Pizquita: Visual Words

Privacy Policy

Effective October 29, 2026

This policy explains what Pizquita (“we”, “us”) collects when you use the Pizquita app and website (the “Service”), why, who processes it for us, how long we keep it, and the choices you have. Pizquita is operated by Jiachen Gao, an individual (sole proprietor), doing business as Pizquita. Contact: support@pizquita.app.

The short version: to make your cards we send the words and text you submit to AI providers; we keep your account, your cards and how you use the app so it works across sessions and devices; we do not sell your data, show ads, or track you across other companies’ apps or websites.

1. What we collect

Account

• Your email address, and the identifiers from your sign-in method (one-time email code, Sign in with Apple, or Google). If you use Apple’s “Hide My Email”, we only see the relay address.
• If you sign in with Google, the name and profile-picture link Google provides. If you enter a display name in the app, we store it.
• An account identifier we assign to you.

What you submit and create

• The words and text you look up, including text you choose from a camera scan or send from another app, your language settings and the interests you pick.
• The cards made from them (meanings, examples, grammar notes, facts, pictures and pronunciation audio), your folders, and, if you use Cloud Sync, your library and an encrypted backup of your profile.
• Cards you share by link, and the folder name you give them.

How you use the app

• Daily and monthly usage counts that enforce your plan’s limits, and signals used to detect abuse of free usage (for example how often and how quickly requests are made).
• With Cloud Sync: your card views, time on a card, keep and toss choices, and study days, so your study record follows you across devices.

Device and technical data

• An app-specific device identifier (Apple’s identifier for vendor). We store it only in hashed form, linked to your account, to prevent abuse of free usage. We also use Apple’s DeviceCheck for the same purpose.
• Your IP address and browser or app version (user agent) on each sign-in session; hashed IP addresses in our abuse-prevention records; and standard request data in our servers’ logs.

Purchases

• Pizquita Pro is sold by Apple. We receive your subscription status through RevenueCat, which links it to your account identifier. We never see your payment details.

Support and problem reports

• What you send us: emails, screenshots, and in-app problem reports. An in-app report also includes your app version, device model, system version, language, time zone, memory and network state, and the last few actions and words in the app, to help us find the problem.

What we do not collect

We do not collect your location (only your time zone), contacts, photos or videos, audio, browsing history, health or financial information, or advertising identifiers. Camera scans are read on your device; the images do not leave it. We use no advertising, analytics or crash-reporting SDKs.

2. How we use it

• To provide the Service: sign you in, make your cards, store and sync your library, and apply your plan.
• To prevent fraud and abuse: enforce free-usage limits, detect automated or repeated misuse, and protect the Service.
• To support you: answer messages and investigate problem reports.
• Purchase analytics: RevenueCat uses your account identifier and purchase history to show us subscription figures.
• Email: we send sign-in codes and account messages. Product emails are sent only if you turn them on in Settings; turn them off there or with the unsubscribe link in any such email.

We do not sell or rent your personal data, we do not use it for advertising, and we do not use your content to train AI models.

3. AI processing

Before you start, the app asks for your permission to send the text you submit to AI providers. When you look up a word, the text and your language settings go to:

• OpenAI: the card text (meanings, examples, grammar notes, facts) and the picture description;
• Vercel (AI Gateway), OpenAI and TypeSafe: short checks such as detecting the language and screening picture descriptions before a picture is made;
• Cloudflare: routing these requests (AI Gateway) and generating the pictures;
• Microsoft Azure: pronunciation audio.

These requests carry the text and language settings, not your name or email address. Generated results for a word and language may be cached and reused for other people who look up the same word; the AI Gateway keeps cached responses for up to 30 days. AI-generated content can be wrong.

To withdraw this permission, stop using the Service and delete your account (section 6), or contact us.

4. Who processes your data

These providers may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as standard contractual clauses. We share personal data with no one else, except when required by law or to protect the rights, safety or integrity of the Service and its users.

5. Sharing cards

When you share cards, we create a link. Anyone who has the link can open it, without signing in, for 30 days; after that it expires and we delete it. A shared link contains the cards and the folder name you chose, not your email address. People who open it can save copies of the cards in their own app, which we cannot take back. We may remove a shared link that breaks our Terms.

6. How long we keep it, and deleting your account

• While your account exists we keep your account, cards, settings, usage counts, abuse-prevention records and problem reports. Sign-in sessions are deleted after they expire. Sign-in codes are removed from our records once the email is sent.
• Deleting your account: in the app, open Settings → Account → Delete Account, or email us. Deletion takes effect after 7 days; signing in during those 7 days cancels it. We then delete your profile, cards, folders, study records, usage counts, sessions, shared links, problem reports, abuse-prevention records and profile backup. Pictures made only for your cards are removed from storage over the following weeks.
• What remains after deletion: a one-way hash of your email address and the deletion date, as a record that the account was deleted; copies of emails we sent you; your support emails; and generated cards and audio for words, which are shared by everyone who looks up the same word and are no longer linked to you.
• Support emails are kept for as long as we need them to help you and keep a record of our correspondence; ask us to delete yours at any time.
• Server logs are kept for a limited period set by our hosting provider, then deleted automatically.
• Purchases: Apple and RevenueCat keep purchase records under their own policies. Deleting your account does not cancel a subscription; cancel it in your Apple Account settings.

7. Your rights

Wherever you live, you can ask us to access, correct, export, restrict or delete your personal data, or object to a use of it. Email support@pizquita.app; we reply within 30 days. If you are in the EEA, the UK or another place with a data-protection authority, you can also complain to it. We will not treat you differently for using these rights.

8. Children

The Service is not directed to children under 13 (or the higher minimum age in your country; see our Terms), and we do not knowingly collect their data. If you believe a child has an account, contact us and we will delete it.

9. Security

Data is encrypted in transit, every request is authenticated, and our server code checks that each record belongs to the account asking for it. No system is perfectly secure; if a breach affects your personal data, we will tell you as the law requires.

10. Changes

We may update this policy as the Service changes. For material changes we will tell you in the app or by email before they take effect, and ask for your permission again where it is needed. The date at the top shows the current version.

11. Contact

Privacy questions and requests: support@pizquita.app.