Privacy Policy

Last updated: September 7, 2026

This Privacy Policy describes our policies and procedures on the collection, use, and disclosure of your information when you use the Service, and explains your privacy rights and how the law protects you.

We use personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

Words with initial capital letters have meanings defined below. The following definitions have the same meaning whether they appear in singular or plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for you to access our Service or parts of our Service.

• Application refers to Wordsmith, the software program provided by the Company.

• Company (“we”, “us”, or “our”) refers to Wordsmith.

• Country refers to New Zealand.

• Device means any device that can access the Service such as a computer, cellphone, or tablet.

• Personal Data is any information that relates to an identified or identifiable individual.

• Service refers to the Application.

• Service Provider means any natural or legal person who processes data on behalf of the Company.

• Usage Data refers to data collected automatically, either generated by using the Service or from the Service infrastructure (for example, app screens viewed, device type, or performance metrics).

• EEA/UK means the European Economic Area and the United Kingdom.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using our Service, we may ask you to provide certain information that can be used to contact or identify you (for example, an email address for account creation). We aim to minimize the amount of personal data we collect.

Usage Data

Usage Data is collected automatically when using the Service and may include information such as your device type, operating system version, app version, pages/screens visited, in-app actions, and diagnostic information like crash reports and performance metrics (if enabled). We do not collect your device location. Our analytics provider derives an approximate, country-level region from the network address your device connects from. We use that region to apply the correct regional privacy behaviour and to understand where the app is used. Where supported by your platform and allowed by your settings, we and our service providers (for example Google Firebase) may also collect device identifiers such as the Google Advertising ID for measurement and analytics purposes (not for ad targeting or ad personalization).

Content You Import From Other Tools (e.g. Flashcard Decks)

The Service may allow you to import content from third-party tools by uploading files (for example, flashcard deck files such as .apkg files generated by other software). These files and their contents are treated as part of your words, notes, and collections within Wordsmith.

• We process imported files and their contents only as needed to provide the import feature (for example, to extract card text so you can turn it into words or collections in your account).
• Imported material is stored and processed under your account and may later be associated with private, unlisted, or public collections, depending on how you choose to use the Service.
• We do not share imported deck contents with the third-party tool they came from, and we do not use them for advertising.
• You are responsible for ensuring that you have the necessary rights to upload, process, and share any imported content. For more details on your responsibilities, see the “Your Content” section of our Terms of Service.

Content You Publish

Almost everything you keep in Wordsmith is private to you. Publishing a collection is the one action that makes something visible to other people, and it is always your choice.

When you make a collection public or share it by link, three things become visible to anyone who opens it: the collection's name, its description if you wrote one, and your handle shown as the creator. Your private notes, your own custom words, and your own quotes are never shown to anyone else. They stay in your copy and are removed from everything other people see.

Public collections are indexed so that other people can find them in the search and browse surfaces inside the app. You can unpublish a collection at any time, which removes it from those surfaces and from its share link.

Reports and blocks are covered by our Community Rules. When you report a collection or a creator, we record the report and review it, and the person you report is never told who reported them.

How We Use Your Personal Data

• To provide and maintain the Service, including operating core features (e.g., sign-in, sync, storage) and ensuring availability and security.
• To manage your Account and provide you access to features for registered users.
• To perform a contract with you, such as delivering features you request.
• To contact you (for example, support updates or important service notices, and—if you opt in—product updates or tips).
• To improve the Service, including analytics (if enabled) and diagnostics to understand performance and stability.
• To process content you import from third-party sources (such as flashcard decks) so that it can be stored, searched, and used within Wordsmith.
• To comply with law and enforce our Terms of Service.

Legal Bases for Processing

Our legal bases depend on what we are doing with your data and where you are located:

• Consent (EEA/UK): In the EEA/UK, we process analytics (usage & events) only if you opt in. You can change your choice at any time in the app’s Settings.

• Contract / Service Necessity (global): We process data that is strictly necessary to provide the Service you request—such as account management, sync, storage of your words/collections, imported content, and other core functions—without requiring separate consent.

Regional Behavior

• EEA/UK: We do not start analytics until you opt in. You can change your choice any time in Settings.
• Outside the EEA/UK: We run analytics by default to improve the product, with a clear in-app opt-out available in Settings. If we cannot determine your region, we treat your device as though it were in the EEA/UK and ask you to opt in first.

Analytics, Diagnostics, and Third-Party Processors

We rely on the following third-party services, which process data on our behalf to help us operate and improve the Service:

Firebase Analytics (Google)

• Purpose: Measure app usage and feature engagement (e.g., screen views, events) to improve product experience.
• Region behavior: Disabled by default in the EEA/UK until you opt in. Outside the EEA/UK, enabled by default with an opt-out.
• Identifiers & data: App Instance ID, device information (e.g., OS and model), app version, screen views, and event metadata. Where allowed by your device and settings, Firebase Analytics may also access the Google Advertising ID for measurement and analytics; we configure our implementation so that this identifier is used only for analytics/measurement, not for ads or ad personalization.

Firebase Crashlytics (Google)

• Purpose: Collect crash and error reports to improve reliability and fix issues quickly.
• Gating: We always gate Crashlytics behind the in-app “Crash & Performance diagnostics” setting. If you turn diagnostics off, we stop sending Crashlytics data.
• Identifiers & data: Crash traces, device/OS info, app version, and limited session context needed to reproduce and fix issues. We aim to avoid sending any personal content in logs.

Firebase Performance Monitoring (Google)

• Purpose: Measure app startup time, screen render performance, and network request timings to keep the app fast.
• Gating: Controlled by the same in-app “Crash & Performance diagnostics” setting as Crashlytics.
• Identifiers & data: Performance metrics, device/OS information, app version; no ad-related signals are used.

RevenueCat (subscriptions)

• Purpose: To keep a single record of which Wordsmith features your account is entitled to, and to keep that record consistent across your devices and both app stores.
• Identifiers & data: your Wordsmith account identifier, and, once paid features exist, the purchase receipt issued by Apple or Google together with the subscription's status and renewal dates. No payment card details reach RevenueCat or us. The store handles the payment.
• RevenueCat processes this on our behalf as a service provider and does not use it for advertising.

Google Fonts

• Purpose: To load the typefaces the app is designed in.
• Identifiers & data: your device's network address reaches Google when a typeface is first downloaded. No Wordsmith account identifier is sent with that request.

Support requests

• When you contact us from inside the app, or give a reason when you delete your account, we receive what you wrote along with your name and email address and a short technical summary of your device and app version. We use it to answer you and to understand the problem, and nothing else.

Ad signals: We do not run ads. We explicitly disable ad storage, ad user data, and ad personalization signals in our analytics configuration. Even where the Google Advertising ID is available to our service providers, we instruct them to use it only for measurement and analytics and not for ad targeting or ad personalization.

Google Play Data Safety Disclosure

Our Google Play Data safety form is designed to reflect how Wordsmith handles data, including:

• Which categories of data are collected (e.g., usage analytics, diagnostics),
• The purposes of collection (e.g., app functionality, analytics, and diagnostics),
• Whether data is linked to you, and
• What choices you have (e.g., opt-in for analytics in the EEA/UK; in-app opt-out elsewhere; diagnostics toggle).

We review this disclosure when features change. The in-app Settings let you adjust analytics and diagnostics at any time.

Retention of Your Personal Data

When you delete your account, your account access is removed immediately and your data is deleted from our live systems within 30 days. Residual copies may persist in our encrypted backups for a bounded period (backups are deleted on a fixed schedule, at most 35 days after creation) and are never used to restore deleted accounts.

We retain personal data only as long as necessary for the purposes described in this Privacy Policy and as required by law.

Transfer of Your Personal Data

Your data may be processed outside of your country. Where we transfer data internationally, we rely on appropriate safeguards permitted by applicable law.

Delete Your Personal Data

You have the right to delete—or request that we delete—personal data we hold about you.

You can start this yourself in the app, without contacting us: open the Account tab, scroll to the end of the page, and tap Delete account.

When you delete your Wordsmith account, your sign-in is removed immediately and the account cannot be restored. Your content is permanently removed from our live systems within 30 days. Copies that other people saved of a collection you published remain with them. Some limited data may persist temporarily in backups for disaster recovery and is purged on the normal rotation schedule. We do not use backup copies for active processing.

We may need to retain certain information when we have a legal obligation or lawful basis to do so.

Disclosure of Your Personal Data

Business Transfers

If the Company is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law Enforcement and Legal Requirements

We may disclose your Personal Data if required to do so by law or in response to valid requests by public authorities. We may also disclose your Personal Data when necessary to comply with legal obligations, protect our rights or property, prevent wrongdoing, ensure user safety, or defend against legal liability.

Security of Your Personal Data

We use commercially reasonable safeguards to protect your Personal Data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Children’s Privacy

The Service is not directed to children under 13, and you must be at least 13 years old to use it. We ask for your age before account creation and rely on the age you declare. We do not knowingly collect personal data from children under 13.

We aim to collect only the minimum data necessary to provide the Service described in this Privacy Policy, regardless of age. If we learn that we have collected personal data from a child under 13, we will delete that data and terminate the associated account. If you are a parent or guardian and believe a child under 13 has provided us personal data, please contact us so we can review the situation and delete the data.

Links to Other Websites

Our Service may contain links to third-party websites. We are not responsible for their content or privacy practices. We encourage you to review the privacy policies of any third-party site you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated Privacy Policy here and update the “Last updated” date above. If changes are material, we will take reasonable steps to notify you (for example, via an in-app notice).

Contact Us

If you have questions about this Privacy Policy, contact us:

• By email: support@wordsmith-app.com

• By visiting: www.wordsmith-app.com#contact-us-section