use analytics, advertising, or non-essential tracking cookies. If we add such features in the future, we will update this policy and obtain your consent.
7. Data Sharing and Disclosure
We do NOT sell, rent, or share your personal information with third parties, except:
- Service providers: We use Google Firebase to host and store data (as described in Section 4)
- Legal requirements: We may disclose information if required by law or to protect our rights
- Business transfer: If Inertia360 is acquired or merged, your data may be transferred (you will be notified)
8. Children's Privacy
Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
9. International Data Transfers
Your data may be stored and processed in countries outside your own, including the United States. We ensure appropriate safeguards are in place, including:
- Using services that comply with GDPR (Google Firebase is GDPR-compliant)
- Implementing standard contractual clauses where applicable
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Updating the "Last Updated" date at the top of this policy
- Posting a notice in our applications (for significant changes)
Your continued use of our services after changes indicates acceptance of the updated policy.
11. Free Service and Service Interruptions
Our services are provided free of charge. We operate on limited resources (Firebase free tier), which means:
- Temporary service interruptions may occur if usage limits are exceeded
- Your data remains safe and synced, even during interruptions
- Service typically resumes the following day when limits reset
← Back to Inertia360