Slova Privacy Policy

Effective 5 November 2026

Slova is a vocabulary app for iPhone: you collect words, sort them into folders and learn them with flashcards. This policy explains what information the app handles, where it goes, and the choices you have. “Slova”, “we” and “us” mean the independent developer who makes the app.

The short version

• Without an account, your words and progress stay on your phone.
• With an account, they are copied to our server so they sync between your devices.
• When you ask for a translation, photos, examples, a dictionary lookup or AI-made words, the word or request you typed is sent to the service that answers it — never your whole word base.
• We use Google Analytics for Firebase and Amplitude to understand how the app is used, and Google AdMob to show adverts in flashcard sessions and after adding words. Adverts are not personalised.
• We do not sell your words or your account information.
• You can delete your account, and everything stored with it, in the app.

1. Information stored on your phone

Your words, translations, examples, notes, photos, folders, learning progress, answers to flashcards and settings are stored in the app on your device. If you do not create an account, none of this leaves your phone except as described in sections 3–6.

2. Your account and sync

An account is optional. If you create one, we store, using Supabase (our database and hosting provider):

• your email address and a securely hashed password, or the identifier Apple or Google gives us if you sign in with them (and your name, if Apple shares it the first time you sign in);
• a copy of your word base: words, translations, examples, definitions, notes, photos, folders, learning schedules, your answer history and your settings, so they sync between your devices;
• your answers to the app’s introduction — for example the languages you are learning, how you heard about Slova, your first streak challenge and, if you answered them, age range, gender and why you are learning.

Emails about your account — confirming your address, resetting your password — are sent to that address through Resend, our email provider.

On your phone the sign-in session is kept encrypted, with its key in the iOS Keychain.

3. Features that send a word to another service

These run only when you use them, and send only what that feature needs:

• Auto-translate — the word and the two languages, through our server to Microsoft Azure Translator.
• Suggested photos — the word and its language, through our server to Pexels. Searches are cached on our server for a week, without any link to you.
• Example sentences — the word and languages, sent from your phone to Tatoeba.
• Pronunciation and definition lookups — the word, sent from your phone to Wiktionary (Wikimedia).
• AI mode (premium) — the request you type and your languages, through our server to an AI provider (OpenAI or Anthropic) to make a word list; or, when you choose to send one, a photo of a page and your languages, to read the words on it. We do not keep the photo. Under their API terms, requests are not used to train their models, and the provider may keep them for a limited time to prevent abuse.

Like any internet request, these reveal your IP address to the service. To stop the shared services being overused, our server counts requests per person — by your account ID if you are signed in, otherwise by a keyed hash of your IP address — and deletes those counts after two days.

Reading a word aloud uses your phone’s own speech voices, and reading text from a screenshot uses Apple’s on-device text recognition; neither sends anything to us. Dictating in AI mode uses Apple’s speech recognition: what you say may be sent to Apple to be turned into text, as with any dictation on iPhone, and only the text reaches the app. Reminders are local notifications scheduled on your phone.

4. Sharing a folder

If you share a folder, a copy of its words (text only, no photos) is stored on our server for 7 days under a short code. Anyone with the link or code can open it during that time.

5. Analytics

We use Google Analytics for Firebase to learn which features are used and where people get stuck — for example that a sitting was finished or that words were added, how many, and by which method. It collects app usage events, device and app information (model, iOS version, app version, language, approximate country) and an app-instance identifier. It does not receive the text of your words. If you have an account, your account ID may be attached so the same person is counted once across devices. Google’s use of this data is described in its Privacy Policy.

If you installed the app from the App Store, the same events, device and app information, an identifier the app makes for this install and, if you have an account, your account ID also go to Amplitude, which stores them in its data centre in the European Union. It is set not to record your IP address or your device’s advertising identifiers. Amplitude’s use of this data is described in its Privacy Policy.

6. Adverts

Free users see adverts from Google AdMob: a banner during flashcard sessions and, from time to time, a full-screen advert after a session or after adding words. Subscribers see none.

• Slova asks Google for non-personalised adverts only, and does not ask for permission to track you across other companies’ apps (App Tracking Transparency).
• Google may still process your device and network information — such as IP address, approximate location, device type and how you interact with an advert — to deliver adverts, limit how often you see them, measure them and prevent fraud.
• In the European Economic Area, the UK and Switzerland, Google’s consent form asks for your choice before any advert is requested. You can change it later in Settings › Advert privacy.

See how Google uses information from apps that use its services.

7. Subscriptions

Subscriptions are sold through Apple’s App Store; Apple handles payment and we never see your card details. We use Superwall to show the subscription offer and to know whether your subscription is active. Superwall receives your purchase status and, if you are signed in, your account ID so the subscription follows your account; our server stores whether your account is premium.

8. Who processes your data

Supabase (database, sign-in, file storage, server functions), Google (Firebase Analytics, AdMob, Google sign-in), Amplitude (analytics, in the EU), Apple (Sign in with Apple, App Store, speech recognition), Superwall, Resend (account emails), Microsoft (Azure Translator), Pexels, Tatoeba, Wikimedia, and OpenAI or Anthropic. Some of them process data outside your country, including in the United States, under their own safeguards for international transfers.

9. How long we keep it

• Account data: until you delete your account.
• Shared folders: 7 days.
• Request counts for fair use: 2 days.
• Analytics: according to the retention settings of Google Analytics and Amplitude.

10. Deleting your data

In the app, open Settings › Account › Delete account. This permanently deletes your account, your synced words, photos, progress and profile from our server. Signing out removes your words from that phone. Deleting the app removes everything stored on the phone. Analytics already sent to Google Analytics and Amplitude is not deleted with the account; to have it deleted, write to the address below.

11. Your rights

Depending on where you live (for example under the GDPR), you may have the right to access, correct, delete or export your personal data, to object to or restrict its use, and to withdraw consent at any time. We rely on: performing our service to you (account and sync), your consent (adverts where consent is required), and our legitimate interests (analytics, security and preventing abuse). You can also complain to your data protection authority. To exercise these rights, contact us at the address below.

12. Children

Slova is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

13. Changes

If this policy changes, we will update this page and its date; significant changes will also be noted in the app.

14. Contact

Questions or requests: team@slova-app.com