Last updated: 24 February 2026
Vocab Magnet is committed to protecting your privacy. This policy explains how we collect, use, and protect your data.
Your learning data powers Vocab Magnet's core functionality — spaced repetition, streak tracking, and personalized recommendations.
Paddle handles subscription billing, and we only see your subscription status (not payment details).
When you use our contact form, we use your email and message to help resolve your issue.
Anonymized analytics (via Umami) help us understand which features are valuable and where to focus development.
✓ We do NOT sell your data to anyone.
We work with trusted third-party service providers to operate Vocab Magnet. Here's exactly who has access to what:
Your account data, learning progress, and custom words are stored in Supabase's secure PostgreSQL database.
Handles all payment processing for Premium subscriptions securely. We never access or store your credit card details.
Provides secure login using your Facebook account. Facebook does not share your account password with Vocab Magnet.
Provides secure login using your Google account. Google does not share your account password with Vocab Magnet.
Protects our contact form from spam and abuse. GDPR-compliant and privacy-friendly.
Transmits your contact form messages securely to our support team.
Tracks how you use Vocab Magnet to help us improve the app. Completely cookieless and GDPR-compliant.
If police, government agencies, or courts legally require your data (e.g., via court order or subpoena), we may disclose it. We will notify you of such requests unless legally prohibited from doing so.
We retain all your learning data, custom words, and account information as long as your account exists. This data is essential for Vocab Magnet's functionality.
Once you delete your account, we immediately:
Umami analytics data is automatically deleted after 180 days. Server logs are retained for up to 30 days for security purposes.
Deleted data may persist in backups for up to 30 days, after which it's permanently removed.
As a user, you have the following rights:
You can request a copy of all data we hold about you.
You can correct or update your personal information at any time.
You can request deletion of your account and all associated data ("Right to be Forgotten").
You can request your data in a machine-readable format to transfer to another service.
You can object to processing of your data (we use minimal processing, so this mostly applies to analytics opt-out).
You can withdraw consent for data processing at any time by deleting your account.
To exercise any of these rights, contact us below. We'll respond within 30 days (as required by GDPR).
All data in transit uses HTTPS encryption. Data at rest in Supabase is encrypted with AES-256.
Supabase's Row-Level Security (RLS) policies ensure that you can only access your own data. Even if someone breaches the database, they see nothing without RLS policies.
We use industry-standard OAuth 2.0 with trusted providers (Google, Facebook). Your passwords are never stored on our servers.
While we do our best, we cannot guarantee 100% security. Risks include:
Vocab Magnet is not intended for children under 13. We do not knowingly collect data from children under 13.
If we learn that we've accidentally collected data from someone under 13, we will delete it immediately. Parents or guardians who believe their child has provided data to us should contact us right away.
Questions about this Privacy Policy or how we handle your data? We're here to help.
Company Location
Germany 🇩🇪
Response Time
We typically respond to privacy inquiries within 5-7 business days.
We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email or by updating the "Last Updated" date.
Your continued use of Vocab Magnet after changes become effective means you accept the updated Privacy Policy.