Legal
Privacy Policy
Effective September 29, 2026
The short version
- You don’t have to sign up. The app creates an anonymous account the first time you open it. If you choose to sign in with Apple or Google, we receive your name and email from them. We never ask for a password.
- You can delete your account and its data in the app.
- We keep your learning progress on our servers so the app can work.
- We use analytics and crash reports to understand how the app is used and to fix problems.
- If you get a certificate, the name you type for it is shown on a public verification page.
- Payments go through Apple or Google. We never see your card details.
- We don’t sell your personal information, and the app shows no ads.
1. Who we are
WordRange (“WordRange”, “we”, “us”) makes the WordRange app for iPhone and Android and runs the website at wordrange.app. The app helps you find your English vocabulary size and learn the words just past it. We are responsible for the personal information described in this policy.
This policy covers the app, the website and the certificate verification pages at wordrange.app/verify. To reach us, email info@wordrange.app.
2. What we collect
Your account
The first time you open the app, it signs you in anonymously with Firebase Authentication, and a random user ID is created. That ID is what we store your data under. It also links your subscription status (see “Purchases” below). The ID itself doesn’t contain your name or contact details.
Signing in with Apple or Google
Signing in is optional. If you choose Continue with Apple or Continue with Google under Account in the app, that Apple or Google account is linked to your WordRange account, so you can get your progress back on another device. Firebase Authentication then stores the identifier Apple or Google gives us for you, your email address and, if they share it, your name. With Apple, you can choose to hide your email; we then receive a relay address that forwards to you. The app shows your name and email on its Account screen, and your name is suggested for your certificates. We never receive your Apple or Google password.
Learning progress
To show your progress and pick the right words, we store:
- your estimated vocabulary size, how it was measured (the first test or a retest) and when;
- your starting word range and the range you’re working on;
- the words you marked as “learning” or “already knew”;
- your quiz results for each word and each part, and your review schedule;
- when these records were created or updated.
We don’t store your individual answers to the placement test or to a retest, only the resulting estimate.
Certificate exams and certificates
If you take a certificate exam, we store the exam session: the questions, your answers, your score, whether you passed and when the exam started and ended. We also record how many attempts you’ve made at each milestone and when.
When you enter a certificate name, either when you claim a certificate or in Settings under Profile, we store it under your account and print it on every certificate issued to you. It is the only thing you type into the app, and it must be 2 to 60 characters. If you have a certificate issued, we also store the milestone, your score, the issue date and the credential ID. See section 5 for what is public.
Notifications
When you first open the app, it stores your device’s push token under your account, whether or not you allow notifications. Notifications appear only if you allow them. If you start a free trial, we also store the date the trial ends and the app’s language, so we can remind you before it ends. Daily practice reminders are scheduled on your device and don’t go through our servers.
Settings kept on your device
Your theme, daily goal, reminder time, native language, whether you’ve finished onboarding and which cards you’ve answered today are stored on your device, and in your device’s backup if you use one. When you change your theme, daily goal or native language, that choice is also sent to our analytics service (see below).
Usage and device information (analytics)
We use Amplitude to understand how people use the app. The app sends Amplitude events such as:
- opening the app, screens viewed and onboarding steps;
- placement results (your estimated vocabulary size) and your choice for each card (which identifies the word by its rank);
- quiz and review results, and certificate exam outcomes (milestone, pass or fail, score);
- paywall views, the plan chosen and whether a purchase or restore succeeded (never payment details);
- notification permission, notifications received or opened, and settings changes such as theme, daily goal and native language.
With each event, Amplitude receives information about your device and connection: device model and manufacturer, operating system and version, app version, language, mobile carrier and IP address. Amplitude uses the IP address to estimate your country, region and city. It also receives device identifiers: on iPhone, the identifier Apple assigns to apps from the same developer (IDFV); on Android, an ID generated by the app, the App Set ID and, where your device makes it available, the Google advertising ID. Amplitude also records when app sessions start and end.
We don’t send Amplitude your certificate name, your account ID, your push token, or the name and email from Apple or Google.
The app also includes the Firebase (Google Analytics for Firebase) software library. It can automatically record basic events, such as the first time the app is opened, app sessions and updates, in-app purchases and notification interactions, together with an app-instance ID and device identifiers.
Crash reports
When the app crashes or hits a serious error, Firebase Crashlytics sends us a crash report. A report includes the technical details of the error, your device model, operating system and app version, and an installation identifier. Crashlytics also records basic app session information. Crash reports aren’t linked to your account ID.
Purchases
Subscriptions are bought through the App Store or Google Play. We use RevenueCat to manage them. RevenueCat receives your account ID and the purchase information that Apple or Google provide, such as product, dates, trial status and renewal status. Our servers check your subscription with RevenueCat before issuing a certificate or sending a trial reminder. RevenueCat’s software also receives basic technical information about your device, such as its operating system, app version and store region. We never receive your name, address or payment card details from Apple, Google or RevenueCat.
Measuring our ads (iPhone)
We advertise WordRange in other apps and on the web. After onboarding, the iPhone app asks whether it may track you, using Apple’s App Tracking Transparency prompt. If you allow it, the app shares the iPhone advertising identifier (IDFA) with Google Analytics for Firebase and RevenueCat, so we can learn which of our ads led to an install or a purchase. We use it only to measure our ads, not to show you personalized ads, and the app itself shows no ads. If you don’t allow it, the app never reads the IDFA. Apple’s Search Ads attribution, which uses no advertising identifier, works either way.
When you contact us
If you email us, we receive your email address and whatever you write. The app’s “Help & feedback” email fills in the app version and your operating system and version to help us troubleshoot.
Website visitors
Server logs
Our servers log technical events, such as when an exam is started or submitted or a certificate is issued. These logs include your account ID, the milestone, your score and the credential ID. We use them to run the service and fix problems.
Website visitors
wordrange.app is hosted on Google’s Firebase Hosting and Cloud Run. Like most web servers, they log requests, including your IP address, browser (user agent) and the page requested, such as a verification link. Our web pages load fonts from Google Fonts, which gives Google your IP address and browser details. The website doesn’t use cookies or analytics. The verification page checks your browser type on your device to show the right app store link.
What we don’t collect
The app doesn’t ask for your location, contacts, camera or microphone. It never reads your photos. The only photo permission it asks for is permission to add share cards and certificates you choose to save. On iPhone, the app reads the advertising identifier (IDFA) only if you allow tracking when it asks (see “Measuring our ads” above).
3. Features that run on your device
- Translations. Word translations into your native language are made on your device by Google ML Kit. The words themselves aren’t sent anywhere to be translated. To do this, the app downloads language models (about 30 MB each) from Google, over Wi-Fi or mobile data. ML Kit may send Google limited usage and performance information, as described in Google’s ML Kit terms.
- Pronunciation. Words are spoken by your device’s built-in text-to-speech engine. Some engines can use online voices, depending on your device settings.
- Sharing and saving. Share cards, certificate images and PDFs leave your device only when you share them through your phone’s share sheet or save them to your photos. If you tap “Add to LinkedIn”, LinkedIn opens with your certificate’s title, issue date, credential ID and link filled in (not your name).
4. How we use information
- To provide the app: save your progress, choose your words, run placement tests, quizzes, reviews and certificate exams, issue and display certificates and unlock Pro features.
- To send notifications you’ve allowed, such as daily reminders and trial reminders.
- To understand how the app is used and improve it.
- To find and fix crashes and bugs.
- To keep exams fair, and to prevent cheating, fraud and abuse.
- To answer your messages and requests.
- To comply with the law and enforce our Terms of Use.
Whether you pass a certificate exam is decided automatically: the server scores your answers against fixed pass marks, which are described in the Terms of Use. If you think a result is wrong, contact us.
5. Certificates and the public verification page
Each certificate has a public web page at wordrange.app/verify/ followed by its credential ID. The certificate itself carries this link and a QR code for it. The page is public: anyone who opens it can see the name on the certificate, the milestone, your exam score, the issue date and the credential ID. No sign-in is needed.
- When the link is shared in social or messaging apps, their link previews can show your name.
- The page asks search engines not to index it, but we can’t guarantee that every service will respect this.
- If you change your certificate name, the new name appears on all your certificates. Cached copies of the page can show the old name for a few minutes.
Enter a name you’re comfortable having on a public page. To have a certificate taken down, email us (see section 9).
7. Where information is processed
We and our main providers are based in the United States. Our servers run in Google Cloud’s United States region, and analytics are stored in Amplitude’s United States data center. If you use the app from another country, your information will be transferred to and processed in the United States and other countries where our providers operate. Their data protection laws may differ from yours. Where the law requires, we rely on appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses offered by our providers.
8. How long we keep information
- Your account, including the name and email from Apple or Google, is kept until you delete it.
- Progress, exam records and certificates are kept until you delete your account or ask us to delete them. Certificates stay publicly verifiable until they are deleted or revoked.
- Trial reminder details are deleted once the reminder is sent or no longer needed. We keep only the end date of the trial we reminded you about, so we don’t remind you twice.
- Push tokens are kept under your account until your data is deleted. We also remove tokens our notification service reports as no longer valid.
- Server and website logs are kept for a limited period, typically 30 days.
- Crash reports are kept by Crashlytics for up to 90 days.
- Analytics data is kept as long as it is useful for understanding the app, subject to Amplitude’s retention settings.
Deleting the app removes the data stored on your device, but not the data on our servers. On iPhone, the anonymous sign-in can survive deleting and reinstalling the app on the same device. On Android, your device’s backup may restore app data to a new phone. If you signed in with Apple or Google, signing in again brings your progress back.
9. Your choices and rights
In the app and on your device
- Turn notifications on or off in your phone’s settings. Turn the daily reminder on or off in the app’s Settings.
- Change your certificate name in Settings, under Profile.
- Turn usage analytics (Amplitude and Google Analytics for Firebase) off or on in the app: Account › Privacy & data › Share usage analytics. Crash reports are still sent.
- On iPhone, you can allow or stop tracking at any time in Settings › Privacy & Security › Tracking.
- On Android, you can reset or delete your advertising ID in your device settings.
Access, correction and deletion
You can delete your account in the app, whether or not you signed in with Apple or Google: open Account, then Privacy & data, then Delete account (Delete my data if you haven’t signed in). This deletes your account, your progress, exam records and certificates, whose verification pages stop working. For an Apple account, it also revokes WordRange’s access to your Apple ID. Deleting your account doesn’t cancel a subscription. How to delete your account has the details.
You can also email info@wordrange.app to ask for a copy of your data, to correct it, or to delete it, including any certificates. If your account is anonymous, include anything that helps us find your data, such as the credential ID of a certificate you hold. We may ask for more information to confirm the request comes from you. If we can’t link a request to any data, we’ll tell you. You can also ask us to delete analytics data about your device.
If you are in the EEA, the UK or Switzerland
We process your information on these legal bases:
- to perform our contract with you (providing the app, your progress, exams, certificates and subscriptions);
- our legitimate interests in understanding and improving the app, fixing errors, keeping exams fair and preventing abuse;
- your consent, where required, such as for showing push notifications (you can withdraw it at any time in your phone’s settings);
- compliance with legal obligations.
You have the right to access, correct, delete, restrict or object to our processing of your information, and to data portability. You can also complain to your local data protection authority.
If you live in a U.S. state with a privacy law
Depending on your state, you may have the right to know what personal information we collect, use and disclose; to get a copy of it; to correct or delete it; and to opt out of its sale, its sharing for targeted advertising or profiling. We don’t sell or share personal information in those ways. We won’t treat you differently for using your rights. You or an authorized agent can make a request by emailing us. If we turn a request down, you can appeal by replying to our answer.
10. Children
WordRange is for people aged 13 and over, and it isn’t directed at children under 13. We don’t knowingly collect personal information from children under 13. If you think a child under 13 has used the app, email us and we will delete their information. In some countries, people under 16 (or another age set by local law) need a parent’s or guardian’s permission to use the app.
11. Security
Information travels between the app, our website and our servers over encrypted connections (HTTPS). It is stored with established providers that protect their systems. No method of transmission or storage is completely secure, though, so we can’t guarantee absolute security.
12. Changes to this policy
We may update this policy. When we do, we’ll change the date at the top. If a change is significant, we’ll let you know in the app or on this website before it takes effect.
13. Contact us
For questions or requests about privacy, email info@wordrange.app.