Privacy Policy

Wordspotting is operated by Dmytro Biletskyi, a sole proprietor (FOP) registered in Ukraine. Contact: support@wordspotting.app . We act as the data controller for personal data collected through wordspotting.app.

1. Account data. When you sign in with Google, we receive your email address, name, and Google account ID. Our OAuth scopes are limited to identity (openid, email, profile). We do not access any other Google data.
2. Content you upload. Texts you paste or import, captions, articles. These are tied to your account and visible only to you.
3. Derived learning data. Lemmas your account has classified (known, learning, blocked), spaced repetition card state, and review history.
4. Generated definitions. When you mark a word as learning, we send a short excerpt of the source text to Google Gemini, which returns a definition. The excerpt is stored alongside the definition under your account.
5. Billing data. When you subscribe to a paid plan, your payment is processed by Paddle, our reseller and Merchant of Record. Paddle handles your card and billing details directly. We never see or store your card number. We keep your subscription status and plan tier.
6. Technical logs. IP address, browser user agent, and request metadata are written to short lived server logs. Application errors (which may include your user ID and the request URL) are sent to Sentry.
7. Product analytics. We use PostHog in cookieless mode with anonymized IP addresses to understand which pages users visit. No personally identifying data is sent.

• Authentication and account management (legal basis: contract).
• Operating the product features you signed up for (legal basis: contract).
• Improving the product and diagnosing errors (legal basis: legitimate interest).
• We do not sell your data. We do not run advertising.

Our servers run on Fly.io in Frankfurt, Germany. Backups stay within the EU. The sub-processors we rely on are listed in the next section.

We keep your data for as long as your account is active. If you ask us to delete your account, all personal data and account scoped content is removed within 30 days. Server logs are kept for 30 days. Sentry events are kept for 90 days.

Under the GDPR and Ukrainian data protection law, you can:

• Request a copy of the personal data we hold about you.
• Ask us to correct or update it.
• Ask us to delete it (this closes your account).
• Ask us to export it in a machine readable format.
• Object to or restrict our processing.
• Complain to a data protection authority.

To exercise any of these rights, email support@wordspotting.app from the address on your account. We respond within 30 days.

Wordspotting is for users aged 16 and older. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, contact us and we will remove the account.

We use one essential cookie to keep you signed in. We do not use third party advertising cookies. PostHog is configured to run without cookies.

We may update this policy. Material changes will be announced on this page with a new "Last updated" date. The previous version remains available on request.

Questions, requests, complaints: support@wordspotting.app .