Privacy Policy

As of October 2026

1. Controller

The controller for data processing on this website and in the OutLearn app is:

Paul Caubet, Pilgerhausstr. 18, 86152 Augsburg, Germany. Email:

2. What data we process

  • Account: username, email address and optionally a profile picture, so you can sign in and use your decks on all devices (Art. 6(1)(b) GDPR).
  • Content: your decks, cards, folders and images and your learning progress (for example review dates and exam results), to provide the app (Art. 6(1)(b) GDPR).
  • Public decks: when you make a deck public, it is visible to everyone, in the app and on outlearnapp.com/decks, and search engines can list it. The deck name, its cards and your display name are published. You can make a deck private or delete it at any time.
  • Automatic sorting: when a deck is published, an automated system reads its name and first cards to assign a subject and language.
  • Pro purchases: payments go through Apple, Google or, in the web version, Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland, and Stripe, Inc., USA). We only learn that and when Pro was bought, not your payment details.
  • Notifications: if you allow notifications, we store a device token to send reminders.
  • Crash reports and usage analytics: see section 5.

3. Classes for teachers

Teachers with a teacher license can create classes. When students join a class, the teacher sees the name chosen in the app, the join request and the learning status on the class decks: known and due cards, reviews, exam results, streak, study time, participation in shared learning sessions and live quizzes (including answers, points and whether the app was left meanwhile). The app tells students what the teacher sees. Only data about the class decks is reported to the teacher. Teachers can rename students for themselves only; that name is not visible to others.

For classroom use, the school or teacher is responsible for lawfulness, especially with minors. We recommend letting students take part with a nickname instead of their real name and involving the school's data protection officer. On request we provide information for schools.

4. Hosting and service providers

We use Google Firebase (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA) for sign-in, database, file storage, cloud functions, hosting and notifications. Google processes data on our behalf. A transfer to the USA cannot be ruled out; it relies on the adequacy decision for the EU-US Data Privacy Framework or standard contractual clauses (Art. 44 et seq. GDPR).

5. Analytics and ad measurement

The app uses Firebase Analytics and Firebase Crashlytics to fix crashes and understand which features are used. Device identifiers and event data (for example app opens, purchases) may be sent to Google.

This website uses the Google Ads tag to measure whether ads lead to installs and purchases. Cookies or similar technologies may be set and data may be sent to Google. The legal basis is our legitimate interest in measuring the effectiveness of our advertising (Art. 6(1)(f) GDPR). You can object at any time by emailing us, and you can block cookies in your browser.

6. Storage period

We keep your data as long as your account exists. If you delete your account in the app's settings or ask us to, we delete your data. Statutory retention duties, for example for purchase records, remain unaffected.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw any consent at any time with effect for the future. Write to .

You also have the right to lodge a complaint with a data protection authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

8. Minors

If you are under 16, you need the consent of your parents or your school. If we learn of a child's data without consent, we delete it when notified.

9. Changes

We update this policy when the app or the law changes. The current version is always on this page.