Privacy Policy

This Privacy Policy explains how APPOPAI LIMITED ("APPOPAI", "we", "us", or "our") collects, uses, shares, and otherwise processes information when you use the VocabFlick mobile application and related services (the "Service").

By downloading, accessing, or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and our Terms of Service. If you do not agree, please do not use the Service.

1. Responsible Party

APPOPAI LIMITED is the data controller and responsible for your personal data collected through the Service.
Contact Email: contact@vocabflick.com

2. Service Description

The VocabFlick application is designed to provide users with an efficient vocabulary learning experience using spaced repetition algorithms, AI-assisted content generation, and personalized learning paths. The Service is available through supported app stores, and usage is subject to the respective terms of those stores.

3. Information We Collect

3.1 Information You Provide

• Account Information: When you register or log in, we may collect your email address, name, and authentication credentials.
• User Content: Vocabulary lists, learning progress, custom notes, and other content you create or upload.
• Preferences: Your settings for daily goals, notifications, themes, and learning languages.
• Support & Feedback: Information you provide when contacting us for support or sending feedback.

3.2 Information Collected Automatically

• Device Information: Device model, operating system version, unique device identifiers, language settings, time zone, client type, and app version.
• Usage Data: Interactions with the app (e.g., screens viewed, words learned, learning actions, paywall and subscription flow events, time spent, and features used), crash reports, diagnostic information, and performance logs.
• Location Data: We do not collect precise real-time location data, and we do not treat language setting or time zone alone as precise location data.
• Security and Integrity Signals: To protect the Service against fraud, abuse, and unauthorized access, we and our service providers may process security-related data such as authentication tokens, request metadata, application or device attestation signals, and other integrity or anti-abuse indicators generated when you access the Service. Request metadata may include technical headers such as client type, app version, language setting, and time zone.

For example, when the app communicates with our backend, it may transmit technical request headers such as X-Client-Type, X-App-Version, X-Locale, and X-Timezone. We use these values to support compatibility, request processing, localization, troubleshooting, logging, and service reliability. We do not treat language setting or time zone alone as precise location data.

3.3 Third-Party Sources

• Sign-In Services: If you log in via Google or Apple, we receive authentication tokens and basic profile information (such as email and name) permitted by your settings.
• Payment Processors: We do not collect or store your full credit card information. Payments are processed by the applicable app store, which provides transaction receipts and subscription status to RevenueCat and to us so we can validate and manage your subscription.

4. How We Use Information

We use the collected information for the following purposes:

• Service Provision: To operate the app, sync your progress across devices, and manage your account.
• Personalization: To tailor learning content (using AI algorithms) and recommendations based on your performance.
• Improvement and Diagnostics: To analyze aggregate usage patterns, measure feature and subscription flow performance, detect crashes and errors, debug technical issues, and improve the accuracy and reliability of our algorithms.
• Communication: To send you service updates, security alerts, and support messages.
• Security: To authenticate users, verify that requests are sent by supported versions of our app, detect and prevent fraud, abuse, automated misuse, or security incidents, and protect the integrity of our systems and accounts.
• Localization and Time Handling: To process language and time zone settings needed for localized content, user-facing time handling, compatibility checks, and operational troubleshooting.

5. Subscriptions and Payments

VocabFlick offers both free and Premium versions.

• Free Version: Provides limited access to core features.
• Premium Subscription: Unlocks full access to all features. Subscriptions are managed directly through your app store account.

You can manage or cancel your subscription at any time via your device settings. Refunds are subject to the policies of the respective app store.

6. Sharing and Disclosure

We do not sell your personal information. We may share data with trusted third-party service providers who assist us in operating the Service (such as for secure data storage, hosting, analytics, and diagnostics):

• Analytics & Diagnostics: Google Firebase Analytics (to understand app usage and product interactions) and Firebase Crashlytics (to detect and diagnose application crashes, errors, device state, and performance issues).
• Security & App Integrity: Google Firebase App Check and related attestation providers (such as Apple App Attest, Apple DeviceCheck, or Google Play Integrity, depending on your platform and app version) to help verify that requests come from supported instances of our app and to help protect the Service against abuse, fraud, and unauthorized access.
• Authentication Providers: Google Sign-In and Sign in with Apple, when you choose to use those login methods, to authenticate you and provide basic account information permitted by your settings.
• Subscription Management: RevenueCat (to validate receipts, manage subscription status, process subscription events, and help keep premium access synchronized across the app and our backend).

These providers are bound by confidentiality obligations and data protection laws. We may also disclose information if required by law or to protect our rights and safety.

In connection with the security and integrity protections described above, Firebase App Check and its attestation providers may process technical signals and attestation materials needed to verify your app or device integrity and issue app integrity tokens used by the Service.

6a. Analytics & Diagnostics

We use analytics and diagnostics data to understand how the Service is used, measure subscription and feature performance, detect crashes, and maintain reliability. This data may include app interactions, device and operating system information, client type, app version, language setting, time zone, crash traces, diagnostic logs, purchase flow events, and subscription status. We do not use this data to sell your personal information or for cross-context behavioral advertising.

6b. International Data Transfers

Our Service is operated globally, and your information may be transferred to, stored, and processed in countries other than your own (including the United States), where data protection laws may differ. By using our Service, you consent to such transfers. We ensure appropriate safeguards are in place to protect your data.

7. Data Retention and Deletion

We retain your data for as long as your account is active or as needed to provide the Service.

Delete Account: You can request the deletion of your account and associated data directly within the app settings or by contacting us at contact@vocabflick.com. Upon deletion, your personal data will be removed from our active databases, subject to legal retention obligations.

We may retain limited records for security, fraud prevention, financial reporting, dispute resolution, and legal compliance for as long as reasonably necessary, even after account deletion.

8. Children's Privacy

The Service is not intended for children under the age of 13 (or the applicable age of digital consent in your region). We do not knowingly collect personal data from children. If we become aware that we have collected such data, we will take steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:
Email: contact@vocabflick.com

11. Notice to Residents of the European Economic Area (EEA) and the UK

If you are a resident of the European Economic Area (EEA) or the United Kingdom (UK), you have specific data protection rights under the General Data Protection Regulation (GDPR) and the UK GDPR. APPOPAI LIMITED acts as the Data Controller of your personal data.

Legal Basis for Processing: We collect and process your personal data only where we have a legal basis to do so, which includes:

• Consent: Where you have given explicit consent (e.g., promotional communications).
• Contract: Where processing is necessary for the performance of a contract with you (e.g., providing the VocabFlick service).
• Legitimate Interests: Where it satisfies a legitimate interest (e.g., improving our app, securing our services), which is not overridden by your data protection interests.

Your Rights: Under the GDPR, you have the right to:

• Request access to your personal data.
• Request correction or deletion of your personal data.
• Object to or request restriction of our processing of your personal data.
• Request portability of your personal data.
• Withdraw your consent at any time (this will not affect the lawfulness of processing based on consent before its withdrawal).

To exercise any of these rights, please contact us at contact@vocabflick.com. You also have the right to complain to a data protection authority about our collection and use of your personal data. For more information, please contact your local data protection authority.

12. Notice to California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information.

Information We Collect and Disclose: In the preceding 12 months, we have collected the following categories of personal information: identifiers (such as name, email address), commercial information (such as purchase history), internet or other electronic network activity information, and inferences drawn from such information. We disclose this information for business purposes to our service providers. We do not use or disclose sensitive personal information for purposes other than those specified in the CPRA.

No Sale or Sharing of Personal Information: We have not sold or shared (for cross-context behavioral advertising purposes) your personal information in the preceding 12 months, and we do not sell or share your personal information.

Your Rights: Under the CCPA/CPRA, you have the right to:

• Request that we disclose what personal information we collect, use, disclose, and sell/share.
• Request the deletion of your personal information collected or maintained by us.
• Request the correction of inaccurate personal information we maintain about you.
• Not receive discriminatory treatment for the exercise of your privacy rights.

To submit a verifiable consumer request to exercise your rights, please contact us at contact@vocabflick.com. We will verify your request by asking you to provide information related to your recent interactions with us, such as confirming your email address.