Privacy Policy

Vocabulum is a free app made and run by a private individual, not a company. That person is the controller of your personal data. In this policy, “we” means the developer of Vocabulum.

For any question about your data, write to privacy@vocabulum.app.

When you open Vocabulum, Telegram passes the app some data about your account. Telegram signs this data, and our server checks the signature before trusting it.

• From your Telegram account: your Telegram ID, first and last name, username and language. We do not store your profile photo and do not receive your phone number.
• Your learning: answers to exercises, which words you know and when to review them, sessions, progress in listening and in the Cyprus exam track, your streak, points, goals and achievements.
• Settings: interface language, time zone, and whether and when you want reminders and a word of the day.
• Friends: friend requests, invitations and your list of friends.
• Purchases in Telegram Stars: what you bought, the amount in Stars and the Telegram payment ID. Telegram processes the payment, so we never see your card details.
• Technical data: IP address, browser or app version, connection type and request timing, recorded in the server logs and, when something goes wrong, in the error log.
• Protection data: request counts per account and blocked IP addresses, which protect the learning materials from mass downloading.

The app also keeps your settings and answers that have not been sent yet on your device, so that a dropped connection does not lose your work.

When you visit this website, the web server records the usual technical data: IP address, the page requested, browser and time.

Google Analytics 4 loads only after you allow analytics. It measures visits and clicks to Telegram using cookies and browser identifiers. We do not send it your Telegram ID, name, learning answers or message text. Advertising features are disabled. The legal basis is your consent (Art. 6(1)(a) GDPR).

You can use every page without analytics. Choose “No analytics” in the banner, or change your choice later using “Analytics settings” in the footer. Withdrawing consent stops collection and removes the website’s Analytics cookies. It does not undo earlier processing.

Your choice is saved on this device for 180 days. Analytics cookies (_ga and _ga_*) are set for up to 180 days, without extending their lifetime on each visit. After your choice expires we ask again. Data retention in Google is controlled by the GA4 property settings; this is separate from the lifetime of cookies on your device.

• To run the app for you: your account, progress, review schedule, friends, weekly ranking and purchases. The legal basis is the performance of our agreement with you (Art. 6(1)(b) GDPR).
• To keep the service safe and working: server and error logs, protection of the learning materials, blocking abuse. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).
• To send reminders and a word of the day, if you turn them on. The legal basis is your consent (Art. 6(1)(a) GDPR); you can turn them off in the app settings at any time.

We do not sell your data, do not use it for advertising and make no automated decisions about you with legal or similarly significant effects. The one automatic restriction is the protection against mass downloading: if an account requests materials in bulk, its access is limited. If you think this happened by mistake, write to us.

• Telegram, the platform Vocabulum runs on. It passes your account data to the app, delivers messages from the bot and processes payments in Stars. Its own privacy policy applies.
• Hetzner Online GmbH, our hosting provider in Germany. The database, logs and backups are stored on its servers in the European Union.
• Google. The app and this website load fonts from Google Fonts, and while doing so your browser sends your IP address to Google. If you allow website analytics, Google also receives visit and event data through Google Analytics 4. See Google’s privacy policy.

Telegram and Google may process data outside the European Union under their own safeguards. Nobody else receives your data. The audio and pictures in the app were made in advance, so your data is not sent to any speech or image service.

• In the weekly ranking, other learners see your points, level and streak under a random Greek nickname, not under your name.
• Your friends see your Telegram name and your results.
• Anyone who knows your Telegram username can send you a friend request.

• Account, progress and purchases: while you use Vocabulum. You can ask us to delete them at any time.
• Error log with IP addresses: 14 days.
• Web server logs: 14 days.
• Database backups: 14 days. After your account is deleted, your data disappears from the backups within 14 days.
• IP address blocks: as long as the block is in force.

Under the GDPR you can ask us to:

• send you a copy of your data, also in a machine-readable format;
• correct inaccurate data;
• delete your account and everything linked to it;
• restrict processing, or stop processing that is based on our legitimate interest.

You can withdraw your consent to reminders at any time in the app settings. There is no delete button in the app yet: to delete your data, write to privacy@vocabulum.app from any address and include your Telegram username or ID. We may ask you to confirm that the account is yours, and we will reply within one month.

If you believe we process your data unlawfully, you can complain to the data protection authority of your country. In Cyprus this is the Commissioner for Personal Data Protection; the authorities of other EU countries are listed by the European Data Protection Board.

Vocabulum works inside Telegram and is meant for people who are old enough to use Telegram under its terms. We do not knowingly collect data about younger children. If you believe a child has given us personal data, write to us and we will delete it.

Data travels over encrypted connections, the server checks Telegram’s signature before it trusts any account data, and only the developer has access to the server and the database.

As the app develops, we add learning materials and improve features. If the way we process data changes, we will reflect that in this policy.

When this policy changes, we update the date at the top of the page. We will announce significant changes in the app before they take effect.