Privacy

Privacy Policy

Last updated: May 2025. We keep it simple — your data belongs to you.

Overview

Vocab Doctor ("we", "us", or "our") is committed to protecting your personal information and your right to privacy. This policy explains what information we collect, how we use it, and what rights you have over it.

We do not sell your personal data. We do not share it with third parties for marketing purposes. Period.

Information We Collect

Account Information

When you create an account, we collect:

  • Your email address (used for login and communication)
  • A display name (optional)
  • Password (stored as a one-way hash — we never see it in plain text)

Vocabulary & Study Data

To provide the core service, we store:

  • Vocabulary lists and words you create
  • Study session results and spaced repetition schedules
  • Streak data and mastery scores
  • AI-enriched content generated for your words

Usage Data

We collect anonymized analytics to improve the app:

  • Feature usage frequency (which study modes are used most)
  • App crash reports
  • Device type and OS version

This data cannot be used to identify you personally.

How We Use Your Information

  • To provide, maintain, and improve the Vocab Doctor app
  • To sync your vocabulary lists and progress across devices
  • To send you important service updates (you can opt out of marketing emails)
  • To process AI enrichment requests via the Claude API
  • To calculate and display your learning streaks and progress
  • To respond to your support requests and questions

AI Enrichment & Third-Party Services

When you use the AI enrichment feature, the word or phrase you enrich is sent to Anthropic's Claude API to generate definitions, examples, and memory tips. Anthropic processes this data in accordance with their own privacy policy.

We do not send personally identifiable information (such as your name or email) to the AI API — only the vocabulary content you explicitly ask to enrich.

Other Third-Party Services

  • Firebase (Google) — used for authentication and cloud database storage
  • Apple / Google — for app distribution and in-app purchases

Data Security

We take data security seriously:

  • All data in transit is encrypted using TLS 1.2+
  • Data at rest is encrypted using AES-256
  • Passwords are hashed with bcrypt — we never store plain text passwords
  • Access to production databases is restricted to authorized personnel only

No system is 100% secure. If you discover a security vulnerability, please contact us immediately at security@vocabdoctor.app.

Your Rights

Depending on where you live, you may have the following rights:

  • Access — Request a copy of the data we hold about you
  • Correction — Ask us to correct inaccurate data
  • Deletion — Request that we delete your account and all associated data
  • Portability — Request your vocabulary data in a machine-readable format
  • Objection — Object to certain types of data processing

To exercise any of these rights, contact us at privacy@vocabdoctor.app. We will respond within 30 days.

Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will permanently delete your personal data within 30 days, except where we are required by law to retain it longer.

Anonymized analytics data may be retained indefinitely as it cannot be linked to you.

Children's Privacy

Vocab Doctor is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal data, please contact us at privacy@vocabdoctor.app and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or an in-app notification at least 14 days before the changes take effect.

Continued use of the app after changes take effect constitutes your acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please reach out:

We take privacy concerns seriously and will respond within 5 business days.