Privacy Policy

Data controller

The controller of your personal data is Jan Mikšík, a sole trader registered in the Czech Republic under company ID (IČO) 09802681. You can reach the controller using the contact details at the end of this policy.

Information we collect

• Account information. When you sign in with email or Google, we receive and store your email address. If you use Google Sign-In, we receive your email address and basic profile identifier from Google. We do not receive your Google password.
• Learning data. Your word lists, study progress, spaced-repetition stages, memory hooks, and app preferences, so your learning syncs across devices.
• Device identifier. A random device ID stored on your device to associate your progress before and after you sign in.
• Session and local storage. We use essential cookies and browser storage to keep you signed in, remember your device, support offline study, and cache app data. The signed Get Word session cookie can last up to 365 days and is renewed during normal app activity.
• Content you submit. Words, phrases, lists, and photos you choose to analyze in Photo Lab. To provide translation, pronunciation audio, photo labels, and AI-assisted features, this content may be sent to third-party providers.
• Connected provider accounts and API keys. If you connect your own AI provider account or bring your own API key to make requests on your behalf, we store the credential needed to do so. API keys are encrypted before storage. We do not see your provider password.

How we use your information

• To authenticate you and keep you signed in.
• To save and sync your learning progress and preferences.
• To operate, maintain, and improve the app.
• To understand how the app is used and to reach out to users with requests for feedback (legitimate interest).

We do not sell your personal information, and we do not use it for advertising.

Legal bases

Where GDPR applies, we process account, session, learning, and user-submitted content mainly to provide the app and sync service you request (performance of a contract), to keep the service secure and reliable (legitimate interests), to comply with legal obligations, and, where a feature asks for an optional choice such as connecting a provider or enabling an experimental feature, based on that choice or consent where required.

How your data is stored

Your account and learning data are stored in a managed PostgreSQL database (Supabase), and authentication is handled through Supabase Auth. Offline learning data, cached audio, and Photo Lab history may also be stored locally in your browser. We retain server-side account data for as long as your account is active, unless a shorter or longer period is required for security, legal, backup, or abuse-prevention reasons.

Retention

Most account and learning data is kept until you delete it or delete your account. Local browser caches can be cleared from the app settings or by clearing browser data. After deletion, some records — operational and error logs, backups, rate-limit counters, and abuse-prevention records — may persist for a limited time and are removed once they are no longer needed for the purpose they were kept for, or as older backups age out of our rotating backup cycle. We keep such records no longer than necessary for security, reliability, legal compliance, or dispute handling.

Third-party services

We use third-party providers to operate the app, including hosting (Vercel), database and authentication (Supabase), translation and text-to-speech (Google Cloud), permanent storage for generated audio (ArDrive Turbo / Arweave, with Backblaze B2 as a mirror), and AI generation/photo analysis (OpenRouter). Depending on the feature you use, the text, audio, or photo you submit may be sent to these providers so they can provide the requested functionality. We may disclose information if required by law.

International transfers

Some providers may process data outside your country or outside the European Economic Area. Where required, we rely on provider data-processing terms, appropriate transfer safeguards such as standard contractual clauses, or another valid transfer mechanism.

Public and permanent storage

Some content is stored on decentralized or permanent networks such as Arweave — specifically the pronunciation audio generated for the words and phrases in your lists and for Photo Lab labels. This audio is content-addressed and carries no link to your account, but once stored it can be publicly accessible and may not be possible for us to fully delete from the underlying network. We never place your account details, profile, or learning progress on these networks. Because generated audio can be public and permanent, please avoid putting private or sensitive personal information into content you generate audio for.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to the processing of your personal data. Where processing is based on your consent, you can withdraw that consent at any time — for example by turning off the relevant optional feature or contacting us — without affecting the lawfulness of processing carried out before withdrawal. You may also have the right to lodge a complaint with your local data protection authority. To exercise these rights, contact us using the contact details below.

Deleting your account removes or anonymizes personal data associated with your account where reasonably possible, except where we need to keep limited records for legal, security, backup, or abuse-prevention purposes. Public or decentralized content may remain available if it has already been published or stored on permanent networks.

Children's privacy

Get Word is not directed to children under 13. If you are under the age required to consent to personal-data processing in your country, you may use the app only with consent from a parent or legal guardian. In the Czech Republic, this age is 15. We do not knowingly collect personal information from children without the required consent.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by the Last updated date above.

Contact

Questions about this policy? Contact us at support@getword.app