Privacy policy
Last updated 10 October 2026
Oddiom is a flashcard app for crowdsourced phrases. This page explains what information we collect, why we collect it, and what you can do about it.
Who we are
Oddiom ("we", "us") operates the Oddiom website and apps. For questions about this policy or your data, email privacy@oddiom.com.
Information we collect
Information you give us
- Account details — a username, an email address, and a password (stored only as a hash) or an identifier from a sign-in provider if you use one.
- Content you submit — phrases, meanings, examples, tags and any notes you add to them.
- Ratings and activity — the scores you give to phrases, cards you save, reports you file and decks you create.
- Messages — anything you send us by email or through a support or feedback form.
Information collected automatically
- Usage data — which cards you were shown, which you got right, and how you move through the app. This is what makes review scheduling and recommendations work.
- Device and log data — device type, operating system, app version, approximate location derived from your IP address, and request logs including the IP address itself.
What is public
Oddiom is a shared library, so some things are visible to everyone:
- Phrases you submit, including their meanings, examples and tags.
- Your username, shown alongside the phrases you submitted.
- Your position and score on the leaderboard, if you qualify for it.
Your email address, password and individual ratings are never shown publicly. Ratings are only ever displayed in aggregate. Choose a username you are comfortable being seen — and remember that anything you publish may be copied, quoted or cached elsewhere, including after you delete it.
Why we use your information
- To run the service: showing you cards, saving your progress, recording ratings and calculating the leaderboard.
- To keep the library usable: detecting spam, abuse, plagiarism and rating manipulation.
- To improve the app: understanding in aggregate which features and decks are used.
- To contact you: service notices, replies to your messages, and — only if you opt in — occasional product updates.
- To meet legal obligations and to establish or defend legal claims.
Where the UK GDPR or EU GDPR applies, we rely on performance of a contract for running your account, legitimate interests for security, abuse prevention and product improvement, consent for optional marketing emails and any non-essential analytics, and legal obligation where the law requires it. You can withdraw consent at any time.
Who we share it with
We do not sell your personal information. We share it only with:
- Service providers who operate infrastructure on our behalf: hosting and content delivery, authentication, email delivery, error reporting and analytics. They may process data only on our instructions.
- Authorities, where we are legally required to disclose information, or where it is necessary to protect our rights or someone's safety.
- A successor entity, if Oddiom is acquired or merged. You will be told before your information becomes subject to a different policy.
Cookies and similar technologies
The website uses cookies and local storage to keep you signed in and remember your preferences. These are necessary for the site to work. If we add analytics or any non-essential cookies, we will ask for your consent first and you will be able to change your mind later.
How long we keep it
Account data is kept while your account is open. Log data is kept for a limited period for security and debugging, then deleted or aggregated. Phrases you submitted may remain in the library after you delete your account, because other users' saved cards and ratings depend on them — but they are detached from your account and shown without your username on request.
Your rights
Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, export it, object to or restrict certain processing, and withdraw consent. Residents of California and some other US states have similar rights, including the right not to be discriminated against for exercising them.
Most of this can be done in the app's account settings. For anything else, email privacy@oddiom.com and we will respond within the time the law allows. If you are in the UK or EEA and you are unhappy with our response, you can complain to your local data protection authority.
Children
Oddiom is not intended for children under 13, or under 16 in regions where that is the minimum age for consent to data processing. We do not knowingly collect information from them. If you believe a child has created an account, email us and we will remove it.
Security
We use encryption in transit, hashed passwords and access controls limiting who can reach production data. No system is perfectly secure, so please use a strong, unique password and tell us promptly if you think your account has been compromised.
International transfers
Our providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.
Changes to this policy
We will update this page when our practices change and revise the date at the top. If a change materially affects you, we will give notice in the app or by email before it takes effect.