effective August 2, 2026

Privacy, without a hidden fare.

FareGate helps you use your own Anki reviews to unlock apps. This page explains exactly what data FareGate handles and why.

What we handle

At sign-in, your Apple sign-in identity leaves your device: the Apple subject identifier and your email address. We also receive your device's name and platform and the device identifiers FareGate assigns. The apps you choose to gate remain opaque tokens from the system picker, so FareGate never learns their names.

During pairing, we handle the pairing code and the sync watermark — the bookmark that tracks what has already synced. As you review, the entries you sync contain your ratings and timestamps with opaque entry and card identifiers, never card content. With desktop sync on, your collection snapshot and its referenced media leave your device and are stored in your own private space. Standalone collections can stay local to your device.

We receive your subscription status via RevenueCat and privacy-conscious, non-card-content product measurement via TelemetryDeck. For rate limiting, we use a token made from a salted hash of the connecting IP address and delete it within 24 hours.

If you submit the waitlist form, we collect your waitlist email and may also receive an optional channel or source tag that tells us how you found FareGate. We keep that waitlist record until you ask us to remove it. To be removed, use the Contact page.

Your cards stay yours

Your deck content and media are private to you. Card content never enters analytics, logs, or error reports and is never pooled. We do not share, redistribute, sell, or use cards or card media to train models. FareGate is not a deck marketplace. With the desktop bridge, reviews sync back to your own Anki collection. A standalone collection stays on your device, and the free tier keeps working either way.

How we use data

We use the minimum data needed to operate syncing, restore purchases, provide support, keep the gate working, and understand whether core product flows work. Product measurement is limited to privacy-conscious, non-card-content events. We do not sell personal data or make medical or exam-score claims from your information.

Retention and deletion

You can request account deletion from FareGate. Cloud data associated with a deleted account is scheduled for deletion within 30 days, subject to limited legal, fraud-prevention, and transaction-record obligations. Signing in again before the scheduled purge cancels that request. The purge also removes a waitlist entry matching your account email. Your desktop Anki collection remains yours; deleting FareGate does not delete it.

Changes and contact

Material changes will be reflected on this page with an updated effective date. For questions or requests, use the Contact page.