Privacy policy

1. Who is responsible

WordBoost is operated by Jakub Szuminski, the controller responsible for the personal information described here. This policy covers the WordBoost app, including beta versions, and getwordboost.com. For privacy questions or requests, email jakubszuminski0+wordboost@gmail.com.

2. Information we process

• Account information. When you sign in, we process your email address, account identifier, sign-in provider identifiers, and any name shared by your provider or supplied by you. Apple may provide a private relay email address. Apple and Google handle their own sign-in credentials; we do not receive your Apple or Google password.
• Authentication and preferences. Our authentication service processes sign-in requests, security events, and session information. Session tokens are stored using the device Keychain. Account metadata may include your name and whether onboarding is complete.
• Learning information on your device. Available learning features may save preferences, word progress, quiz results, and practice streaks locally. The current learning implementation does not upload those local records to our backend.
• Technical information. Hosting and authentication providers process information such as IP addresses, request times, browser or device details, and error or security logs as needed to deliver and protect their services.
• Messages you send. If you email us, we receive your email address, message, and any attachments you choose to include. Please avoid sending passwords or sensitive information.

3. Why we use information

We process account and session information to provide the service you request, including signing you in and maintaining your account (performance of our agreement with you). We process technical logs to protect the service and troubleshoot problems, and correspondence to answer enquiries (our legitimate interests in operating a secure, reliable service). Where required, we process information to comply with legal obligations. If a feature requires consent, we will request it separately; you can withdraw that consent without affecting earlier lawful processing.

4. Services that receive information

We use Supabase for account authentication and account storage, Vercel to host this website, and Cloudflare for the domain and DNS. Support email is handled through Gmail. These providers process information needed for their respective services.

If you choose Apple or Google sign-in, those providers process your sign-in under their own privacy policies: Apple and Google. Playing externally hosted audio or following a link to services such as Apple Music, YouTube, or X sends a request to that service, which may receive your IP address and device information. Their policies govern their own processing.

We may also disclose information when legally required, to protect rights or prevent abuse, or in a business transfer subject to applicable privacy protections. We do not share personal information for third-party targeted advertising.

5. Cookies and analytics

This website does not set advertising or analytics cookies, use tracking pixels, or include third-party analytics scripts. Infrastructure providers may process technical requests for delivery and security. The app uses local storage and secure session storage to provide its features. We do not currently use advertising identifiers or third-party product analytics in the app.

6. Storage, security, and international processing

The app’s primary Supabase project is hosted in Frankfurt, Germany. Other providers may process data in other countries, including the United States. Where applicable data protection law requires safeguards for an international transfer, we rely on the relevant provider’s contractual safeguards, such as Standard Contractual Clauses, or an applicable adequacy decision. Contact us for information about the safeguards relevant to your data.

We use measures such as encrypted connections, secure device storage for session tokens, and access controls. No internet service or storage system can guarantee absolute security.

7. How long information is kept

Account information is kept while your account remains active and is needed to provide the service. You can request account deletion by email. We retain support correspondence only as needed to resolve the enquiry and follow-up issues; security and technical logs follow the relevant provider’s retention settings. Information may be retained longer when required by law, to resolve a dispute, or to investigate abuse. Any retained information is limited to that purpose, and backup copies expire under the provider’s backup cycle.

Learning information stored only on your device is not removed by deleting a server account. Removing the app generally removes its local learning data, although device backups and Keychain items can persist under Apple’s storage and backup behaviour. Contact us if you need help clearing your data.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a portable copy of your personal information, restrict processing, object to processing based on legitimate interests, and withdraw consent where processing relies on it. Email jakubszuminski0+wordboost@gmail.com to make a request. We may need to verify that the request relates to your account and will respond within the period required by applicable law.

You can also complain to your local data protection authority. In Poland, this is the President of the Personal Data Protection Office (UODO); elsewhere in the EEA, you can contact the authority in your country of residence, work, or the alleged infringement.

9. Children

WordBoost is not directed to children under 13. We do not knowingly collect their personal information. If you believe a child has provided us with personal information without the necessary permission, contact us so we can investigate and delete it where appropriate. Where a higher local age or parental consent requirement applies, that requirement must be met.

10. Changes and contact

We will update this page when our practices change and revise the effective date. For significant changes, we will provide additional notice where required. Contact Jakub Szuminski at jakubszuminski0+wordboost@gmail.com.