Privacy Policy

Last updated: July 2026

1. Who we are

WeaveWords (weavewords.org) is a language-learning application, available on web, iOS, and Android, that uses spaced repetition to help you build vocabulary. We are the data controller for personal data collected through this service.

2. Data we collect

Account data — email address, display name, avatar (required to use the service).
Learning data — vocabulary items, collections, spaced repetition records.
Analytics data — page views, feature usage, session length (only with your consent, where required by law).
Technical data — IP address (used once to detect your region, not stored).
Device permissions (mobile app) — with your permission, the mobile app can access your camera (to attach photos to vocabulary cards) and microphone (for pronunciation practice and voice input). These are only used when you actively choose to use those features and are never accessed in the background.
Purchase data (mobile app) — if you subscribe to WeaveWords Pro on iOS or Android, purchase and subscription status is processed by Apple/Google and RevenueCat; we receive your subscription status but not your payment card details.
Push notification token (mobile app) — if you enable reminders, a device push token is stored so we can deliver practice reminders you've opted into.

3. How we use your data

To provide and improve the WeaveWords service.
To send you practice reminders you have opted into.
To understand how the app is used and fix issues (analytics, with consent where required).
To process payments for Pro subscriptions via Stripe (web) or Apple/Google in-app purchase (mobile).

4. Cookies & tracking (web)

On the web app we use essential cookies (authentication, session) that are always active. We optionally use Google Analytics (analytics cookies) and Google Ads (marketing cookies) — these only fire after you give consent. All third-party tracking uses Google Consent Mode v2, meaning no identifiable data is collected before consent is granted. To review or change your cookie preferences, visit this page from a browser on qa.weavewords.org.

5. Your rights (GDPR)

If you are in the EU/EEA you have the right to:

Access, correct, or delete your personal data.
Withdraw consent for analytics/marketing at any time.
Data portability — export your vocabulary as CSV.
Lodge a complaint with your national data protection authority.

To exercise these rights, contact us at admin@weavewords.org.

6. Third-party services

Google Analytics — usage analytics (consent required in EU).
Stripe — payment processing for web Pro subscriptions.
RevenueCat, Apple App Store & Google Play — subscription management and payment processing for mobile Pro subscriptions.
Amazon S3 — storage for uploaded images.
Firebase Cloud Messaging — delivery of push notification reminders on Android.

7. Data deletion

You can request deletion of your account and all associated data at any time by emailing admin@weavewords.org. We will delete your data within 30 days, except where we are required to retain it by law.

8. Contact

Questions about this policy? Email admin@weavewords.org.