Privacy Policy

Last Updated: March 2026

"WordPlus" is an interactive language-learning service provided by IE Volodymyr Voitsekhivskyi ("Company", "we", "us"). Our services ("Services") include a mobile application ("App"), a Telegram bot ("Bot"), and a website at wordplus.app ("Website").

This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have. It applies to all parts of the Services.

1. Data We Collect

1.1 Data you provide directly

1.2 Data from the Telegram Bot

1.3 Data collected automatically

1.4 Data collected with your consent

2. How We Use Your Data

We process your data on the following legal bases under GDPR Article 6:

Contract (Art. 6(1)(b)):

Consent (Art. 6(1)(a)):

Legitimate Interest (Art. 6(1)(f)):

You can withdraw consent for analytics at any time in the App settings. Withdrawing consent does not affect the lawfulness of processing performed before the withdrawal.

3. AI and Third-Party Processing

3.1 AI in the Mobile App

The App uses AI services to generate learning content (exercises, translations, explanations). Only anonymized text queries are sent to AI providers — no personally identifiable information (names, emails, user IDs) is included in AI requests.

3.2 AI in the Telegram Bot

The Bot uses AI services for conversational learning assistance. The AI receives anonymized learning context only: language pair, skill level, and activity summary. Your display name, Telegram ID, and other personal identifiers are never sent to AI providers. The Bot maintains short-term memory notes to improve learning continuity; these notes are processed through a PII filter that strips any personal information before storage.

3.3 Translation

Translation features send only the text to be translated and the source/target language to translation providers. No user identifiers or personal data are included in translation requests.

3.4 Text-to-Speech

Pronunciation features send only the text to be spoken and the target language to TTS providers. No user identifiers or personal data are included.

3.5 Our Service Providers

We use the following categories of third-party services for content processing:

All providers operate under Data Processing Agreements (DPAs). Our API configurations ensure that providers do not retain or use your data for model training.

3.6 Data Minimization

We follow the principle of data minimization: AI and TTS providers receive only the minimum data required to perform the requested function. No user profiles, account data, or browsing history are shared with these providers.

4. Data Storage, Retention, and Deletion

4.1 Active data

Your data is stored on Google Cloud / Firebase infrastructure (United States) for as long as your account is active.

4.2 Inactive accounts

Accounts that have been inactive for 2 years are automatically deleted. You will receive a warning notification 30 days before deletion. Any activity during the warning period cancels the deletion.

4.3 Account deletion

You can delete your account at any time using the "Delete Account" button in the App settings or by sending a data deletion request to the Telegram Bot. Deletion removes all your data from active databases, including all learning data, purchase records, settings, and uploaded content.

4.4 Backup systems

Our database uses Point-in-Time Recovery (PITR) with a 7-day retention window. After account deletion, residual data in backups is naturally purged within 7 days. A tombstone mechanism ensures that deleted accounts cannot be restored from backups.

4.5 Automatic data expiry

5. Data Sharing

We share your data only with the following categories of recipients:

We do not sell your personal data. We do not share your data with advertisers.

6. International Data Transfers

Your data is stored on Google Cloud servers in the United States. AI and TTS queries may be processed in the US and other countries where our providers operate.

For transfers of data from the European Economic Area (EEA), we rely on the following safeguards:

You may request a copy of the relevant safeguards by contacting us at support@wordplus.app.

7. Children's Privacy

Our Services require users to be at least 16 years old. We verify age at registration by asking for your date of birth. If we discover that a user under 16 has provided personal data, we will promptly delete their account and all associated data.

If you believe a child under 16 is using our Services, please contact us at support@wordplus.app.

8. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

We will respond to rights requests within 30 days, as required by GDPR.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), access controls, audit logging of administrative access, and regular security reviews. However, no method of transmission over the Internet is 100% secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. For significant changes, we will notify you via the App or email. The updated version will always be available on this page with the "Last Updated" date.

11. Contact Us

Data Controller: IE Volodymyr Voitsekhivskyi

Address: 20 Bogunska St, apt. 79, 13300 Berdychiv, Ukraine

Email: support@wordplus.app