Privacy Policy

Jacob König and Felix Bischof jointly operate the Franki website and determine how its personal data is processed. We are based in Zürich, Switzerland, and operate as individuals; Franki is not currently a registered company.

For privacy questions and requests, contact us at info@franki-flashcards.com. This policy addresses the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

Waitlist: the email address you enter, your subscription status, and signup attribution. Attribution is the utm_source value in the page URL, the referring website’s hostname, or “direct”. The signup handler also accepts an optional current study tool, but the current website form asks only for your email. We send these signup details to Loops to manage the waitlist.

Website requests: our hosting provider, Vercel, processes technical information needed to deliver and protect the site, such as IP addresses, request times, requested URLs, browser information, and error or security logs. Our application logs failed signup status codes rather than the email address you submit.

Correspondence: if you email us, we receive your address, message, and any information you choose to include. Please do not send sensitive personal information unless it is necessary for your request.

The current website does not create study accounts, accept deck or document uploads, process AI prompts, or take subscription payments. Our website does not call an AI model to process waitlist signups.

We use your email to record your waitlist signup and send the Franki launch announcement you requested. Joining is voluntary. You can browse the website without providing an email address; we need it only if you want the announcement.

For EU processing to which GDPR applies, the launch email relies on your consent (Article 6(1)(a)). Technical request processing and security rely on our legitimate interests in operating a reliable website and preventing abuse (Article 6(1)(f)). We use signup attribution to understand where our waitlist registrations originate, on the same legitimate-interest basis. You may object to this processing.

We use correspondence to answer your questions and handle requests. Depending on the request, GDPR processing relies on taking steps you request before a contract (Article 6(1)(b)), our legitimate interest in responding to enquiries (Article 6(1)(f)), or a legal obligation (Article 6(1)(c)).

Waitlist analytics is disabled. This website does not load the PostHog analytics SDK or send waitlist signup events to PostHog. We do not currently use advertising cookies or session replay. Website request and security logs remain necessary to deliver and protect the site.

The site’s language routing may use an essential cookie to remember a language preference. Fonts are hosted locally, so displaying them does not contact an external font service. Any future optional analytics will require a separate consent flow and an updated notice.

Loops (Astrodon Corporation, United States) stores our waitlist contacts and sends the launch email. It receives the signup details described above and processes delivery, bounce, and unsubscribe information needed to run the mailing list. Vercel Inc. (United States) hosts the website and processes technical request information. If you contact us by email, the email services involved also handle your correspondence.

These providers and their subprocessors may process data in the United States and other countries outside Switzerland or the EEA. We do not promise that website or waitlist data stays in the EU. Their processing agreements provide for international-transfer safeguards, including applicable adequacy decisions or standard contractual clauses; Vercel’s agreement includes provisions for Swiss transfers.

You can read the Loops Data Processing Agreement and Vercel Data Processing Addendum, including their linked subprocessor information. Contact us to request information about the safeguards applicable to your data.

We do not sell your personal data. We disclose it only as needed to run the website and waitlist, answer you, or meet applicable legal obligations.

We keep your waitlist contact while the waitlist is active and you remain subscribed. If you unsubscribe, we stop sending launch emails. Unsubscribing may retain a minimal suppression record so we can respect your choice; you can separately request deletion. When the waitlist purpose ends, we remove contacts unless you have separately chosen another service or mailing list.

We keep correspondence only as long as needed to resolve your request and any related legal obligations or disputes. Technical logs follow the hosting service’s retention settings and are kept for operational and security needs. Limited data may remain in provider backups until their retention cycle expires or be retained where law requires it. Contact us if you need details about a specific record.

The live website uses HTTPS. The waitlist form validates submitted information, includes a hidden spam-check field, and sends signup details through a server endpoint. Loops credentials stay on the server. Access to mailing-list data is limited to running the project. No internet service can guarantee absolute security.

You can withdraw consent to launch emails at any time using the unsubscribe link in an email or by contacting info@franki-flashcards.com. Withdrawal does not affect processing that was lawful before you withdrew.

Depending on the applicable law and its conditions, you may request access, correction, deletion, restriction of processing, or a portable copy of your data, and object to processing based on legitimate interests. We may ask for proportionate information to verify your identity. We normally answer access requests within 30 days under Swiss law, or within one month under GDPR; we will explain any lawful extension.

You can raise a concern with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where GDPR applies, your competent EU/EEA supervisory authority. No decision with legal or similarly significant effects is made about you solely by automated processing on this website.

We will update this page and its date if website processing changes, and explain material changes as appropriate. An update does not itself grant consent to a new purpose. App accounts, learning content, cloud media, AI processing, and billing will be addressed separately before those services launch.