Dropling

Four boundaries matter. First, AI lessons are not authoritative: the terms describe an automatic accuracy check but warn that factual errors can remain, and neither learning efficacy nor spaced-practice outcomes were independently tested here. Second, personal lessons, questions, answer history, and progress are said to remain on-device or in private iCloud CloudKit, but lesson generation sends topic and language to EU-hosted ai.dropling.app and onward to US-based OpenRouter and Google Gemini. The operator says it stores neither the topic/language nor a personal device identifier, but does not publish the downstream processors' specific retention or training settings. DeviceCheck/App Attest technical identifiers, anonymous counters, subscription transaction identifiers, and monthly usage counters are processed server-side; the policy says anonymous technical identifiers and counters may remain for the service's lifetime. Because they cannot be tied back to a person, deletion and data-subject rights are limited in practice. Third, the site says no account or sign-in, while the privacy policy describes optional Sign in with Apple. The site also says Dropling+ provides more AI generations per month, and the policy describes a monthly limit and counter, while a current maker image says unlimited AI generation. These may describe different versions or plans, but the public materials do not identify the allowance or effective version. Fourth, Apple's privacy label is developer-declared and unverified by Apple; it lists purchase history, device ID, and diagnostics not linked to identity. The developer has not declared accessibility support, and automatic Mac or Vision compatibility in the store is not optimized platform support.