Privacy Policy for VociApp

• VociApp is local-first: core learning data is stored on your device unless you use account sync or AI features.
• An account is optional, but required for account sync and quota-bound AI features.
• We do not sell your personal data.
• We do not use third-party advertising SDKs.
• We do not track you across apps or websites.
• AI requests may send selected learning content, answers, prompts, or OCR text to Supabase Edge Functions and OpenAI for processing.
• Camera/photo access is used only for user-initiated scan/import features. Original images are not collected by us in the normal OCR flow.

For App Store privacy disclosures, VociApp may collect and link the following data to your account or identity when you sign in, sync, purchase, use AI features, or contact support:

• Contact Information: email address.
• Identifiers: user ID or account ID.
• Purchases: purchase history, subscription status, product tier, and entitlement status.
• User Content: vocabulary decks, cards, examples, notes, imported/OCR text, prompts, answers, and other learning content you create or submit.
• Usage Data: learning progress, review activity, feature usage, quotas, and timestamps.
• Diagnostics: backend errors, operational logs, request metadata, and support diagnostics.

VociApp does not use these data types for tracking across apps or websites, advertising, or data brokerage. We do not collect payment card numbers, precise location, contacts, browsing history, advertising data, or device advertising identifiers.

Vocabulary decks and cards, front/back text, examples, notes, imported vocabulary, verb metadata, study settings, review logs, learning state, due dates, and sync cursor state — to provide vocabulary training, spaced repetition, imports, and progress tracking.

If you create or sign into an account, VociApp uses Supabase Auth. This may include your email address, authentication user ID, session tokens, and profile status, for authentication, account management, security, and sync eligibility.

When you are signed in and sync is eligible, VociApp may transmit account-scoped learning data (decks, cards, review logs, progress, settings) to Supabase so it can be restored or shared across your signed-in devices. Guest-local data does not sync unless you choose to claim it into your signed-in account.

VociApp includes optional AI-assisted features. Depending on the feature, selected content may be sent to Supabase Edge Functions and OpenAI, including card text, example sentences, your answers, terms for analysis, and OCR/imported text for extraction.

AI output may be inaccurate, incomplete, or inappropriate. Do not rely on AI output as the sole authoritative source for exams, professional translation, legal, medical, financial, or safety-critical decisions.

For more detail, read AI & Data Safety.

VociApp may request camera or photo access when you choose to scan or import learning material, using on-device OCR. In the normal scan/import flow, the original image is processed locally and is not uploaded to our backend. If you use AI-assisted extraction, recognized text may be sent to AI processing as described above.

Authorized administrators may access an admin interface for support, account status management, AI entitlement review, and content maintenance.

VociApp may offer optional paid tiers (Plus or Pro AI) through the App Store or Google Play. Purchases, renewal, cancellation, and refunds are handled by the relevant platform. We do not receive your full payment card details.

• Supabase — authentication, database sync, Edge Functions, and backend storage.
• OpenAI — optional AI processing for AI-assisted features.
• Apple and Google — app distribution, platform billing, and subscription management.
• Google ML Kit OCR — on-device OCR language support in scan/import flows.

• Local app data remains on your device until you delete it or uninstall the app.
• Synced account data remains in Supabase until you delete it, request deletion, or we remove it under retention/legal processes.
• AI usage logs and admin audit logs may be retained for security, cost control, and abuse prevention.

Signed-in users can initiate account deletion directly in the app from Account > Delete account. If you cannot access the app, use the Account Deletion page for external deletion instructions. Account deletion does not automatically cancel an active App Store or Google Play subscription.

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, object to certain processing, or withdraw consent. Contact vociapp.support@gmail.com.

If you are in the European Economic Area, United Kingdom, or Switzerland, the legal bases for processing may include performance of the app service you request, your consent for optional features, legitimate interests such as security and abuse prevention, and legal obligations.

If you are in California or another US state with privacy rights, you may have rights to know, access, correct, delete, or obtain a copy of certain personal information. VociApp does not sell personal data and does not use personal data for cross-context behavioral advertising.

VociApp is intended for general language learning and is not directed to children or the Kids category. If you are below the age required to consent to digital services in your country, use VociApp only with permission and supervision from a parent or legal guardian.

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date on this page.

Dominik Schmitt — Domtelier

Email: vociapp.support@gmail.com