Privacy Policy
Updated 10 September 2026
Who is responsible
Alessandro Coscia is responsible for Flago and this website. Contact: . Address: Carrer de Vilardell, 8, Sants-Montjuïc, 08014 Barcelona, Spain.
Your learning data
Flago stores your learning profile, quiz answers and history, Study List, review items, streak, achievements, language and preferences on your device. No account is required. This information lets the app remember your progress and resume unfinished activities. Device backups may be handled separately by Apple under your device settings.
App analytics
The app uses PostHog Cloud EU for product analytics. Events describe app launches, onboarding steps, screens and feature use, quiz and study-session starts and completions, notification permission and reminder actions, notification opens, achievements and sharing actions. Events may include a randomly generated installation identifier, session identifiers, timestamps, language, app/device technical information and aggregate quiz results. We do not send your name, email, raw answer content or notification text as part of these events. An installation identifier can still constitute personal data even when we do not know your name.
What is switched off
Session recording, automatic tap capture and person profiles are disabled. The current app has no advertising SDK and does not request Apple’s advertising identifier. The website does not add marketing cookies or an analytics SDK. Future advertising or recording would require an updated assessment and notice before being introduced.
Notifications and sharing
Daily reminders are local notifications scheduled on your device with your permission. You can disable them in Flago or iOS Settings. When you choose to share a result, the iOS share sheet passes your selected image and text to the destination you choose; that service’s privacy terms then apply. Flago records the share action and its system completion status, not who receives it.
Website and support
Our website hosting providers process connection information, such as IP addresses and request metadata, to deliver and protect the site. If you email us, we use your address and message to respond and manage your request. Do not include sensitive information you do not need to share.
Purposes and legal basis
We use local learning data to provide the features you request (performance of a contract, Article 6(1)(b) GDPR). We process support messages to respond to requests and administer our relationship with you; where the request is not contractual, we rely on our legitimate interest in providing support (Article 6(1)(f)). Essential website processing serves our legitimate interests in delivering and securing the site. Our proposed basis for product analytics is our legitimate interest in understanding feature use and improving Flago. This basis does not override any consent requirement applicable to storage or access on your device. Notification permission is separate from analytics.
Recipients and international processing
We use PostHog, Inc.’s EU Cloud service for app analytics, with data hosted in Frankfurt, Germany. The website is delivered through OpenAI Sites and Cloudflare infrastructure. These providers may process connection and technical information to operate and protect their services. Using an EU data centre does not guarantee that all support access or subprocessors are within the EEA. Applicable international transfers must be covered by an adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses. Contact us for information about the safeguards applicable to your data. Sharing destinations selected by you and Apple’s device-backup services operate under their own privacy terms. We do not sell your personal data.
Retention and deletion
Our retention period for app analytics is one year from collection. Local learning progress remains on your device until you reset it or remove the app, subject to device backups. Resetting learning data does not delete analytics previously sent to PostHog. We keep support correspondence for as long as needed to resolve the request and any related follow-up, dispute or legal obligation. Technical website logs are retained for the period needed by the hosting providers to deliver, secure and troubleshoot the service, subject to their applicable service terms. Contact to request deletion; we may ask for proportionate information needed to locate your records.
Your rights
Depending on the applicable law, you can request access, correction, deletion, restriction, portability and object to processing. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. You may complain to your local supervisory authority, including the Spanish Data Protection Agency (AEPD). Email to exercise your rights.
Children and changes
Flago is a geography-learning app. If you believe a child has provided personal data that should not have been collected, contact so we can investigate and arrange deletion where appropriate. We will update this policy when our data practices change and provide any notice required by law.