Privacy Policy
Last updated: March 22, 2026
Vocafast ("we", "our", "the app") is a vocabulary learning application. This Privacy Policy explains how we collect, use, and protect your information.
1. Information We Collect
Account Information
- Email address — used for authentication and account recovery.
- Display name — used to personalize your experience.
Learning Data
- Vocabulary words and translations you add to your decks.
- Training session results (correct/incorrect answers, response times, XP earned).
- Spaced repetition data (review schedules, ease factors) to optimize your learning.
- Streak and progress statistics.
AI-Processed Data
When you use AI-powered features (topic generation, photo extraction, text extraction, voice capture), the following data is sent to our AI provider for processing:
- Text input you type or paste.
- Images you capture or select from your photo library.
- Voice recordings transcribed on-device via Apple Speech Recognition — only the resulting text transcript is sent to our AI provider.
This data is processed solely to extract vocabulary and is not stored by our AI provider beyond the duration of the request.
2. How We Use Your Information
- Provide and improve the vocabulary learning experience.
- Generate AI-powered vocabulary from your input.
- Calculate spaced repetition schedules for optimal learning.
- Track your progress (XP, streaks, levels).
- Send you notifications you have opted into (daily reminders, streak alerts).
- Process subscription purchases via Apple's StoreKit.
3. Data Storage and Security
- Your account and learning data is stored securely on Supabase (hosted on AWS) with row-level security policies that ensure you can only access your own data.
- Passwords are managed by Supabase Auth and are never stored in plaintext.
- Offline data is stored locally on your device in an encrypted application sandbox.
- All network communication uses HTTPS encryption.
4. Third-Party Services
| Service | Purpose | Data Shared |
|---|
| Supabase | Authentication, database | Account info, learning data |
| Groq | AI vocabulary extraction | Text, image content (not stored) |
| Apple StoreKit | Subscription management | Purchase transactions |
| Apple Speech | On-device voice-to-text | Audio processed on-device only |
We do not use any analytics, advertising, or tracking SDKs.
5. Data Sharing
We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes. Your data is only shared with the third-party services listed above, solely to provide app functionality.
6. Data Retention
- Your data is retained as long as your account is active.
- You can delete your account at any time from Settings > Account > Delete Account. This permanently removes all your data from our servers.
- Offline cached data is removed when you uninstall the app or manually clear downloads.
7. Children's Privacy
Vocafast is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.
8. Your Rights
You have the right to:
- Access your data (visible in the app at all times).
- Export your vocabulary data (Settings > Import & Export).
- Delete your account and all associated data.
- Modify your personal information (email, password) from Settings.
For users in the European Economic Area (EEA), you also have the right to data portability and to lodge a complaint with your local data protection authority.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email. Continued use of the app after changes constitutes acceptance.