Privacy Policy · Cardsheet
Cardsheet does not collect any data. Its App Store privacy label says Data Not Collected, and this page explains what that means in practice.
What we collect
Nothing. Cardsheet has no account and no sign-in, and we run no server for it. The app contains no analytics, advertising, crash-reporting or tracking code and no third-party SDKs. Your PDFs, cards, answers, review history and usage are never sent to us or to any third party. The only numbers the developer sees are the aggregate download and sales reports that Apple provides in App Store Connect.
Where your PDFs and cards are kept
When you import a PDF, Cardsheet saves its own copy inside the app; your original file is never changed. Reading the text, recognizing scanned pages, generating cards and questions, grading answers and scheduling reviews all happen on this iPad. Decks, cards, questions, review history, seals and settings are stored in Cardsheet's own database on this iPad. Deleting a deck also deletes Cardsheet's copy of its PDF.
Handwritten answers
When you write an answer with Apple Pencil or your finger, Apple's on-device text recognition reads it so it can be graded. Cardsheet keeps the recognized text with your review history; the drawing itself is not saved.
On-device enhancement
On iPads that support Apple Intelligence, Cardsheet can use Apple's on-device language model to reword some cards. This runs on the iPad: Cardsheet sends no text to us or to any cloud model for it. You can switch it off in Settings → On-device enhancement.
Encrypted iCloud backup (optional)
Encrypted backup is part of Cardsheet Pro and stays off until you switch it on in Settings. When it is on, Cardsheet encrypts a snapshot of your decks, cards, review history and seals on this iPad with AES-256-GCM and saves it in Cardsheet's private area of your own iCloud Drive. With Include PDFs on, your imported PDFs are encrypted the same way and saved next to it. The key is created on your device and kept in your iCloud Keychain, so only devices signed in to your Apple Account can open the backup. We never receive the file or the key, and we cannot read either.
The backup is refreshed when you leave the app. It is restored only when you tap Restore, and restoring merges the backup into what is on the iPad without deleting anything. When you switch backup off, Cardsheet asks whether to delete the snapshot or keep it. Deleting the app does not delete a backup you made: to remove it later, switch backup off and choose Delete it, or open the Settings app → your name → iCloud → storage → Cardsheet and delete its data.
Review reminders
The daily review reminder is a local notification scheduled on this iPad. It is off until you turn it on in Settings, and iPadOS asks for your permission first. No push service is involved. If you decline, everything else works as before.
Exports and sharing
TSV, CSV and PDF exports and semester posters are made on this iPad, and only when you ask for one. Cardsheet hands the file to the share sheet; where it goes next (Files, Mail, AirDrop or another app) is your choice, and that service's own privacy policy applies.
Purchases
Cardsheet Pro is bought through Apple's In-App Purchase. Apple processes the payment; we never see your payment details, your name or your Apple Account. Cardsheet only checks, on this iPad, whether Pro is active.
Network connections
Cardsheet goes online only to talk to the App Store (buying and restoring Pro) and, if you turn backup on, to your own iCloud Drive. Importing PDFs, generating cards, grading and reviewing all work offline.
Children
Cardsheet collects no personal data from anyone, children included.
Changes
If Cardsheet ever starts handling data differently, this policy and the App Store privacy label will be updated first, and the effective date below will change.
Contact
Questions about privacy: Fuuqiu · Fuuqiu@gmail.com
Cardsheet is published by WANG WENJIE. Effective date: October 2, 2026.