Privacy Policy

1. Information we collect

Account information

When you create an account, we collect your email address and generate a random display name for you. You can change your display name and optionally add a profile photo or avatar emoji. If you sign in with Google or Apple, we receive a basic profile token (name and email) from the corresponding provider.

Learning data

We collect data about your learning sessions to power the app. This includes the words you practice, your answers, whether they were correct, your response time, and session duration. We also track per-word progress such as mastery status, stability score, and review schedule — all to make sure the right words come back at the right time.

Competitive & social data

If you participate in duels or competitions, we store your results, rating, and match history. If you add friends, we store your connections. Reports and blocks are stored to keep the community safe.

Device information

We collect your timezone (to schedule notifications at reasonable hours) and a push notification token if you enable notifications. We do not collect device model, OS version, advertising identifiers, or location data.

2. What we do not collect

We do not collect your contacts, photos, camera data, location, browsing history, health data, or biometric information. We do not use any third-party analytics or tracking SDKs — no Mixpanel, no PostHog, no Firebase Analytics. Your learning data stays in our database and is not shared with analytics providers.

3. How we use your information

• Providing the service: Powering learning sessions, scheduling word reviews, tracking your progress, and running duels and competitions.
• Notifications: Sending review reminders and daily practice nudges if you opt in. We respect your timezone and only send between 9am and 9pm local time.
• Social features: Showing your display name and learning languages to friends and on leaderboards.
• Safety: Processing reports and enforcing blocks to keep the community respectful.

4. Third-party services

We use a small number of third-party services:

• Supabase — database and authentication. Your data is stored on Supabase infrastructure with row-level security enforced at the database level.
• RevenueCat — subscription and in-app purchase management. RevenueCat receives your anonymous user ID and purchase history to manage your subscription status.
• Google Sign-In — if you choose to sign in with Google, their standard OAuth flow applies and their privacy policy governs data they collect.

We do not sell your data to any third party. We do not share your personal information for advertising purposes.

5. Data visible to other users

The following information may be visible to other users:

• Your display name and avatar — in duel results, competition leaderboards, and friend lists.
• Your learning languages — visible to friends.
• Your duel rating and competition scores — visible on leaderboards.

Your email address, learning session details, individual word progress, and notification settings are never visible to other users.

6. Data security

All data is transmitted over HTTPS. Our database enforces row-level security, meaning users can only access their own data through the client. Server-side operations (notifications, competition generation) use a separate service key with appropriate access controls.

7. Data retention & deletion

Your data is retained as long as your account is active. You can delete your account at any time from within the app. When you delete your account, all your data is permanently removed — including your profile, learning history, sessions, word progress, friendships, duel history, and competition entries. This deletion is cascading and irreversible.

Ghost duel recordings are automatically cleaned up on a weekly basis after their retention period expires.

8. Children's privacy

wordbeat is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through the app or by email. Your continued use of wordbeat after changes are posted constitutes your acceptance of the updated policy.

10. Contact

If you have any questions about this Privacy Policy or your data, reach out to us at hello@wordbeat.co.