GDPR-style Privacy Notice

Privacy Policy

Last updated: August 19, 2026

Short version: Vocabary does not send your vocabulary lists, imported files, answers or study history to its own server. That content stays on your device. The app does not use an ad network and does not read your advertising ID.

The app uses Google Firebase to see crash reports, measure basic product flows and send app-related announcements. This notice explains what is processed, why it is processed and how you can contact us about your rights.

1. Controller and contact

For GDPR purposes, the controller is the operator of the Vocabary app.

AppVocabary
Contact[email protected]
ScopeThe Vocabary mobile app and information pages on vocabary.com

If the legal business name or address is defined separately, this section will be updated.

2. Data categories

Vocabary can be used without creating an account. We do not collect your name, phone number, precise location, contacts or advertising ID.

DataWhat it containsWhere it is processed
Crash reportsTechnical crash details such as the failing code area, app version, device model, operating system version and time of errorGoogle Firebase Crashlytics
Usage eventsBasic product events such as first session completed, set created, import completed and related technical countsGoogle Firebase Analytics
Notification tokenA Firebase Cloud Messaging token that may be assigned to your device for app announcementsGoogle Firebase Cloud Messaging
Local study contentVocabulary lists, imported file contents, answers, study history, review schedule, streaks, badges and preferencesOnly the on-device database and local settings storage

Not included in Firebase reports: your vocabulary lists, imported files, written answers, created sentences and detailed study history.

3. Purposes of processing

  • Finding and fixing crashes and technical problems
  • Understanding where users get stuck and improving the app experience
  • Sending important app announcements, such as new content or relevant updates
  • Running spaced repetition, daily goals, streaks, badges and reminder features on your device
  • Responding to privacy or support requests

4. Collection method and GDPR legal bases

Data is collected or stored electronically through automatic technical records, Firebase services, the on-device database, local settings storage and files that you choose to import.

Processing activityGDPR legal basis
Crash reports and basic technical usage measurementArticle 6(1)(f) legitimate interests: keeping the app secure, stable and sustainable
Notification delivery for app announcementsArticle 6(1)(f) legitimate interests and, where required by the operating system, your device-level notification permission
Vocabulary lists, study history and preferences stored on the deviceArticle 6(1)(b) performance of the app service and Article 6(1)(f) legitimate interests in providing the requested learning features
Support emails you send usArticle 6(1)(f) legitimate interests in responding to your request and protecting legal rights

5. Data that stays on your device

Your vocabulary lists, study history, review schedule, streaks, badges, daily goal, theme, language and reminder preferences are stored on your device. Vocabary does not upload this study content to its own server.

If Android system backup is enabled, app data may be backed up to your Google account. This backup is not stored on a Vocabary server and Vocabary cannot see its contents.

When you clear app data from device settings, locally stored content is deleted. Uninstalling the app stops new Firebase data from being sent.

6. Imported files

When you select an Excel, CSV or JSON file, the file is read on your device and converted into your vocabulary list. The file or its contents are not uploaded to a Vocabary server. Invalid rows, if any, are shown on the device before import.

7. Pronunciation and device services

When you tap the pronunciation button, the relevant word is passed to your device's text-to-speech engine. Vocabary does not use its own server for this. Your device's text-to-speech engine may be provided by Google, the device manufacturer or another third party, and its behavior is outside Vocabary's control.

8. Third-party sharing and international transfer

Vocabary does not use an ad network, does not read the advertising ID, does not create behavioral ad profiles and does not sell your data.

The main third-party infrastructure we use is Google Firebase:

  • Firebase Crashlytics: crash and error reports
  • Firebase Analytics: basic usage events and product improvement measurement
  • Firebase Cloud Messaging: app announcements and notification delivery

These services are operated by Google. Relevant technical data may be processed on Google's servers outside your country. Google's privacy policy is available at policies.google.com/privacy.

Crashlytics and Analytics cannot be disabled inside the app. You can disable notifications from your device's system notification settings.

9. Retention

  • Vocabulary lists, study history and preferences stored on your device remain there until you delete them or clear app data.
  • Technical records and usage events processed by Firebase are retained according to Google Firebase retention and deletion policies.
  • If you contact support by email, the correspondence may be retained for a reasonable period to resolve your request and protect legal rights.

10. Children's privacy

Vocabary does not knowingly collect names, email addresses, phone numbers, location data or similar identity information from children. Because the app works without an account, it does not keep identity records for children.

11. Your privacy rights

If GDPR or another privacy law applies to you, you can contact us at [email protected] about access, correction, deletion, objection or restriction requests.

Vocabary does not create an account and does not keep a user record that directly identifies you. Because of that, we cannot access your vocabulary lists, imported files, answers or study history. That content is stored on your device.

To delete the data stored on your device, clear Vocabary app data from device settings or uninstall the app. For information you send to us by support email, we can review access, correction or deletion requests.

Technical crash and usage records created through Firebase are not connected to a Vocabary account that directly identifies you, so it may not be technically possible for us to find or delete those records for a specific person.

12. Security

Vocabary follows data minimization by keeping study content on the device, avoiding unnecessary personal data collection, not using advertising IDs and limiting crash and usage measurement to basic technical purposes.

13. Changes to this policy

If account features, cloud sync, payments, subscriptions or additional third-party services are added, this policy will be updated. You can track updates from the "Last updated" date on this page.

14. Turkey / KVKK note

For users in Turkey, Vocabary also provides a Turkish KVKK notice. You can read it here: Turkish KVKK notice.

15. Contact

For questions about this privacy policy, your rights or Vocabary's data processing activities, contact us at:

[email protected]