Privacy Policy

Wordly is a language-learning app for reading stories, building vocabulary and reviewing flashcards. Wordly is operated by [operator name not yet configured]. This policy explains what we collect, why, and the choices you have. Questions: [contact email not yet configured].

1. Information we need to run your account

• Email address and sign-in details. Accounts are managed by our authentication provider, Supabase. If you sign up with an email and password, the password is stored only as a secure hash by Supabase — we never see it.
• Google or Facebook sign-in. If you choose to sign in with Google or Facebook, that provider shares your email address and basic public profile details (such as your name and profile picture URL) with our authentication provider. Wordly uses your email address and a unique account identifier; it does not display or use your name or picture, and it never posts to or reads anything else from your Google or Facebook account.

2. Your learning data

Created as you use Wordly, so we can show your progress:

• Vocabulary: the words you rate (new, learning, known) and how often you have seen them.
• Flashcards and word checks: your answers, review history and scheduling.
• Reading activity: stories you finish, words read, and dated activity used for XP, levels and your monthly progress.
• Imported content: text you paste, upload or import from a web address is stored in your account and visible only to you. Individual words from it are sent to our translation provider to show translations.
• Level estimates: calculated from the above; we don't ask you to take a test.

3. Optional profile information

On the welcome screen and in Account you can optionally tell us your learning language, learning goal, practice frequency, native language, country, age range and gender. Every question can be skipped, has a “prefer not to say” option, and can be changed or cleared at any time. We use it to personalize Wordly and to understand, in aggregate, who uses it. We never infer these details from your behaviour, never sell them, and never show them to other users. We don't ask for your birth date or your location.

4. Subscriptions

Premium subscriptions are sold and processed by Stripe (through Link). Your card and billing details go directly to Stripe — Wordly never receives them. We store only what we need to give you access: your Stripe customer ID, subscription status, plan and renewal date.

5. Marketing emails

We only send marketing emails if you tick the opt-in box (it is off by default). We record when you opt in or out. You can withdraw at any time in Account. Wordly does not currently send marketing emails.

6. Cookies and similar storage

• Sign-in session cookies (Supabase) — required to keep you signed in.
• Preferences — your time zone (for “today” and “this month” in your stats), your analytics choice, light/dark theme and small reading-screen settings stored in your browser.
• Analytics (only with your consent) — we use PostHog (EU servers) to understand which features are used. Until you choose, nothing is stored; if you decline, visits are only counted anonymously without cookies. We record feature usage (for example “story finished”), never your story text, and session recording is turned off. You can change your choice in Account.

7. Technical and log data

Like most web services, our hosting and database providers keep short-lived technical logs (such as IP address, browser type and request times) for security and troubleshooting.

8. How we use information

• to provide the service: sign-in, your library, translations, progress, flashcards and Premium features;
• to personalize content (for example recommended words, stories and listening resources);
• to keep Wordly secure and fix problems;
• with consent, to measure and improve the product, and to send marketing emails if you opted in.

We do not sell personal information and we do not use it for advertising.

9. Service providers

• Supabase — database, authentication and storage of your account and learning data.
• Google and Facebook (Meta) — only if you choose them to sign in.
• Stripe — payments for Premium subscriptions.
• DeepL — translation of individual words.
• PostHog — product analytics, with consent.
• Our hosting provider — runs the website.

Links to external sites (for example dictionaries or the podcasts and videos in Listen & Watch) open those sites, which have their own privacy policies.

10. Storage and retention

Your data is stored by our service providers and protected by access rules so that only you (and our service, on your behalf) can access your account data. We keep it while your account exists. When your account is deleted, your account and learning data are deleted with it; see Data deletion for details and for what may be kept for legal reasons.

11. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict some uses. You can edit your profile and preferences yourself in Account. For anything else — including a copy of your data or deleting your account — email [contact email not yet configured].

12. Children

Wordly is not intended for children under 13, and we do not knowingly collect their information.

13. Changes

If we change this policy, we will update the date above and, for significant changes, let you know in the app.

14. Contact

Wordly is operated by [operator name not yet configured]. For privacy questions or requests, contact [contact email not yet configured].