Legal

Privacy Policy

Last updated September 28, 2026

This policy explains what information Vocabit ("the app", "we") collects, why, and how you can control it. Vocabit is a vocabulary app: you translate words and phrases, they're saved as flashcards, and a spaced-repetition schedule brings them back for review.

Information we collect

Account information (optional). You can use Vocabit without an account. If you choose to sign in, to back up and sync your words or to subscribe, you do so with your email address. We use Supabase, our backend provider, for passwordless sign-in: we send a one-time code to your email and never see or store a password.

Your vocabulary and review history. Every word or phrase you translate, its translation and explanation, and your spaced-repetition review history (ratings and timestamps) are stored on your device. If you're signed in, they're also stored against your account so your progress survives a reinstall or a new device; words you saved before signing in move into your account at that point. If you never sign in, this data stays on your device only. This is the core content of the app, and once synced it is tied to your account.

Device identifier and IP address. To enforce the free daily translation limit, including when you're not signed in, the app sends a device identifier with each translation request: a random ID stored in your device's Keychain on iOS, or the app-specific Android ID on Android. Our servers also see the IP address the request comes from, and use it to cap the number of signed-out translations from one network. Neither is stored as-is: each is replaced by a keyed one-way hash that can't be turned back into the original, and those hashes are used only to count requests. They're not linked to your account, email, or saved words, and not used for advertising or tracking.

Subscription status. If you subscribe to Basic or Pro, we store your plan tier and whether it's currently active, synced from our subscription provider (RevenueCat) via your purchase with Apple or Google. We do not receive or store your payment card details — that is handled entirely by the App Store or Play Store and by RevenueCat.

Shared translation cache. To keep the app fast and affordable, the translated text for a given word and language pair (the translation, explanation, example, and hint) may be cached on our servers and reused for any user who later looks up the same word. This cache is keyed only on the word and language pair — it is not linked to your account, email, or identity.

Crash reports and product analytics. We use Sentry to catch and diagnose app crashes and errors, and PostHog to understand how the app is used (for example, which screens are visited). When you're signed in, both are tied to your account's internal user ID, not your email address, so we can investigate issues you report; when you're not signed in, they aren't linked to any account. Crash reports may include technical details like the error, stack trace, and device information; PostHog records screen views and similar in-app events.

What we don't collect. Vocabit does not use advertising, ad SDKs, or any tracking for advertising purposes. We don't access your contacts, camera, microphone, or location, we don't request notification permissions, and we don't sell your personal information. This website doesn't use cookies or any tracking technology either.

How your data is used

• To authenticate you and keep your saved words and review history in sync across your devices.
• To generate translations: the word or phrase you submit is sent to Anthropic's Claude API, which processes it to produce the translation, explanation, example, and hint returned to you.
• To enforce the daily translation limit for your plan (or, when you're not signed in, for your device and network) and to prevent abuse of the service.
• To validate and apply your subscription, via RevenueCat and the App Store/Play Store.
• To diagnose crashes and errors (Sentry) and understand app usage so we can improve it (PostHog).

Who we share it with

We use a small number of service providers to run Vocabit, each of which processes data only as needed to provide their service to us:

• Supabase — database, authentication, and serverless functions that run the app's backend. See Supabase's privacy policy.
• Anthropic — receives the word or phrase you submit for translation, in order to generate the result. It does not receive your email or account identity. Per Anthropic's commercial API terms, this data isn't used to train their models. See Anthropic's privacy policy.
• RevenueCat — manages and validates subscription purchases across the App Store and Play Store. See RevenueCat's privacy policy.
• Apple App Store / Google Play — process payment for subscriptions. Vocabit never receives your card details.
• Sentry — receives crash and error reports, tied to your internal user ID when you're signed in, to help us find and fix bugs. See Sentry's privacy policy.
• PostHog — receives in-app usage events (such as screen views), tied to your internal user ID when you're signed in, to help us understand how the app is used. See PostHog's privacy policy.

We do not sell your personal information to anyone, and we don't share it for advertising purposes.

International data transfers

Our service providers may process and store data on servers located outside your country, including in the United States. By using Vocabit, you understand that your information may be transferred to and processed in countries with different data protection laws than where you live.

Security

Data is encrypted in transit between the app and our servers, and we rely on Supabase's access controls to protect data at rest. Access to production data is limited to what's needed to run the service. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

Your choices

You can delete your account at any time from within the app: Settings → Account → Delete account. This permanently deletes your account and everything tied to it — every saved word, your review history, and your subscription record — and cannot be undone. If you have an active subscription, cancel it separately through the App Store or Play Store to stop future charges, since deleting your Vocabit account does not cancel a store subscription.

If you use Vocabit without an account, your words and review history exist only on your device, and uninstalling the app deletes them.

You can also contact us at the address below to ask what data we hold about you, request a copy of it, or request its deletion.

Your privacy rights

Depending on where you live, you may have rights over your personal data beyond deleting your account, including the right to access, correct, or receive a copy of the data we hold about you; object to or restrict certain processing; and withdraw consent where processing relies on it. We rely on your consent to send you sign-in codes and process your account, and on our legitimate interest in enforcing daily usage limits, diagnosing crashes, and understanding app usage as described above. You can exercise most of these rights yourself in the app (Settings → Account), or by emailing us at the address below — we'll respond within a reasonable time.

If you're in the European Economic Area, UK, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

If you're a California resident, the California Consumer Privacy Act (CCPA) gives you the right to know what personal information we collect, request its deletion, and opt out of its "sale" or "sharing." We don't sell or share personal information as those terms are defined by the CCPA, and we won't discriminate against you for exercising any of these rights.

Data retention

We keep your account data for as long as your account is active. When you delete your account, your data is deleted immediately and permanently from our systems. The hashed device identifiers and IP addresses used for daily limits are kept only as request counters and are deleted about a week after they were last used. The shared translation cache (see above) is retained indefinitely, since it isn't linked to any individual and deleting your account doesn't affect it.

Children's privacy

Vocabit is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page. Continued use of Vocabit after a change means you accept the updated policy.

Contact

Questions about this policy or your data can be sent to vocabit@bogomolov.tech.