privacy
last updated: 12 June 2026
the short version: your learning history stays on your device. the app sends a small stream of anonymous usage events to a server we run ourselves, so we can fix the cards and bugs you actually hit. it's on by default and you can turn it off in settings. we don't sell data, we don't run ads, and there are no third-party analytics or advertising SDKs in the app.
what stays on your device
your review history: which cards you've seen, your "good" and "again" answers, your due dates, and the scheduling state that decides when each card comes back. all of it lives on your device and only there. there is no account and no sign-in. if you delete the app, that history is gone. if you reinstall, you start fresh.
what leaves your device
the app collects anonymous usage events and sends them to a server we run ourselves: a first-party Cloudflare Worker at shway-observability.senkubuilds.workers.dev. events are buffered on your device and sent in small batches, roughly every 30 seconds. there are three kinds:
- card outcomes: which card you reviewed, whether the answer was "good" or "again", and how long it took.
- card feedback: the feedback chip you tap when something about a card is off.
- bundle pulls: when the app downloads new content, so we know which version you're on.
each event carries a random device identifier the app generates on first launch and keeps in your device's secure storage. it is random. it is not your name, email, phone number, advertising ID, or anything else that identifies you. we never learn who you are.
that's the whole list. no third-party analytics or advertising SDK is in the app. no Google Analytics, no Firebase, no Meta, no ad trackers. the events go to our worker and nowhere else.
why we collect it
one reason: fixing what you actually hit. if a card's audio is broken or a translation is off, your feedback and outcomes tell us, and the fix ships in the next content update. the same events power the "your fixes" screen and the public changelog, so you can see that the thing you flagged actually got fixed.
turning it off
usage events are on by default. you can switch them off any time in the app's settings. once off, your device stops sending events immediately. events your device already sent are not automatically deleted today; they are kept under the retention rule below. if you want them gone sooner, email us.
how long we keep it
usage events are kept while we operate the service, and only for the purpose above. when we no longer need them to fix content and bugs, we delete them.
subscriptions
when you subscribe to Shway Plus, purchases are processed by Apple or Google and by RevenueCat, our subscription manager. they handle the payment; we never see your card details, name, or address. we only learn that a subscription is active or expired. their policies: revenuecat.com/privacy.
content delivery
the app downloads daily card content from Cloudflare R2 (a content delivery network). Cloudflare logs these requests to serve the files and prevent abuse. we don't use those logs for analytics. their policy: cloudflare.com/privacypolicy.
children
Shway is designed for adult learners. we do not knowingly collect personal information from anyone under 13. if you believe a child has provided personal information, contact us at the address below and we will delete it.
changes
if this policy changes, the "last updated" date at the top changes too. material changes are announced in the app's "what's new" notes.
contact
questions: [email protected]
this policy is published at shway.app/privacy. the version behind the App Store and Play Store data-safety labels and the version on this page are kept in sync.