What the app knows about you.

There is no account and no sign-in. Your progress lives on your phone, and is backed up to your own iCloud so it survives a new device. There is no advertising and no tracking. From version 1.3 the app sends anonymous usage counts and crash reports, which help fix and improve it, and one switch in Settings turns them off.

What stays on your device

Your name, chosen look, training pace and starting level
Every word you've seen, your accuracy on it, and when it's next due
Belts, level, coins, your deck and battle records

All of it is written to a single file in the app's own storage, and mirrored to your private iCloud key-value store so a new phone can pick up where the old one left off. That copy lives in your Apple account, not on any server we run. We cannot read it, and there is nothing for us to read it with. Turn iCloud off for the app and it simply stops mirroring; everything still works.

What leaves your device

Your progress goes to your own iCloud, described above: Apple's storage, your account, unreadable by us. Subscriptions are processed by Apple and managed through RevenueCat, which receives the purchase and a device identifier so your subscription can be restored on your other devices.

From version 1.3, two more things, both on unless you turn them off:

Anonymous usage counts, sent to PostHog (stored in the EU): which onboarding screens are reached, when the paywall is shown and whether a trial starts, classes started and finished with their scores, belts earned, how many words are mastered, which dojos and packs are played, whether widgets are on the Lock Screen and whether reminders were allowed, plus your onboarding choices such as goal and pace. They carry a random ID made by the app when it is installed, and the device model, iOS version, app version and language.
Crash reports, sent to Sentry: what went wrong, where in the app, and the same device details.

Neither includes your name, email, advertising identifier, contacts, photos or anything you type. We use them only to find bugs and see where the app loses people; they are never used for advertising, sold, or shared with anyone else. To stop both, open the app's Settings and turn off Share anonymous usage data.

When you share a word-of-the-day image, it goes wherever you send it from the iOS share sheet. The app doesn't send it anywhere itself.

Notifications, widgets and Photos

Reminders, including the word of the day at the time you choose, are scheduled on your phone by the app. There is no push server, and none arrive until you allow them.
The widgets read the coming two weeks' words from storage the app shares with them on your phone.
Share images are drawn on your phone. The app can add an image to Photos when you tap Save Image; it can't see your library.

What we don't do

No account, and nothing that identifies you by name or email
No advertising, and no advertising identifier
No tracking across other apps or websites, and no data sold or shared

This website

This site sets no cookies, runs no analytics and loads nothing from other companies: its fonts and images are served from the site itself. It is hosted by Cloudflare, which sees the request details any web host sees, such as your IP address. Its App Store links carry an App Store campaign token, which tells Apple which page or post a download came from. Apple reports those downloads to us only as totals, for people who choose to share analytics with developers.

Children

The app collects no personal information, such as a name, email or contact details, from anyone, including children. Usage counts and crash reports are anonymous and can be switched off in Settings.

Contact

Questions about this policy: [email protected]

Last updated 11 October 2026 (anonymous usage data and crash reports, from version 1.3).