Private & Offline-First by Design

At Estopia, we believe your educational data and study habits belong to you. Engram is designed from the ground up as a private, offline-first study companion for Android handheld devices and Wear OS smartwatches. We do not require you to create an account, we do not track your identity or location, and we do not sell, monetize, or share your data with advertisers or third parties.

This Privacy Policy explains the nature of any data processed when you use our Android handheld application and our Wear OS smartwatch companion application (net.estopia.flashcards).

Information We Do Not Collect

Engram does not collect, transmit, or store any of the following:

• No Personal Identification Information: No names, email addresses, phone numbers, or account logins.
• No Location Data: No GPS, Wi-Fi location, or cell tower location data.
• No Financial Information: No credit cards, banking info, or in-app purchases.
• No Biometric Data: No health, heart rate, or biometric sensor data from Wear OS smartwatches.
• No Advertising Identifiers: No Google Advertising ID (AAID) or cross-app tracking.
• No Third-Party Analytics: No embedded tracking or analytics SDKs (such as Firebase Analytics, Google Analytics, Adjust, AppsFlyer, or Facebook SDK).

Information Handled Locally on Your Device

To provide its core functionality, Engram stores flashcard data and study progress strictly on your device:

• Flashcard Decks: Pre-installed revision decks and custom CSV decks imported from files or URLs are stored in your device's private internal application storage (/data/data/net.estopia.flashcards/files/).
• Study Telemetry & Session State: Active card indices, completion percentages, and session counters (Correct, Incorrect, Skipped) are saved locally in Android DataStore / SharedPreferences.
• Data Deletion: You have complete control over your data. Tapping the delete icon on any deck immediately removes the associated CSV file and clears all stored session metrics from disk. Uninstalling the app permanently purges all local app data.

Network Communications & Cloud Deck Hub

Engram uses network access (android.permission.INTERNET and ACCESS_NETWORK_STATE) exclusively for user-initiated cloud features:

• Official Decks Catalog: When you open the Cloud Deck Hub, Engram sends an HTTPS request to our public catalog endpoint (https://api.estopia.net) to fetch available flashcard decks. Transmissions are encrypted using TLS/HTTPS. Our web servers maintain standard ephemeral access logs (IP address, timestamp, requested path) strictly for operational security and rate-limiting. These logs are not tied to any user profile and are purged periodically.
• Custom URL & Repository Downloads: If you choose to download a deck from a custom URL or third-party repository manifest, your device connects directly to that third-party URL. We do not intermediate, monitor, or log custom URL downloads.

Multi-Device Synchronization (Wear OS Companion)

Engram enables real-time synchronization between your Android handheld device and paired Wear OS smartwatch:

• Synchronization is handled using the Google Play Services Wearable Data Layer (DataClient).
• Data exchanged consists strictly of non-personal study payload: active deck filename, card index, and session counters.
• This communication occurs directly between your paired devices via Bluetooth or local Wi-Fi. It is never routed through or stored on external Estopia servers.

Children's Privacy (COPPA & GDPR Compliance)

Engram is an educational study tool suitable for general audiences, including students. Because we do not collect personal information from any user, we fully comply with:

• COPPA (Children's Online Privacy Protection Act) in the United States.
• GDPR (General Data Protection Regulation) in the European Union and United Kingdom.

If you are a parent or guardian and have questions regarding your child's use of Engram, please contact us at [email protected].

Security of Your Information

All network communications with Estopia services are encrypted in transit using TLS 1.2 / TLS 1.3. Local flashcard storage is protected by Android's application sandbox, which isolates Engram's files from other applications on your device.

Changes to This Privacy Policy

We may update our Privacy Policy periodically to reflect app updates or regulatory requirements. Any updates will be posted to this page with a revised "Last Updated" timestamp.