Privacy Policy

Goodbyeword is a listening-first vocabulary app. We collect only what the app needs to work. We don't show ads, don't sell data, and don't use third-party analytics or tracking.

Without an account

• Device ID – a random identifier created on your device. It is sent with requests so we can apply the new-word allowance and prevent abuse.
• Words you add, and the sentence you found a word in if you add one – sent to our server and on to Google Gemini to create definitions, example dialogues and audio. Your word list itself stays on your device. The sentence you add and the dialogue written from it are not stored on our server.
• Custom scenes (Plus) – the scene you describe is used once: Gemini matches it to a general scene (for example "ordering at a café"). Your description itself is not stored on our server.

Shared content

Definitions, dialogues, translations and audio we generate for a word are stored and reused for everyone who adds the same word. They are not linked to you. Audio files are kept in public storage (anyone with the link can download them); they contain only the example dialogue, no personal data.

If you sign in (Apple, Google or email)

• Your email address, an account ID, and basic profile details such as your name if the sign-in provider passes them on.
• Your word book and settings (including custom scene descriptions), so they sync across your devices.
• A sign-in log – our sign-in service (Supabase) records the time and IP address of sign-ins for security.
• With Sign in with Apple, we keep a token from Apple, used only to ask Apple to revoke access when you delete your account.

Purchases

Payments are handled by Apple. We never see your payment details. We receive Apple-signed information about your plan (product, expiry date, transaction ID) to unlock Plus; if you are signed in, we store it on your account.

Feedback and reports

When you send feedback or report a dialogue in the app, we store what you wrote, your device ID and app language, and your account ID if you are signed in; for a report also which dialogue and word it is about. Only we read it; it is not sent to the AI. We keep it for up to 12 months.

Other records and how long we keep them

• New-word allowance records – which words were added, by device or account (the words only, never your example sentences), used to count the new-word allowance and recognise words you add again. Kept for up to 13 months; deleted immediately when you delete your account.
• Usage records – which AI model ran, for which device or account, and what it cost, to keep the service affordable; they don't contain your words. Also a daily count of generations per device. Both are deleted after 90 days.
• Sign-in attempt counters – to stop people guessing sign-in codes, we count attempts per email and per IP address. We store only a hash of them, never the email or address itself, and delete it after one day.
• IP address – apart from the above, our hosting provider may keep it in short-lived server logs.
• AI assistants (MCP) – only if you connect one yourself. It can then read and change your word book until you remove the connection.
• Account data (email, word book, settings, purchase record) is kept until you delete your account.

AI processing

Definitions, dialogues, translations and voices are generated with Google's Gemini API. We send Gemini only: the words you add, the sentence you add with a word, custom scene descriptions, your native and learning languages, and the dialogue text to be voiced. Your email, account, feedback and reports are never sent to Gemini. We use Gemini's paid service; under Google's terms, Google does not use this data to train or improve its models; it may keep it for a limited time to detect abuse. Google may process it outside the EU.

Service providers

• Supabase (database, file storage and sign-in, servers in Frankfurt, Germany)
• Vercel (website and server hosting)
• Google (Gemini API; and Google sign-in, if you use it)
• Apple (Sign in with Apple, App Store payments)

Deleting your data

Profile → Account → Delete account removes from our servers your account, your synced words and settings, your purchase record, feedback and reports you sent while signed in, and your new-word allowance records; if you used Sign in with Apple, we also ask Apple to revoke access. Usage records lose the link to your account and are deleted after 90 days. Shared content is not linked to you and stays. Words on a device without an account are removed when you delete the app. Cancel a subscription in your Apple ID settings – deleting your account does not cancel it.

Your rights

Under the GDPR you can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. You can also complain to a data protection authority. We process data to provide the app to you (Art. 6(1)(b) GDPR) and, for abuse prevention and cost control, on the basis of our legitimate interests (Art. 6(1)(f)). See the Support page for how to reach us.

Children

Goodbyeword is not directed at children under 13.

Changes

If this policy changes, we will update this page and its date.