Privacy Policy
Updated: October 22, 2026
This policy describes the iOS version of Wordlio (VocabFlow), developed by Tatsiana Knysh, including optional online learning features and Wordlio Plus.
1. Your dictionary and device data
Wordlio does not require a separate Wordlio account. Your dictionary, saved phrases, translations, notes, learning progress and preferences are stored on your device using Apple system frameworks. Some app data may be included in device backups managed by your Apple settings. Import and export are initiated by you; the app does not upload imported files to its backend.
2. Photos and speech
Text recognition from photos uses Apple Vision on your device. The app does not send your photos to our server or to an AI provider. Recognized text may subsequently be sent for translation or an AI feature when you use that feature.
With microphone and speech-recognition permission, Apple Speech converts speech to text. Depending on the device, language and Apple service availability, recognition may use Apple servers. Wordlio does not send voice recordings to its backend or OpenAI. Text transcriptions are handled like other text you enter. You can change these permissions in iOS Settings.
3. Translation
When you request online translation, the app sends the selected text and source and target languages through our Cloudflare-hosted backend to DeepL. Translation text can include personal information if you enter it. See DeepL privacy information.
4. Optional AI features and your consent
Before sending content to OpenAI, Wordlio asks for explicit in-app consent. AI conversations, reply assistance, example generation and mistake exercises send the relevant text, conversation history, selected vocabulary, exercise answers, learning level and interface language through our Cloudflare-hosted backend to OpenAI. Only the information relevant to the request is included. Do not enter information you do not want processed by these services.
You can decline or withdraw AI consent in Wordlio Settings. This blocks new OpenAI requests, while the dictionary and ordinary reviews remain available. Withdrawing consent cannot recall content already transmitted. The backend does not maintain a conversation-history database. OpenAI requests use response storage disabled (store:false); this does not disable the provider’s security or abuse-monitoring retention. See OpenAI privacy information.
5. Purchases and lesson allowances
Apple processes subscription payments. We do not receive payment card details or your Apple Account password. To verify a subscription, restore access and administer free lessons, Wordlio sends Apple-signed app and subscription transaction data to our backend. Apple also sends signed subscription-status notifications to that backend.
We store a hash derived from the App Store app transaction identifier, subscription expiry and revocation information, an original subscription transaction identifier, trial and monthly lesson counters, and temporary lesson records and access tokens. The hash is a pseudonymous identifier, not a promise of anonymity. These records let us apply the same allowance across installations; deleting or reinstalling the app does not reset free lessons. Payment or purchase data is not sent to OpenAI or DeepL.
6. Retention and technical processing
Temporary lesson records expire after seven days and are removed when the associated account next accesses the service. Old monthly counters are pruned after approximately 100 days when that account next accesses the service. Trial counters and the latest subscription record are retained to administer access and prevent repeated claims of the free allowance.
Cloudflare and our online providers process requests and may handle IP addresses and other technical connection information for delivery, security and service operation. Their retention and international processing practices are described in their policies. See Cloudflare privacy information and Apple privacy information. The developer does not sell your information. Information may be disclosed when required by applicable law.
7. Advertising, analytics and reminders
The iOS app does not include advertising, advertising-identifier collection or third-party analytics SDKs. Learning reminders are local notifications scheduled on your device. Permission for reminders is separate from the service-to-service subscription notifications described above.
8. Your choices and requests
You can edit or delete words and saved phrases in the app, export your dictionary, reset learning progress, withdraw AI consent, and control camera, microphone, speech and notification permissions. Uninstalling the app normally removes local data; copies in device backups are controlled by your Apple settings. Uninstalling does not cancel an Apple subscription or remove backend allowance records.
Contact us for privacy or deletion requests. We may need information to identify the relevant pseudonymous service record and assess any retention required for access administration or applicable law. Never send your Apple password or payment card details.
9. Children and changes
We do not knowingly seek personal information from children. If you believe a child has provided personal information through the app, contact us. This policy may be updated as features or processing practices change; the updated date appears above.
10. Contact
Tatsiana Knysh
4sup.emailmehere@gmail.com