Privacy Policy.

Information we collect

Account information

Sign in with Apple: When you sign in, Apple provides us with a unique user identifier and, if you choose to share them, your name and email address. We use this solely to authenticate your account and sync your data across devices. If you choose to hide your email, we never see your real email address.

Data you provide

Words, Collections and Notes: The vocabulary words you save, the collections you create, and any edits or personal notes you add are stored locally on your device and synced to our secure servers to enable cross-device access, widgets, and backup.

Device Token: If you enable push notifications, we collect your device token solely to send you Word of the Day notifications.

Data collected automatically

Usage events: We record certain actions tied to your account — such as when you regenerate a card, open the photo picker, share a card, export your library, or reach a daily limit — together with daily counts of how many cards you generate. We use these to enforce fair-use limits, keep the service available for everyone, and detect misuse. Requests made without a signed-in session are counted against a one-way daily hash of the network address; the address itself is not stored.

Crash and diagnostic data: If the app crashes, a crash report with device and operating system details is sent to Firebase Crashlytics. These reports are not linked to your account.

How we use your information

• To authenticate your account and enable sign-in
• To sync your vocabulary data across your devices
• To provide and maintain the app's core functionality
• To send push notifications (Word of the Day) if you opt in
• To improve and optimize the app experience
• To enable app features such as widgets and the share extension
• To enforce daily limits and detect misuse of the service

We do not sell your data, and we do not use it for advertising or to track you across other apps or websites.

Data storage and security

Your vocabulary data is stored locally on your device and synced to secure cloud servers (Supabase) to enable cross-device access and backup. Your account is protected by Sign in with Apple authentication. We use industry-standard security measures including row-level security policies to ensure only you can access your data.

Cross-device sync

When you sign in with your Apple account, your vocabulary library is securely synced to our servers. This allows you to access your words across multiple devices and restore your collection if you reinstall the app. Your data is tied to your Apple account and is not accessible to other users.

Third-party services

The app uses the following third-party services:

• Apple Sign In — Secure authentication
• Supabase — Backend services, authentication, and data storage
• Google Gemini — The word you add and the meaning you choose are sent to generate definitions, examples, mnemonics and photo search terms
• Unsplash — The photos on your cards. Search terms (never your account details) are sent to find photos, and when you choose a photo we notify Unsplash of the download, as its terms require. Photos remain the work of the photographers credited on each card and in your exports
• Datamuse — Word suggestions as you type
• Firebase Crashlytics (Google) — Crash reporting
• Apple Push Notification Service — Delivering notifications

Each of these services has their own privacy policies governing their use of data.

Data retention

Your vocabulary and account data are retained as long as you maintain an active account. Usage events are deleted after 90 days and daily generation counts after 14 days; crash reports are retained by Firebase for its standard period. You can delete your library at any time by using the "Reset Library" feature in the app settings. If you wish to delete your account and all associated data from our servers entirely, please contact us at the email below.

Your rights

• Access your personal data
• Export your vocabulary data using the in-app export feature
• Delete your library data using the in-app reset feature
• Request complete account deletion by contacting us
• Opt out of push notifications at any time
• Sign out of your account at any time

Children's privacy

The app is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.