Privacy Policy
Effective: 29 August 2026 · Last updated: 29 August 2026
This policy explains how the WortPilot mobile and web app processes personal data. The data controller is Hakan Gök. You can contact us by email.
In brief: WortPilot contains no advertising network, tracking code or third-party analytics. If you use it without signing in, your learning data does not leave your device for WortPilot sync. If you choose to sign in and the account transport is configured in the release, your email, learning progress and app settings are stored so your progress can move between your devices.
1. Data we process
a) If you do not sign in
No personal data is sent to a server. Learning progress stays in storage on your device. Removing the app or clearing its site data also removes that local copy.
b) If you sign in with Google
| Data | Purpose |
|---|---|
| Email address, name and basic profile information | Identify your account and associate progress with the correct person |
| User identifier generated by Google | Keep your record separate from other users |
| Learning progress, including study dates, correct and incorrect answers, review schedule, session dates and duration, streak and app settings | Synchronise between devices and maintain your spaced-repetition schedule |
Learner-language setting (tr or en) | Keep your chosen interface and meaning language consistent between devices |
WortPilot requests only your email address and basic profile from Google. It does not request access to Google Drive, contacts, calendar or similar services.
The learner-language setting is an ordinary product preference, not sensitive personal data. English and Turkish content catalogues are application assets and are not copied into your account record.
c) Data we do not process
- Location
- Contacts, photos, files or device content
- Advertising identifiers or cookie-based tracking
- Payment or card details
2. Where data is stored
- On your device: progress is stored locally first and the app can work offline.
- In the cloud, only if you sign in and sync is configured: a copy is stored using Supabase infrastructure in the European Union. Row-level security restricts each account to its own record.
The public marketing site is not a separate sync client. If account transport is not configured in a particular build, learning and language selection continue locally.
3. Third parties
| Provider | Purpose | Shared data |
|---|---|---|
| Account sign-in (OAuth) | Sign-in information; learning progress is not sent to Google | |
| Supabase | Authentication and data storage | The data listed in section 1(b) |
| Hugging Face | Downloading the optional offline German voice model | The download request only; it starts with your explicit consent and sends no learning content |
Personal data is not sold or shared for advertising.
4. Speech
- Offline voice (recommended): the voice model runs on your device. Text being spoken is not sent online.
- Browser/system voice: if selected, spoken text may be processed by your operating system or browser provider, such as Google. The app identifies this choice.
5. Retention
Data is retained until you delete it. Deleting your account permanently removes the cloud record.
6. Your choices
| Choice | How to use it |
|---|---|
| View and export your data | App → Settings → Data and backup → Export |
| Reset progress | App → Settings → Reset progress |
| Delete your account and cloud record | App → Settings → Delete my account, or use the account deletion page |
| Other requests or objections | Send an email |
7. Children
WortPilot is not directed to children under 13 and does not knowingly collect their data. If you become aware of such a record, email us so it can be removed.
8. Security
Connections use HTTPS and cloud records use row-level access rules. No internet transmission can be guaranteed to be completely secure.
9. Changes
If this policy changes, the last-updated date above will change. Material changes will also be communicated in the app.
10. Contact
For privacy questions, email us.