Privacy Policy

Last updated: 4 July 2026

VocabFreak ("we", "us") is a frequency-based language-learning app. This policy explains what personal data we collect, why, and the choices you have. We aim to collect as little as possible.

1. What we collect

• Account information — when you sign in with Google, we receive your name, email address, profile picture, and Google account ID. We use this to create and secure your account.
• Learning progress — which cards you've studied and their spaced-repetition state, so your progress syncs across your devices.
• Language requests — the language you vote for and, if you choose to provide it, an email address so we can notify you when that language is available.
• Minimal technical data — standard information your browser sends (such as approximate device/browser type), and small values stored locally in your browser (e.g. your daily new-card count). We do not use advertising or cross-site tracking cookies.
• Usage analytics — we use a privacy-friendly, EU-hosted analytics tool (PostHog) to understand which features are used and whether people come back (e.g. events like "started a study session" or "rated a card"). Events are tied to your account ID, not sold, not used for advertising, and we disable session recording and cross-site tracking cookies.

2. How we use your data

• To provide the app: authenticate you and save/sync your learning progress.
• To decide which language to build next (from vote tallies).
• To email you about a requested language — only if you gave us your email for that purpose.
• To keep the service secure and working, and to understand aggregate usage (e.g. total user count).

3. Legal bases (GDPR)

• Contract / legitimate interest — providing your account and saving your progress, and understanding aggregate usage (privacy-friendly analytics) to keep the app working and improve it.
• Consent — sending you email about a language you asked to be notified about (you can withdraw this at any time).

4. Where your data lives & who processes it

We use trusted providers to run the app. Your data may be processed by:

• Supabase — database & authentication (hosted in the EU).
• Vercel — application hosting.
• Google — "Sign in with Google" authentication.
• PostHog — privacy-friendly product analytics (EU-hosted).

We do not sell your personal data, and we don't share it except as needed to run the service above.

5. Your rights

You can request to access, correct, export, or delete your personal data, and you can withdraw consent or unsubscribe from emails at any time. To exercise any of these, contact us at the address below and we'll respond within a reasonable time. Deleting your account removes your progress and account data.

6. Data retention

We keep your account and progress data while your account is active. If you ask us to delete your data, or delete your account, we remove it. Aggregated, non-identifying statistics (like total counts) may be kept.

7. Children

VocabFreak is not directed at children under 13 (or the minimum age in your country), and we don't knowingly collect their data.

8. Changes

We may update this policy; we'll change the "last updated" date above when we do.

Contact

For any privacy request or question, email honarvar45@gmail.com.