Privacy Policy

Effective date: 21 July 2026

Vocabild (“we”, “the app”) is an iOS app for learning German vocabulary with keyword mnemonics. It is operated by Yahan Bermudez, Duran i Borrell 19, 08023 Barcelona, Spain. This policy explains what data the app and this website handle, why, and what you can do about it.

Questions: privacy@vocabild.com.

What we collect

Anonymous account

When you open the app it creates an anonymous account on our backend so we can enforce generation quotas, save limits and receive quality reports. We do not ask for your name or email for that session. The account is identified by a random identifier issued by our authentication provider. If you subscribe to Pro, we store subscription status against that anonymous account so the app can unlock Pro features. Entitlements are managed through RevenueCat. The purchase itself is handled by Apple; we never receive your payment details.

Words you look up or generate

When a mnemonic is generated on demand, the word identifier and its linguistic fields (such as the lemma, article, part of speech, gloss and pronunciation) are processed on our servers. Generated cards may be stored in a shared cache so later lookups of the same word are faster and do not need to call the generation service again.

We do not keep a per-user record of which words you have searched. Generated cards are stored against the word itself, with no link to the account that requested them.

Custom mnemonic text (illustration only)

If you write your own mnemonic scene and ask for an illustration, the scene text you typed is sent to our servers and to our image provider so an image can be generated. That custom text and the resulting image are saved on your device. They are not added to the shared card set. Scene text is checked by an automated moderation service before any image is generated. Text that fails moderation is rejected and no image is produced.

Quality reports

If you report a card, we store that signal against the card and your anonymous account identifier. Reports are used to hide or improve bad cards. We do not attach them to a public profile.

Crash diagnostics

Release builds send crash and error diagnostics via Sentry so we can fix faults. This may include device and app technical information (such as app version, device model and OS version) related to the failure. This is not linked to your anonymous account identifier. We also collect a small sample of performance data (such as timings for screens and network requests) to find and fix slowness. Like crash data, this is not linked to your anonymous account identifier. We do not use this for advertising.

What we do not collect

We do not collect your contacts, location, photos from your library, microphone input or advertising identifiers. Vocabild shows no advertising and does not sell personal data or share it with data brokers.

What stays on your device

Your saved vocabulary, study status and custom mnemonics (including custom images you generate) are stored locally on your device. Onboarding completion is stored locally. Apart from the illustration request described above, this data is not uploaded to our servers in the current version of the app.

Deleting the app removes the local data from that device.

How mnemonics are generated

When a word does not already have a usable card in our shared set, our servers send the word’s linguistic fields to OpenAI to generate a keyword, a scene and an image. Your anonymous account identity, study history and other personal data are not included in that request.

Generated pool cards are stored in a shared set so the next learner who studies the same word can receive an existing card rather than triggering a new generation. Cards you write yourself remain on your device and are not added to the shared set unless you later choose to submit a correction through a feature that does so.

This website

This privacy policy page and the rest of vocabild.com are hosted by Cloudflare. Cloudflare processes technical connection information (such as IP address, browser type and request metadata) as needed to host and secure the site, including DDoS protection and content delivery.

We use Cloudflare Web Analytics to measure aggregated website traffic. It does not use cookies and does not identify individual visitors for advertising. We do not use advertising or cross-site tracking on this site.

Third parties

• Cloudflare — hosts and secures this website, and provides cookieless Web Analytics for aggregated traffic measurement.
• Supabase — authentication, database and file delivery for mnemonic content in the iOS app. Hosted in the EU (Frankfurt).
• OpenAI — used on our servers to generate mnemonic text and images when needed, and to moderate custom scene text before illustration. Processed as required to provide that generation. OpenAI may retain request content for a limited period for abuse monitoring under its API data policies, after which it is deleted. It is not used to train its models.
• Sentry — crash, error and performance diagnostics for iOS release builds. Events are sent to Sentry’s EU ingestion endpoint.
• Apple — provides the App Store, device platform services and in-app subscription billing. Pro subscriptions are processed by Apple through StoreKit; we do not receive or process your payment card details or other payment data.
• RevenueCat — manages subscription entitlements. Receives your anonymous account identifier together with subscription status from Apple, so the app can unlock Pro on your account. It does not receive your name, email address or payment card details.

Where data is stored and international transfers

Account records, quotas, quality reports and the shared mnemonic cache are held on Supabase infrastructure in the EU (Frankfurt). Study data and custom cards remain on your device.

Some providers (notably OpenAI) may process data outside the European Economic Area. Where that happens, transfers rely on appropriate safeguards such as the European Commission’s standard contractual clauses, or on other lawful transfer mechanisms those providers make available.

How long we keep it

Local data lasts until you delete it in the app, delete the app, or remove the relevant words inside it.

Server-side anonymous usage data and quality reports are retained as needed to operate the service: enforce quotas and diagnose problems. Shared cache content (generated mnemonic cards keyed on the word, not on your account) is retained so other learners can reuse it. Crash diagnostics are retained as needed to investigate and fix faults.

When you use Delete my data in the app, we remove the server-side records tied to your anonymous account promptly. You can also email privacy@vocabild.com; we complete email deletion requests within 30 days, except where we are required to keep something longer by law.

Your rights

Under the GDPR you can request access to your data, correction of it, deletion of it, a portable copy of it, or restriction of how it is processed. Write to privacy@vocabild.com.

To delete your data in the app, open Settings → Privacy → Delete my data. After you confirm, we delete the server-side records tied to your anonymous account (including quotas and quality reports) and remove the account itself. The shared mnemonic pool stays: cards generated for a word are keyed on the word, not on you, and are not removed. On your device we clear your saved vocabulary, study progress, custom cards and related local data, reset free-slot tracking and onboarding, and start a new anonymous session. Delete my data does not cancel a Pro subscription billed to your Apple ID — manage or cancel that under Settings → your name → Subscriptions. You can also email privacy@vocabild.com to request deletion; we remove that server-side data within 30 days.

You also have the right to complain to the Agencia Española de Protección de Datos.

Children

Vocabild is not directed at children under 16 and we do not knowingly collect their data. Do not use the app if you are under 16.

Changes

We may update this policy. The effective date at the top will change when we do. If a change is material we will tell you inside the app before it takes effect where that is practical.

Contact

Yahan Bermudez, Duran i Borrell 19, 08023 Barcelona, Spain
privacy@vocabild.com
General: hello@vocabild.com