Privacy Policy — Wocably

Last updated: 12 July 2026

1. Who we are

Wocably is operated by Limund Ltd ("Wocably", "we", "us"), registered in the United Kingdom at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. Limund Ltd is the data controller for the personal data described in this policy. For anything privacy-related, contact [email protected].

This policy covers the Wocably mobile app and the wocably.com website.

2. Information we collect

Account information. Your email address, display name and a securely hashed password — or, if you sign in with Google or Apple, the identifier those services share with us.
Profile & preferences. Native language, English level (CEFR), preferred topics, daily word goal, reminder time, review mode and theme settings.
Learning activity. The decks and words you add, review results, streaks, XP, achievements, and stories you read — this is the core data that makes spaced repetition work.
Purchase information. Subscription status and transaction identifiers processed through the App Store or Google Play and our subscription provider (RevenueCat). Card numbers never reach our servers.
Device & technical data. Device model, operating system, app version, language, timezone, push notification token, and IP addresses in standard server logs.
Diagnostics. Crash reports and performance data collected through an error-monitoring service (Sentry) so we can fix problems.
Support messages. Anything you send us through feedback or support channels.

3. How we use your information

To provide the service: sync your decks, schedule reviews, track progress and keep your account working across devices.
To personalize learning: generate stories from the words you're studying and tailor coach suggestions to your review history.
To send the notifications you configure — daily reminders, achievements and story alerts. You control these in Settings, including quiet hours.
To process subscriptions and unlock Pro features you've purchased.
To fix bugs, monitor performance and improve features.
To respond to your support requests.
To protect the service against abuse and fraud.

We do not sell your personal data, and we do not show third-party advertising.

4. Legal bases

Under UK GDPR we rely on: performance of a contract (providing the app you signed up for), legitimate interests (security, diagnostics, service improvement), and consent (push notifications and any optional communications — withdrawable at any time in Settings or your device settings).

5. Who we share data with

We share data only with processors that help us run Wocably, under contracts that limit what they can do with it:

Google Firebase — authentication and push notification delivery.
RevenueCat — subscription management, together with Apple's App Store and Google Play, which handle payment itself.
Sentry — crash and error reporting.
Cloud hosting and email delivery providers — running our servers and sending transactional email (verification, password resets).

We may also disclose data where the law requires it, or as part of a corporate transaction such as a merger — in which case this policy continues to apply.

6. International transfers

Some processors operate outside the UK. Where data leaves the UK, we rely on adequacy decisions or standard contractual clauses to keep it protected to the same standard.

7. How long we keep data

We keep your data while your account exists. If you delete your account (Settings → Account), your personal data is deleted or anonymized within 30 days, except where the law requires us to keep specific records (for example, purchase records for tax purposes). Aggregated, anonymized statistics may be retained.

8. Your rights

You can ask us to:

access the personal data we hold about you,
correct inaccurate data,
delete your data,
export your data in a portable format,
restrict or object to certain processing.

Write to [email protected] and we'll respond within one month. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

9. Children

Wocably is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

10. Security

Data is encrypted in transit, passwords are stored hashed, and access to production systems is restricted and logged. No system is perfectly secure, but we treat your learning history with the same care as any other personal data.

11. Changes to this policy

If we make material changes, we'll notify you in the app or by email before they take effect, and update the date at the top of this page.

12. Contact

Limund Ltd · 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ · [email protected]