Klappa (klappa.app) · Last updated 25 September 2026 · Applies to klappa.app and the Klappa iOS and macOS apps
Klappa is a flashcard and spaced-repetition study app. This policy explains what we collect, how we use it, how long we keep it, and who it is shared with. Questions: fahimmohi1024@gmail.com.
Europe/Warsaw) so review timing is recorded in your local wall-clock. If you sign in with Apple or Google we receive the email address (or Apple private-relay address) they return. If you enable notifications we store a push token for your device.When you connect an AI assistant (Claude, ChatGPT) to Klappa, it authorizes via OAuth 2.1. The assistant receives a scoped access token, never your API key or password, and can only read and write your own decks, cards, and study data. To disconnect an assistant, revoke the API key you used to connect it in Settings; the assistant loses access within an hour.
Nothing you write is sent to an AI processor (Groq, NVIDIA or Hugging Face) until you agree. AI features are off unless you turn them on: on the first-run screen, in Settings under Privacy with the AI features switch, or when you first ask Cortex a question. Turning them on requires you to confirm that you are 16 or older, because under EU data-protection law younger users cannot give this consent themselves. You can turn AI features off, and on again, at any time with the same switch. While it is off, Klappa sends nothing to those processors on your behalf: Ask Cortex, AI card and guide generation, and AI explanations are unavailable, and your decks are not automatically classified by subject. Turning it off does not recall text that was already processed.
Processing and storage are primarily in the United States. When your data moves from the European Union, the European Economic Area, the United Kingdom or Switzerland to the United States or another country, the transfer relies on the European Commission's adequacy decisions (including the EU-U.S. Data Privacy Framework where a provider is certified) or on the Standard Contractual Clauses in our providers' data processing terms. We do not serve ads, use no advertising SDKs, and collect no advertising identifier. We do not sell your account information (your name, email, avatar, or the content of your cards). If you opt in, we license the pseudonymized study-activity dataset described above; depending on where you live that may count as a "sale" or "share" of personal information, and you can withdraw at any time in Settings.
Account and study data are retained while your account is active. Verification codes and OAuth authorization codes are short-lived (minutes) and deleted/expired automatically. You can delete your decks and cards at any time, and your whole account from inside the app (see below).
You can delete your entire account from inside the app. Open Settings, scroll to Danger zone, and choose Delete your account. You will be asked to type your email address to confirm. Deletion is immediate and permanent: it removes your account, decks, folders, cards, study guides, imported Anki collections, review history and statistics, friendships, community membership, API keys and connector authorizations, and your sign-in. You can also delete individual decks, folders and cards at any time without deleting your account. If you signed in with Apple, you can also remove Klappa from your Apple Account: on your iPhone open Settings, tap your name, then Sign-In & Security, then Sign in with Apple. To access, export or correct your data, or if you cannot reach the app, email fahimmohi1024@gmail.com. We honor GDPR/CCPA-style requests.
API keys and OAuth codes/tokens are stored hashed; access is scoped per-user and enforced server-side. Transport is HTTPS.
Klappa has social features. Your username, display name, avatar, and, depending on your privacy settings, your study activity, achievements and shared decks are visible to other users. Verified school communities ("Commons") show your profile to other verified members of that school. In Klappa Live, the nickname and emoji you choose are broadcast to the host and to other participants.
You can join a Klappa Live session without a Klappa account. When you do, we create an anonymous account on your device to hold your place in the session; it persists on the device after the session ends. We collect the nickname and emoji you enter, your answers and response times, and your score. Anonymous participants are covered by this policy in the same way as account holders.
The Klappa iOS, iPadOS and macOS apps are covered by this policy. They contain no advertising SDKs and collect no advertising identifier. Sign in with Apple and Sign in with Google are available; we receive the email address and name released by those providers. If you use Apple's Hide My Email, we store the private-relay address as your account email and never receive your real address. If you enable notifications we store a push token for the device, joined to your account, so we can deliver friend requests, accepted requests, deck shares and streak reminders.
The apps report crashes and errors so we can fix them. Crash reports contain the error, the code path and device/OS details. Identity is stripped from these reports before they leave the device, so they are not linked to your account. We use no advertising or attribution analytics. We do not engage in tracking as Apple defines it: we do not link your data with third-party data for advertising or advertising measurement, and we do not share your data with data brokers. Klappa contains no advertising identifier and no advertising SDK.
You must be at least 13 to use Klappa (see the Terms), and we do not knowingly collect data from children under 13. If you believe a child has created an account, email us and we will delete it.
Klappa is operated by Fahim Mohi, 5511 Watervale Drive, Crozet, Virginia 22932, United States. Fahim Mohi is the controller of your personal data under the GDPR.