Privacy Policy

Deckivra turns an idea, notes, a document, a link, a photo or a voice memo into an editable presentation. This policy explains what the app and its servers do with your information. It describes what the app does today. Deckivra is published by the developer named on its App Store and Google Play listings, and "we" means that developer.

In short

• There is no account, no sign-in, and no name, e-mail address or phone number is collected.
• Your decks live on your device. Text, audio or images leave it only when you ask an AI feature to work on them, and

only after you allow that in the app.

• Your prompts, documents, audio and images are processed to produce your result and are not kept on our servers.
• You can delete everything we hold about your install from Settings, or from the delete page if the app is gone.

What stays on your device

Your decks, pictures, speaker notes, exported files and settings are stored on your device. The app also keeps on the device your choice about AI use, a random install key, and your deletion code, which sits in the system's secure storage. Exports (PowerPoint, PDF, images) go wherever you send them with the share sheet; we do not receive them.

What is sent when you use an AI feature

Before the first AI request, the app shows what will be sent and asks for your permission. You can withdraw it at any time in Settings, and from then on the app makes no AI request.

When you use an AI feature, the app sends what that feature needs:

• the topic, notes or instructions you typed or pasted, and the slide text being rewritten or reviewed;
• text extracted from a document you chose to import, or the address of a web page you asked us to read (our server

fetches that page);

• a voice memo of up to three minutes, to turn it into a transcript you can edit;
• a photo of notes or a whiteboard, to read the text in it;
• a description of an image, when you ask for a picture on a slide.

Our servers pass this to an AI service that generates the result and send the result back. We do not keep your prompts, documents, audio, images or the generated text or pictures on our servers once the request is finished.

What our servers keep

• Install records: a random install ID, your install's public key, platform, app version and anonymous user ID. These recognise your install and check that requests come from the genuine app. We keep them until you delete your data, or 180 days after the install last used the service.
• Purchase records: the result of checking your subscription or Google Play full-access lifetime purchase, and a keyed hash of your purchase reference. The store reference itself is kept encrypted. These verify your paid access and stay until you delete your data or the install is purged.
• AI request records: each request's type, credits used, status, time taken and request ID. These count your monthly allowance and help fix faults. We keep them for 30 days.
• Replay protection: a one-time value attached to each signed request stops captured requests from being replayed. We keep it for 10 minutes.
• Content reports: when you use Report, we keep the kind, reason, your note (up to 500 characters) and a content excerpt (up to 2,000 characters) to review reports about AI-generated content. We keep them for 90 days.

Your network address reaches our servers, as it does for any internet service. We use it to limit abuse and to keep the service available.

Usage and crash data

If you leave "Share usage and crash data" on in Settings, the app sends usage events and crash reports through Google Firebase. Usage events say which step happened and carry only small labels and counts: onboarding completed, paywall shown, a purchase or a restore result, a deck started with a kind of source, an outline or deck generated with its slide count, an AI action type or failure code, an export format, a presentation started, a report sent, a deck deleted. Crash reports carry the app version, device model, system version and technical details of the crash. They never contain your prompts, document text, audio, deck titles or generated output. Turning the switch off stops both.

Checks that the app is genuine

The app signs in to Firebase without asking who you are, and uses Firebase App Check (Apple App Attest on iPhone, Google Play Integrity on Android) so our servers only answer the genuine app. Google and Apple process the device attestation this needs.

Permissions

The app asks for the microphone only when you record a voice memo, and for the camera or photo library only when you photograph notes or add a picture. Files are read only when you pick one. You can turn any permission off in your system settings; the features that need it then stay unavailable.

Purchases and subscriptions

Payment is handled entirely by the App Store or Google Play. We never see your card or billing details. We receive the result of the store's check of your subscription or Google Play full-access lifetime purchase. Lifetime purchases do not renew automatically. To cancel a subscription, use your store's subscription settings.

Who receives data

• Google (Firebase): anonymous sign-in, App Check, usage events and crash reports.
• Apple and Google: billing, subscription and purchase verification, and device attestation.
• An AI service, through our AI gateway: the material of an AI request, while it is processed.
• Hosting and network providers: the connection to our servers and to this website, which includes your network address.

We do not sell your data, we show no advertising, and we do not track you across other companies' apps or websites.

Deleting your data

• In the app: Settings, then Delete my data. It removes the records our servers hold for your install, deletes your

anonymous user and the install identity stored on the device. It works without an active subscription.

• Without the app: open the delete page and enter the deletion code shown under

Settings, Delete my data. This is meant for people who have uninstalled the app.

• Automatically: an install that has not used the service for 180 days is deleted the same way.

After a deletion we keep only salted hashes: counters of purchases, and retired identifiers that stop a deleted identity from being recreated (kept for 365 days). For seven days the public key of the deleted install is also kept, so that a repeated deletion request from the same device is recognised. A content report you sent stays for its 90 days but is no longer linked to your install. Decks on your device are not touched by a server deletion; delete them in the app or by uninstalling. Deleting your data does not cancel your subscription; cancel it in your store.

Your choices and requests

You can change the AI permission and the usage and crash switch at any time in Settings. We hold no name or e-mail address, so we can only find your data through your deletion code. To ask a question, request access or complain, write to us through the support page.

Children

Deckivra is not directed to children under 13, and we do not knowingly collect data from them.

Changes

When this policy changes, this page changes with it.