Privacy Policy
Last updated: September 14, 2026
Word Trainer (word-trainer.com and the Word Trainer Android app) is a vocabulary trainer run by its developer, Denys Konoplin. This policy explains what data the service handles, which companies process it on our behalf, how long it is kept and how you delete it. Questions go to support@word-trainer.com.
What we store about you
- Account: your email address and, if you sign up with a password, a salted hash of it (never the password itself). If you sign in with Google we receive your Google account ID and email address only: no name, photo or contacts. Email verification and password reset links are stored as short-lived hashed tokens.
- Your dictionary: the words you add, their translations and your edits to them, folders, and which base words you have switched off. Words are kept as shared canonical entries so that other learners adding the same word get the same translations; those entries contain the word and its translations and nothing about you.
- Learning progress: per-word statistics (correct, wrong, streak, when last answered), your language pair and training preferences.
- Usage: when you open the app and which sections you spend time in (timestamps derived from your requests, no location), which features you have used, progress through the onboarding guide, and daily counters of how much voice recognition, translation, speech and photo scanning you have used. The counters enforce fair-use limits and are reset daily. We also keep one small record per day with how many answers you gave, how many were correct, how many words you added and how long the app was in the foreground: this is what the progress calendar, the streak and the weekly charts are drawn from. It holds no words and no message content. For each photo scan we also keep a short record of when it happened, how it ended (and the error code, if any), how many words were found, which recognition models were asked and which one answered, how long it took and how many requests it needed. It never contains the photo or its text, is used to diagnose scanning problems, and is removed after 60 days.
- Feedback: if you send us feedback from Settings we store the message, your email address, your browser or device description, and up to three screenshots you chose to attach. If you tick the optional contact checkbox, we also store that you asked us to contact you at your account email if we need more details. This is an opt-in support reply, not a marketing subscription. Attach only what you are comfortable showing us.
- Error reports: if the app hits an error we record the error message, the technical stack trace, the page address, your browser description and your email if you were signed in. These reports are deleted automatically after 14 days.
Microphone and voice recognition
The microphone is used only while voice input or hands-free mode is switched on, to recognize your spoken answer. Audio is streamed directly from your device to Deepgram, Inc. (United States) over an encrypted connection using a key that is valid for a few minutes and can do nothing but transcribe. The audio never passes through our servers and we do not record or store it; we only count the seconds of recognition used. Deepgram processes the audio to return the text, under its own terms. Depending on your settings the app may instead use the speech recognition built into your browser, which on Android is provided by Google.
Photo scanning
When you scan a textbook page or a list of words, the photo you picked (and only that photo, compressed on your device) is sent together with your language pair to Google's Gemini API (Google LLC) to extract the vocabulary. We do not keep the image; it is discarded as soon as the words come back. We use the paid tier of the Gemini API, which Google operates under its API terms for paid services.
Translation and text-to-speech
Words you add are translated with Google Translate, and words are read aloud with Google text-to-speech. Only the word text is sent; no account identifiers travel with it. Where Google speech is unavailable the app falls back to the voice built into your device.
We send transactional email to verify your address, reset your password and confirm a scheduled account deletion. If you explicitly ask us to contact you through the feedback form, we may also send a support reply to the account email already associated with your signed-in account. There is no separate email field and this permission is not a marketing subscription. Transactional delivery is handled by Resend, Inc., which receives your address and the message. We send no newsletters or marketing.
Study reminders (push notifications)
The app can remind you to practise. Reminders are on by default and you can switch them off, or move them to another hour, in Settings; on the device itself they only start once you allow notifications in the browser prompt. When you allow them, your browser creates a subscription with its own push service (Google for Chrome and the Android app, Mozilla for Firefox, Apple for Safari) and we store that subscription for your account: the address the push service gave it, the two keys needed to encrypt a message to that device, your device time zone and the app language, so the reminder arrives at the hour you chose and in your language. The notification text is built from your own data (how many words are due for review) and is encrypted for your device; the push service delivers it without being able to read it. We store no advertising identifier and send nothing promotional this way. Signing out removes the subscription for that device, switching reminders off stops the sending, and the subscriptions are deleted with your account.
Feedback forwarding
Feedback you send is stored in our database and a copy (the text, your email and any screenshots) is forwarded to the developer's private Telegram chat so it is seen quickly. If you ticked the contact checkbox, the Telegram copy also indicates that you requested an email reply. Telegram Messenger Inc. processes that copy under its own terms. The stored copy is deleted with your account; ask us at support@word-trainer.com if you also want the forwarded copy removed.
Shared folders
If you create a share link for a folder, a snapshot of that folder (its name, language pair, words and translations) becomes visible to anyone who has the link for 2 days, or until you revoke the link. The shared page does not show your email or name. Snapshots are deleted when they expire, when you revoke them, and when your account is deleted.
Cookies and data kept on your device
We set one cookie to keep you signed in and, on the public landing page, one to remember the language you picked. If you open the site through one of our promotional links (a link carrying utm campaign tags), one more cookie remembers which link it was for 30 days. None of them is an advertising cookie or follows you across other sites. The app also keeps a copy of your dictionary, statistics, audio and preferences in your browser's storage so it works offline; signing out removes all of it from the device.
Analytics
We use no third-party analytics service. To see which of our promotions work, the website counts visits that arrive through our campaign links: the campaign tags from the link, the day and the device type (iPhone, Android or computer). These counts hold no IP address, no identifier and nothing about you personally. If you create an account after arriving through such a link, the campaign tags, the page the link opened, when you arrived through it and the device type are saved with your account, so we can see how many sign-ups a promotion brought. We run no advertising trackers and build no advertising profiles.
Purchases
Pro subscriptions bought on the website are sold and processed by Paddle.com Market Ltd (Paddle), our merchant of record: Paddle collects your payment details, billing address and tax information under its own privacy policy, and sends us a confirmation of what was bought, the subscription status, and Paddle's identifiers for the customer, subscription and transactions, which we store to unlock Pro and to handle cancellations and refunds. If you install Word Trainer from Google Play, Google handles the installation and any purchase you make there, and we receive a confirmation of what was purchased. In neither case do we see your card number.
Where data is processed
The service runs on Vercel (hosting) with data stored in MongoDB Atlas. Our DNS and the support@ mailbox routing are provided by Cloudflare. The companies named above process data on our behalf and only to provide the service; some of them are in the United States, so your data may be processed outside your country. We do not sell personal data and do not share it with anyone for their own purposes. IP addresses are read to limit abuse (for example repeated sign-up or password reset attempts), immediately converted to a keyed one-way digest, and kept only in a short-lived rate-limit record. The raw IP address is not stored by Word Trainer; these records expire automatically after their rate-limit window, at most 24 hours.
How long we keep data
- Account data, dictionary, progress and feedback: until you delete your account.
- Error reports: 14 days.
- Photo-scan attempt records (when, the outcome and any error code, how many words were found, which recognition models were asked, how long it took; never the photo or its text): 60 days, then removed automatically.
- Shared folder snapshots: 2 days or until revoked.
- Daily usage counters and voice-session accounting records: a few days, then removed automatically.
- The per-day study record behind the progress calendar: 400 days, then removed automatically.
- The campaign-link cookie on your device: 30 days.
- Visit counts from campaign links, which hold nothing about you: 400 days, then removed automatically.
- Push subscriptions for study reminders: until you sign out on that device, the push service reports it as gone, or you delete your account.
Deleting your account
Open Settings and choose "Delete account". Your account is scheduled for deletion in 7 days and you are signed out on the device. During those 7 days, and until the next daily cleanup actually runs, you can change your mind with one tap on the notice shown after signing in, or with the link in the confirmation email. After the cleanup runs, everything listed above is deleted: your account, dictionary, progress, usage records, the per-day study records, reminder subscriptions, feedback with its screenshots, error reports and shared snapshots. The canonical word entries stay, as they contain no personal data. Full instructions, including deletion by email for people who can no longer sign in, are at /delete-account.
Your rights
You can see and change your dictionary, progress and settings in the app at any time. To ask for a copy of your data, correct something you cannot change yourself, or delete your account by email, write to support@word-trainer.com from the address on the account. If you are in the European Economic Area or the United Kingdom you also have the right to complain to your data protection authority.
Children
Word Trainer is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
Security
All connections use TLS, passwords are stored only as salted hashes, and the keys handed to your device for voice recognition are short-lived and single-purpose. Security reports are welcome at security@word-trainer.com.
Changes
When this policy changes we update the date at the top. For material changes we will tell you in the app or by email before they take effect.