Problem
The app collects personal data — account email, Expo push token, timezone, display name, and full learning history — but there is no privacy policy anywhere. Grep for privacy|terms|policy across mobile/src finds no policy screen/link; the About screen links to GitHub/email only.
Evidence — no privacy link in AboutScreen.tsx; POST /v1/me/push-token, AuthContext (email), timezone/display-name all collected.
Impact — Google Play requires a privacy policy for any app handling personal/sensitive data and push tokens; shipping the production APK without one risks store rejection/removal.
Suggested direction — Publish a privacy-policy URL (a simple hosted page, or a backend /privacy page like /confirmed), link it from the About screen and the store listing.
Problem
The app collects personal data — account email, Expo push token, timezone, display name, and full learning history — but there is no privacy policy anywhere. Grep for
privacy|terms|policyacrossmobile/srcfinds no policy screen/link; the About screen links to GitHub/email only.Evidence — no privacy link in
AboutScreen.tsx;POST /v1/me/push-token,AuthContext(email), timezone/display-name all collected.Impact — Google Play requires a privacy policy for any app handling personal/sensitive data and push tokens; shipping the production APK without one risks store rejection/removal.
Suggested direction — Publish a privacy-policy URL (a simple hosted page, or a backend
/privacypage like/confirmed), link it from the About screen and the store listing.