Privacy policy

Effective 8 October 2026.

Grandmaster Flash is a private language-learning app operated by Disco Media Pty Ltd. This policy covers the mobile app, its sync service, its assistant connector, and this website.

Information we use

• Account and sign-in: your email address, account identifier, sign-in code records, session credentials, and a device name used to identify a sign-in.
• Your learning content: decks, card text, translations, pronunciation, examples, notes, flags, and generated or supplied audio.
• Learning progress: review ratings and times, practice schedules, and changes such as suspending or archiving content. These records sync across your signed-in devices.
• Assistant connections: the assistant application you authorize, its access grant, and authorization records.
• Service operations: our hosting providers may process network information such as IP addresses, request times, and error logs to deliver, secure, and troubleshoot the service. If you contact us, we receive the information you choose to send.

We use this information to sign you in, store and sync your private content, schedule practice, provide audio, support you, and maintain service security. We do not sell your personal data, use it for advertising, or track you across other companies’ apps or websites.

Storage and offline use

Decks, learning progress, and downloaded audio are cached on your device so you can study offline. Session credentials are kept in the operating system’s secure storage. Account and synced learning records are stored in Neon Postgres; the API and audio storage run on Railway. Our configured service and storage are hosted in the United States. Service providers process information on our behalf, and your information may be processed outside your country.

Email and audio providers

Discomedia Mail processes your email address and sign-in message to deliver one-time codes. When audio generation is requested, the relevant card text and selected voice settings are sent to ElevenLabs. Supplied audio is stored by our service. The app does not record your microphone; speaking practice is self-assessed.

ChatGPT, Claude, and other assistants

You choose whether to connect an assistant. After you authorize it, that assistant can read and manage your decks, cards, audio, flags, and learning progress through our connector. The authorization screen describes this access. You can revoke it in Settings → Assistants.

The assistant provider separately handles your conversations and any content it receives under its own terms and privacy policy. Revoking access prevents future connector access; it does not erase information already held by that provider. Use its privacy controls for that information.

Retention and deletion

We retain your account and learning records while your account is active. You can delete individual content in the app or through a connected assistant. To delete your account and its decks, cards, learning progress, and stored audio, open Settings → Account → Delete account and confirm your email address. The app also removes its local account cache on that device. Other offline devices may retain cached copies until they reconnect or you sign out or remove the app.

Deleted information may remain temporarily in provider backups or operational logs until those copies expire under the provider’s retention settings. We may retain information where necessary to meet legal obligations, address security incidents, or resolve disputes. We do not use retained backups to restore deleted accounts for ordinary use.

Your choices and requests

You can study offline, pause audio downloads, revoke assistant access, sign out, or delete your account. To request access, correction, a copy of your information, deletion assistance, or to raise a privacy concern, email support@discomedia.co. We may verify account ownership before acting. You may also have rights under the privacy law that applies where you live, including a right to complain to your local privacy regulator.

This website and support

This website is hosted by Cloudflare, which processes network information such as IP addresses and request details to serve and protect the site. We do not add advertising trackers, analytics scripts, or tracking cookies.

The support form sends the name, email address, and message you provide through Discomedia Mail to support@discomedia.co. We use your message to respond and troubleshoot, and retain support correspondence as needed to handle the request and maintain support records. Do not include sign-in codes, credentials, or sensitive learning content. Contact us to request deletion of support correspondence.

Children

The service is not directed to children under 13. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and assist with deletion.

Security and policy changes

The mobile app connects to our hosted service over HTTPS. Accounts and assistant access are authenticated, and content is private to its owner. No service can guarantee absolute security. We will update this page when our practices change and show the new effective date.