Privacy Policy
Wordilla is a language-learning app for iOS. This policy explains what personal data Wordilla collects, why, and what rights you have. It applies to the Wordilla app and to wordilla.app.
1. Who is responsible
The data controller is Uğur Can Kahraman, an individual developer based in Madrid, Spain. Contact: support@wordilla.app.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Account | Email address, display name, a unique user ID; the sign-in provider you use (Apple, Google or email/password) | You / Apple / Google |
| Learning profile | Languages you learn, your native language, level, daily goal, motivation, interests, chosen voice, app theme | You |
| Learning content | Words you save (with meanings, examples and optional photos), texts you scan (with the photo), stories, listening texts and grammar lessons generated for you, your spoken-practice transcripts and feedback, Filiz progress, seeds and streak | You / generated for you |
| Usage and fair-use counters | Daily counts of AI features used, trial and subscription status (active / expired; no payment details) | App / Apple |
| Device and diagnostics | Crash reports (device model, iOS version, app version, crash trace), device-integrity attestation (Firebase App Check) | App |
| Shared contributions | Words and phrases you analyse that are not yet in our dictionary, their translations and "invalid word" flags, and anonymous usage counters — stored in shared pools without your name; "first discovery" records linked to your user ID | App |
| Leaderboard | Your display name and discovery count, visible to other users of the same target language. If you have no display name you appear as "Explorer". | App |
Wordilla does not collect precise location, contacts, advertising identifiers or payment card data. Purchases are handled entirely by Apple.
3. Device permissions
- Microphone and speech recognition — for speaking exercises and the reading coach. Audio is transcribed with Apple's speech recognition, which may process audio on Apple's servers under Apple's terms. We store the resulting text, not the audio.
- Camera and photo library — to scan printed text and to attach a photo to a saved word. Text is extracted on your device. Photos you attach are stored with your account so they sync between your devices.
You can change these permissions at any time in iOS Settings.
4. Artificial intelligence
Several features (word analysis, stories, grammar lessons, listening texts, speaking feedback, scene descriptions, translations) are generated by Google's Gemini models through Firebase AI Logic. The text you type, the text extracted from your scans and the transcripts of your speech are sent to Google for this purpose. We use Google's paid service tier, under which Google does not use your content to train its models. AI output can be inaccurate; please check anything important.
5. Why we use your data (legal bases)
- To provide the service you asked for (performance of a contract): account, profile, learning content, sync between devices, subscription status.
- Legitimate interests: keeping the service secure and fair (App Check, usage quotas), fixing crashes, improving the shared dictionary with anonymous contributions, showing the leaderboard.
- Consent: microphone, speech recognition, camera and photos — granted through iOS permissions and revocable at any time.
- Legal obligations: keeping records required by tax or consumer law.
6. Who we share data with
- Google (Firebase) — authentication, database (Cloud Firestore), file storage, crash reporting (Crashlytics), App Check and Gemini AI. Our Firestore and Storage data are hosted in the European Union.
- Apple — Sign in with Apple, in-app purchases and subscriptions, speech recognition.
- Google (Sign-In) — if you choose to sign in with Google.
We do not sell personal data and we do not use advertising networks. AI processing by Google may take place outside the European Union; such transfers are covered by the European Commission's Standard Contractual Clauses included in Google's data-processing terms.
7. How long we keep data
- Account, profile and learning content: for as long as your account exists. When you delete your account, this data is deleted immediately and removed from backups within 30 days.
- Crash reports: 90 days.
- Shared contributions (words, translations, counters): kept in anonymous form, because they are not linked to your name and other learners rely on them.
- Records that the law requires us to keep (for example purchase records held by Apple): for the legally required period.
8. Your rights
Under the GDPR and similar laws you can ask to access, correct, delete or receive a copy of your personal data, object to or restrict certain processing, and withdraw consent. You can delete your account yourself in the app (see Delete Account) or email support@wordilla.app. You also have the right to complain to a supervisory authority; in Spain this is the Agencia Española de Protección de Datos (aepd.es).
9. Children
Wordilla is not directed to children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
10. Security
Data is encrypted in transit and at rest on Google's infrastructure. Access to your data is restricted by security rules so that only your account can read or write it, and the app must pass device-integrity checks before it can use our services.
11. Changes
If we make material changes to this policy we will notify you in the app and update the date at the top. The current version is always at wordilla.app/en/privacy.
12. Contact
Uğur Can Kahraman · Madrid, Spain · support@wordilla.app