Privacy policy

1. What we collect

From you (the parent): your email address, a password (stored securely, hashed — we never see it in plain text), and payment/billing details if you subscribe to Premium (handled entirely by Stripe; we only ever see a subscription status, never your card number).

From a student profile:a first name or nickname you choose, a 4-digit PIN, and their learning activity — which words they’ve studied, quiz answers, points and streaks, and which shop items they’ve unlocked. We never ask a child for an email address, a surname, a photo, their school, or any other identifying information, and the app has no chat, messaging or way to contact other users.

2. Why we collect it

To run the app: to know which words a student has already learned so we don’t quiz them on words they haven’t studied, to save their progress between sessions, to show you (the parent) a dashboard of how they’re doing, and to process payment if you choose Premium.

3. Who we share it with

Two processors run the app on our behalf, both under their own data protection agreements:

• Supabase — hosts our database and handles sign-in. Everything described above lives here.
• Stripe — handles payment if you subscribe. We never see your full card details.

We don’t sell data, run advertising, or share anything with third parties for marketing. There are no third-party analytics or ad-tracking scripts in the app.

4. Cookies

We use two cookies, both strictly necessary for the app to work: one for your parent sign-in session, and one (used only on the device a child is actively using) for their student session. Neither is used for tracking or advertising.

5. How long we keep it

For as long as your account exists. If you cancel Premium, your data is kept (nothing is deleted on a downgrade) so you can pick up where you left off if you resubscribe. If you delete your account (see below), we delete it straight away.

6. Your rights

As the account holder, you can see everything stored about your child in the parent dashboard, export their progress as a CSV (Premium), and permanently delete the whole account — every student profile, all progress, points and purchases — at any time from your Account page. This is immediate and cannot be undone. Under UK/EU data protection law you also have the right to ask us to correct inaccurate data, or to ask what we hold about you, by contacting us directly.

7. Contact

Questions about this policy, or a data request: contact@vocabplus.co.uk.