1. Introduction

Foxxy Flashcards is a product of The CodeCave GmbH, Alfred-Nobel-Straße 29, 50226 Frechen, Deutschland ("we", "us", "our"). This Privacy Policy explains how we collect, use, store, and share information when you use our mobile application and website (collectively, "Services").

We are based in the European Union and comply with the General Data Protection Regulation (GDPR). By using Foxxy, you agree to the practices described in this policy.

2. Data We Collect

Account Data

• Email address (for account creation and communication)
• Display name (optional, for personalization)
• Authentication data (password hash, OAuth tokens)

Study Data

• Flashcard content (questions, answers, explanations, images)
• Study progress (review history, ratings, streaks)
• Deck and module organization
• Gamification data (XP, level, Foxcoins, Fox Den customizations)

Technical Data

• Device information (type, OS version)
• App usage analytics (anonymized)
• Crash reports (anonymized)

3. How We Use Your Data

• Providing and maintaining the Foxxy service
• Personalizing your learning experience (spaced repetition scheduling)
• Syncing your data across devices
• Sending important account notifications
• Improving our service through anonymized analytics
• Processing payments for Foxxy Pro (via our payment processor)

We never sell your personal data to third parties.

4. Data Storage & Security

Your data is stored on EU-based servers provided by Supabase (see our Subprocessors page). We use end-to-end encryption for data in transit and encryption at rest. Automatic backups are performed daily.

5. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Port your data to another service
• Restrict processing of your data
• Object to data processing

You can delete your account and all associated data at any time through the app settings. To exercise other rights, contact us at jovanovic@thecodecave.de.

6. Website Analytics (Rybbit)

We use Rybbit for website analytics. Rybbit is an open-source, privacy-friendly analytics platform hosted on EU infrastructure in Germany.

Rybbit is designed to be fully GDPR, CCPA, and ePrivacy Directive compliant:

• No cookies: Rybbit operates entirely without cookies or local storage, so no cookie consent banner is required
• No personal data: No personally identifiable information is collected
• No cross-site tracking: Users are not tracked across websites
• IP addresses are not stored: IP addresses are only used temporarily to determine your approximate country/region and are then discarded
• Data collected: Page URLs, referrer, browser type, OS, screen resolution, device type, country/region, and session duration — all anonymized
• Data retention: Analytics data is retained for 12 months, then automatically deleted

Rybbit is 100% open source (AGPL 3.0). You can review the source code at github.com/rybbit-io/rybbit.

7. Cookies

Our website uses only essential cookies for basic functionality (e.g., language preference). We do not use analytics cookies — our analytics provider Rybbit operates entirely without cookies. See our Cookie Policy for details.

8. Contact

For privacy-related inquiries, contact us at:
The CodeCave GmbH
Alfred-Nobel-Straße 29, 50226 Frechen, Deutschland
Email: jovanovic@thecodecave.de
Phone: +49 152 04943138