Privacy Policy

Overview

This policy explains what we collect when you use WordTrunk, why we collect it, and the choices you have. We keep it short and in plain language — the same way we keep your vocabulary.

Information we collect

We collect only what we need to run your account and your spaced-repetition schedule:

• Your email address, used to sign in and contact you.
• The word sets, words, translations, and tags you create.
• Revision activity — answers, streaks, and timings that power your progress charts.
• The display name you choose for your greeting, if you set one.

How we use your data

Your data is used to schedule revisions, render your progress, and keep your library in sync across devices. We do not sell your data, and we do not use the contents of your word sets for advertising.

Storage & security

Data is stored with Supabase and protected by row-level security so each learner can only read their own records. Connections are encrypted in transit.

Your choices

You can edit or delete any word set at any time from Manage Vocabulary. For anything else — a copy of everything we hold about you, a correction, or permanent deletion of your account — email support@wordtrunk.com and we will action it within one month. We will first send a short code to your registered email address and ask you to send it back, so that nobody can request your data by pretending to be you. If you ask us to delete your account, we stop sign-in straight away and then wait 30 days before erasing anything, and we email you a link to cancel in that time. If you are unhappy with how we handle your request, you can complain to your data protection regulator — in the UK, the Information Commissioner's Office.

Product analytics & retention

We record product-usage events — which features are used, when, and in which languages — to understand how WordTrunk is used and improve it. This is pseudonymous data, not anonymous data:

• Events are linked to an internal account identifier only. No name, email address, IP address or device/browser information is stored with them, and the admin analytics view displays only a truncated identifier — it never resolves an identifier to a name or email. Error monitoring is a separate purpose that does record some technical device information — see the next section.
• We never store the content of your words, translations, notes or feedback messages in analytics — only counts and category labels.
• We do not sell this data, and it is not shared with third-party advertising or analytics networks.
• Detailed usage records are retained for up to 400 days, after which they are deleted and only aggregate daily totals remain. Those totals carry no account identifier, but because WordTrunk is small some of them describe very few people, so we do not claim they are anonymous.
• Deleting your account deletes your usage records, and the aggregate totals for the days you were active are recalculated without you — so your activity is removed from those totals too.

Our lawful basis for this processing is our legitimate interest in operating and improving the service (UK/EU GDPR). To request access to or erasure of your usage records, email support@wordtrunk.com and we will action it.

Error monitoring

Separately from product analytics, we record a technical report when something in the app fails, so we can find the fault and fix it. This is a different purpose from analytics, and it collects different data:

• An error report contains the page or feature involved, the type of error and its technical stack trace, the version of the app you were running, your browser and operating system, and basic device characteristics such as your language and time zone. It is linked to the same internal account identifier as your usage data — never your name or email address.
• We never include the content of your words, translations, notes, feedback messages or uploaded files in an error report. Search terms are stripped from web addresses, the contents of requests are discarded, and any email address found in a report is removed before it is sent.
• Error reports are processed on our behalf by Sentry and stored on servers in the European Union. We do not send your IP address, and Sentry is configured not to store it — but it still derives an approximate location (country and city) from the connection and keeps that alongside the report. Our hosting provider, Vercel, also keeps short-term server logs which, unlike our analytics, may include your full IP address.
• Error reports are deleted after 90 days.

Our lawful basis for error monitoring is our legitimate interest in keeping the service secure and reliable. It is separate from the product analytics described above, and the data is used only to diagnose and fix faults — never to build a profile of you, and never for marketing.

In-app translation

WordTrunk can translate an example sentence for you, and describe a word you pick out of one. Both are optional, happen only when you ask for them, and are off unless we have switched them on for your account.

• When you ask for a translation, the sentence or the word is sent to an AI provider acting on our behalf, which returns the translation and sends nothing back to anyone else. Your name, email address and account id are never sent with it. The provider does not use what we send to train its models, and keeps a copy for up to 30 days to check for misuse.
• Sentences from our shared collection are the same for everyone, so we keep their translations and reuse them. That means most requests never leave WordTrunk at all.
• Text you uploaded yourself differs in one respect: a translation of it is never stored and never reused for anyone else. Otherwise it is handled like any other sentence — when you ask for it to be translated, or for a word in it to be explained, that sentence is sent to the provider.
• If you mark a translation as wrong, we keep the word and what we showed you so we can improve it. Where the word came from your own uploaded text, the sentence is not kept.

Lawful basis: performance of our contract with you (Article 6(1)(b)) — the translation is part of the service you asked for.

Adding words from a picture

On a phone, the Add tab in Vocabulary can read the words in a photo or screenshot you choose, so you can add them to your vocabulary. It happens only when you take or paste a picture. Text you type or paste is split into words by WordTrunk itself and is not sent to these providers.

• The picture is made smaller on your phone and sent to an AI provider acting on our behalf, which reads the text in it and sends it back. We use three — Anthropic, OpenAI, and Google through OpenRouter — and if the first is slow to answer, the same picture is also sent to the next. Your name, email address and account id are never sent with it.
• None of them uses what we send to train its models. Anthropic and OpenAI keep a copy for up to 30 days to check for misuse, and longer only if it is flagged as breaking their rules; through OpenRouter we use only services that keep nothing.
• We keep neither the picture nor the text read from it. The text stays on your screen until you leave, and only the words you choose to add are saved. When you tap a word to see what it means, its sentence is sent to the provider as described under In-app translation, and is not stored.
• A picture can show more than the language you are learning, such as a name or a notification. We ask the provider for text in the language you are learning and skip everything else, but it is best not to use pictures of other people's private information.
• We record that a picture was read — when, which provider answered, how long it took, what it cost and how many words it found — but never the picture or its text. If you report that a picture was misread, the text that was read is kept with your report for 90 days so we can improve it, then deleted.

Lawful basis: performance of our contract with you (Article 6(1)(b)) — reading the picture is part of the service you asked for.

Email, sound and reminders

A few other services handle a small part of your data on our behalf, each only for the job described here.

• Email. The emails we send you (confirming your account, resetting your password, telling you your password was changed, and replies to Trunk Mail) go through Resend, from servers in Ireland. Resend receives your email address and the message, and nothing else from your account.
• Sound. When you play a sentence or a word aloud, its text is sent to a text-to-speech provider acting on our behalf, either Microsoft Azure AI Speech (in Switzerland) or Google Cloud Text-to-Speech, which sends back the recording. Your name, email address and account id are never sent with it. Recordings of sentences from our shared collection, and of single words, are kept and replayed for everyone, so most plays never leave WordTrunk. A word's recording is filed under the word alone, never under your account. A sentence from text you uploaded is spoken when you ask and never stored.
• Reminders. If you turn on reminders, your browser gives us an address on its maker's push service (Google, Apple, Mozilla or Microsoft, depending on the browser), which delivers them. A reminder says only how many words you have due.
• Hosting. Your account and vocabulary are stored with Supabase in Zurich, Switzerland, and the site is served by Vercel from Frankfurt, Germany. Vercel Web Analytics counts page visits for us without cookies and without following you to other websites.

Cookies

WordTrunk uses only the cookies it needs to work: one that keeps you signed in, and one that remembers your interface language for a year. Some settings, such as whether sound is on, are kept in your browser's own storage. There are no advertising or tracking cookies, and none from any other company.

Contact

Questions about this policy? Email support@wordtrunk.com.