Effective Date:
This Privacy Notice explains how and why we process your personal data when you use Vocab, in compliance with GDPR.
Who is Collecting Your Data?
VocabTech Oy, info@vocabtech.com.
Purpose and Lawful Basis for Processing
- Account creation and learning progress sync - based on your explicit consent when you choose to sign in with Apple or Google.
- Subscription management - based on the performance of a contract (your subscription).
- Email collection for updates (vocab-test) - based on your explicit consent.
- Anonymous analytics - based on our legitimate interest in improving the app.
What Data We Process
- Account data: email, display name, provider identifier.
- Learning progress: language preferences, topics, custom word lists, phrase progress, challenge scores, stories.
- Device information: platform, app version, OS version, device model, approximate country.
- Subscription identifiers managed through RevenueCat.
We do not process passwords, IP addresses, push tokens, precise location data, or authentication tokens from sign-in providers.
Data Retention Period
- Account and learning data: retained while your account is active. Permanently deleted 3 days after you request account deletion.
- Email (vocab-test): retained until you request deletion.
- Anonymous analytics: retained indefinitely in aggregate form.
Third-Party Processors
- Cloudflare - secure data storage and processing (EU region).
- RevenueCat - subscription management.
- Apple - account verification (Sign in with Apple).
- Google - account verification (Google Sign-In).
International Data Transfers
Your personal data is stored on Cloudflare servers in the European Union. Some third-party processors (RevenueCat, Apple, Google) may process data outside the EU under appropriate safeguards such as Standard Contractual Clauses.
Your Rights Under GDPR
- You have the right to access your personal data.
- You have the right to request correction of inaccurate data.
- You have the right to request erasure of your data (right to be forgotten).
- You have the right to restrict processing of your data.
- You have the right to data portability.
- You have the right to object to processing.
- You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- You have the right to lodge a complaint with a supervisory authority.
- To exercise any of these rights, contact info@vocabtech.com or delete your account directly from the app.