Privacy Policy

Last updated: 6 October 2026

KnowSoda is built so that learning works without sending anything about you anywhere. This policy explains what stays on your phone, the few cases where data does leave it, and the choices you have.

1. Who we are

KnowSoda is developed and published by Basalt Works, Tarragona, Spain (“Basalt Works”, “we”, “us”). Basalt Works is the data controller for personal data handled directly through the KnowSoda app and this website (together, the “App”).

Privacy and data requests: contact@basaltworks.com. Product support and card reports: hello@knowsoda.com.

This policy applies worldwide. The rights that apply to you may differ by location, including under the GDPR in the European Economic Area and the UK, and the CCPA/CPRA in California.

2. What stays on your phone

All learning content (cards, stories and pictures) is bundled in the App. Your answers, mastery estimates, knowledge map, discoveries, streaks, Soda’s level and wardrobe, and your settings are stored only on your device. Learning makes no network requests: we do not receive your answers, and we never receive a record of each answer you give.

This data stays until you clear the App’s data or uninstall it. Your operating system may include it in a device backup under your own backup settings.

3. Optional account and backup

An account is optional and is only used to back up your progress and restore it on another device. If you sign in with Google, or with Apple on iOS:

  • We receive and store the name, email address, profile picture link and account identifier that Google or Apple share with us, and a session for your device, which includes its IP address and user-agent.
  • When you back up, we store one snapshot of the on-device progress described above, linked to your account, with its date and revision number. A new backup replaces the previous one.
  • We use this data only to sign you in, store your backup and restore it. We do not use it for advertising or profiling.
  • The backup service runs on Cloudflare Workers, and its database on Neon.

We keep your account and backup until you ask us to delete them. To delete your backup or your whole account, email contact@basaltworks.com from the address of the Google or Apple account you used; we delete it within 30 days and confirm by email.

4. Rewarded ads

Free users can choose to watch a rewarded ad for more cards. The App never shows banner or interstitial ads, and an ad is only requested after you choose to watch one. Ads are served by Google AdMob and are always requested as non-personalized. To deliver, measure, secure and reward the ad, AdMob may process your IP address or approximate location, device and app identifiers, ad interactions and diagnostics, as described in Google’s policies. Where the law requires consent, the App asks for it before requesting ads, and you can change your choice in the App.

5. Purchases

KnowSoda Pro is sold through the App Store or Google Play, which handle payment, billing and refunds. RevenueCat verifies purchases and your Pro status using an app user identifier, and processes receipts or purchase tokens, product and transaction information, and entitlement status. Basalt Works never receives your payment card details.

6. Card reports and support

Reporting a card does not send anything by itself: the App opens your own email app with the card id, its subject, the card text and the App version filled in. If you send that email, or write to us, we receive your email address, your message and anything you attach, and we use it only to fix the card and reply to you. We keep support emails only as long as needed to handle them.

7. This website

This website is hosted on Vercel, which processes request data needed to serve and protect it, such as IP address, date and time, requested URL, request headers and browser or device information. The site sets no cookies and uses no analytics or advertising trackers. It loads its fonts and images from its own domain.

The site opens in Spanish when your browser’s language is Spanish; this is decided in your browser. If you choose a language with the EN / ES switcher, your browser remembers that choice in its local storage. It never leaves your device, and you can clear it with your browser’s site data.

8. No analytics, no selling

The App contains no analytics or crash-reporting SDK of our own. Apple and Google may share crash reports and technical diagnostics with us through their developer consoles under your device settings; these never include your learning progress. Basalt Works does not sell personal data or use it to build advertising profiles. If any of this changes, we will update this policy first.

9. Legal bases (GDPR)

  • Contract: to provide the account, backup and restore you ask for, and to manage purchases.
  • Consent: where the law requires it for advertising.
  • Legitimate interests: to answer support requests, fix content, and keep the services secure and free of abuse, after weighing your rights.
  • Legal obligation: where we must keep or disclose data by law.

10. Service providers and international transfers

Cloudflare, Neon, Vercel, Google (sign-in, AdMob and Google Play), Apple and RevenueCat process data on our behalf or as independent providers under their own policies. Some of them may process data outside the European Economic Area. Where they do, the transfer relies on an adequacy decision, such as the EU-US Data Privacy Framework, or on standard contractual clauses.

11. Your rights

Depending on where you live, you can ask to access, correct, delete or receive a copy of your personal data, restrict or object to its processing, and withdraw consent at any time without affecting earlier processing. California residents can also ask what personal information we hold and ask us to delete it, and we will not treat you differently for doing so.

Write to contact@basaltworks.com. We reply within 30 days and may need to confirm that the account is yours. You can also complain to your data protection authority; in Spain, the Agencia Española de Protección de Datos (aepd.es).

12. Children

KnowSoda is a general-audience app for people aged 13 and older. It is not directed at children under 13 and does not ask for age. If you believe a child under 13 has given us personal information, for example by signing in or emailing us, contact contact@basaltworks.com and we will delete it.

13. Security

Connections to the backup service are encrypted, and access to stored data is limited to what is needed to run the service. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

14. Changes

We will publish any change on this page with a new date, and announce material changes in the App before they apply.