Privacy Policy

Last updated: 25 September 2026

This policy explains what personal data the Wordeo app collects, why, who we share it with and what rights you have. It applies to the Wordeo mobile app for Android and iOS and to this website.

1. Who we are

Wordeo is operated by Evgeny Sokov, a private individual based in the European Union ("we", "us"). We are the controller of your personal data under the EU General Data Protection Regulation (GDPR). Contact: support@wordeo.app.

2. In short

• Your words, reviews and learning progress are stored on your device, not on our servers.
• Our server keeps your account, devices, settings and purchases, so you can sign in and use premium features.
• Words and text you look up or translate are sent to our server and may be processed by AI providers to produce translations and learning content.
• The free version shows ads from Google AdMob. Personalised ads are shown only with your consent, which you can change at any time in Profile → Privacy Settings.
• We do not sell your personal data.
• You can delete your account in the app (Profile → Delete account) or on this page.

3. What we collect and why

Account data

When you sign in with Google, Apple, Microsoft or X, we receive the provider's account ID for you and, if the provider shares them, your name, email address and account name. We use them to create your account and sign you in. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).

Device data

An installation ID generated by the app, a device identifier provided by the operating system (Android ID or Apple's identifier for vendor), platform, app version, language and region settings, a push notification token and session tokens. We use them to keep you signed in, deliver notifications, support your app version and protect accounts from misuse. Legal basis: contract and our legitimate interest in keeping the service secure (Art. 6(1)(f)).

Settings

Your learning and notification preferences and reminder schedule, so they follow you across devices. Legal basis: contract.

Purchases

If you buy a subscription or a one-time purchase, we store the product, purchase token, transaction ID, status, expiry date and renewal state, and check them with Apple or Google to unlock premium features. Payment is handled entirely by Apple or Google; we never see your card details. Legal basis: contract.

Usage counters

Daily counts of certain actions, used to apply the limits of the free version. Legal basis: contract.

Content you submit

Words, phrases and text you look up, add or translate, and, if you use speaking or conversation features, the messages and voice recordings you send in them. We process them to give you translations, dictionary entries, exercises and feedback. Please do not enter sensitive personal information into these features. Legal basis: contract.

Camera

If you scan text with the camera, text recognition runs on your device (Google ML Kit). Images are not uploaded to us; only the words you choose to add are processed as described above.

Learning data on your device

Your word list, reviews and progress are stored locally on your device and are not sent to our servers. Deleting the app removes them.

Diagnostics

Error reports and technical logs sent by the app, and server logs that include your IP address, time and requested address. We use them to find and fix problems and to keep the service secure. Legal basis: legitimate interests (Art. 6(1)(f)).

Advertising

The free version shows ads served by Google AdMob. Where the law requires consent (for example in the EEA, the UK and Switzerland), we ask for it through Google's consent form. With your consent, Google may use your device's advertising ID, IP address and device information to show personalised ads and measure them. Without it, you see non-personalised or limited ads. On iOS the advertising ID is used only if you allow tracking. You can change your choice at any time in Profile → Privacy Settings. Legal basis: consent (Art. 6(1)(a)) for personalised ads; legitimate interests for limited ads needed to fund the free version.

Push notifications

If you allow notifications, a token from Firebase Cloud Messaging (Google) is used to deliver reminders. You can turn notifications off in your device settings. Legal basis: consent.

Embedded YouTube videos

Some lessons play videos through the YouTube embedded player. When you play one, YouTube (Google) receives information about your device and viewing under the Google Privacy Policy. Wordeo uses YouTube API Services; by watching these videos you agree to the YouTube Terms of Service. You can revoke YouTube's access to your data through the Google security settings page.

4. Who receives your data

We share data only with service providers that help us run Wordeo, and only as needed for the purposes above:

• Server hosting and network — our hosting provider and Cloudflare (network security, email forwarding).
• AI providers — Google (Gemini API, Cloud Speech-to-Text, Cloud Text-to-Speech) and OpenAI process the content you submit to generate translations, learning content and speech. They act on our behalf and may not use it for their own purposes.
• Sign-in providers — Google, Apple, Microsoft and X, when you choose to sign in with them.
• Google AdMob — advertising, as described above. Google acts as an independent controller for personalised advertising.
• Firebase Cloud Messaging (Google) — push notifications.
• Expo (EAS Update) — delivers app updates and receives your IP address and basic device information when the app checks for them.
• Apple and Google — app stores and payment processing.
• YouTube (Google) — when you play an embedded video.

We may also disclose data if required by law or to protect our rights, users or the public.

5. International transfers

Some of these providers process data outside the European Economic Area, mainly in the United States. Where they do, we rely on the EU–U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

6. How long we keep data

• Account, device, settings, purchase and usage data — until you delete your account. Deletion removes them from our database immediately.
• Server logs and error reports — up to 6 months, to investigate errors and abuse.
• Content you submit for translation — processed to answer your request. Translations of dictionary words may be stored in our shared dictionary without any link to you.

7. Your rights

Under the GDPR and similar laws you have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time without affecting earlier processing. You can also lodge a complaint with the data protection authority in your country.

You can delete your account yourself in the app. For any other request, email support@wordeo.app. We reply within one month and may ask you to confirm that the account is yours.

8. United States privacy rights

If you live in California or another U.S. state with a consumer privacy law, you have the right to know what personal information we collect, to access, correct and delete it, and to opt out of the sale or sharing of personal information and of targeted advertising. In the past 12 months we collected identifiers, commercial information (purchases), internet or other electronic activity (usage and diagnostics) and, if you used speaking features, audio. We collect it from you, your device and your sign-in provider, for the purposes in section 3.

We do not sell personal information for money. Showing personalised ads through Google AdMob may count as "sharing" or "targeted advertising" under these laws. To opt out, open Profile → Privacy Settings, or turn off ad personalisation in your device settings. To exercise other rights or appeal a decision, email us. We will not discriminate against you for using your rights. An authorised agent may act for you with your written permission.

9. Children

Wordeo is not directed to children under 13, and we do not knowingly collect personal data from them. If you are below the age of digital consent in your country (up to 16 in the EEA), you may use Wordeo only with the consent of a parent or guardian. If you believe a child has given us personal data, contact us and we will delete it.

10. Security

Data is encrypted in transit (HTTPS), session tokens are kept in your device's secure storage, and access to our servers is restricted. No system is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.

11. Changes to this policy

When we change this policy, we update the date above. If a change is significant, we will tell you in the app before it takes effect.

12. Contact

Questions or requests: support@wordeo.app.