Privacy Policy

Your privacy is important to us. It is Vocabulary Master's policy to respect your privacy regarding any information we may collect from you across our website and services.

1. Information We Collect

We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and consent. We also let you know why we’re collecting it and how it will be used.

• Account Information: When you sign in with Google, we collect your email address, your name and your profile picture. Nothing else from your Google account. When you sign in with Apple, we collect an email address and, the first time only, your name; Apple sends no picture. If you choose Hide My Email, the address we receive is an Apple relay address. That address is the key to your account, so use Sign in with Apple on the website too to continue on a computer; we do not send email to it.
• Usage Data: We automatically collect data on how you interact with our platform (e.g., study habits, performance) to personalize your learning experience and improve our algorithms.
• Tour language and Chinese meanings: When you create an account we record the language the welcome tour was shown in (English or Chinese). When you tap 中文 to see a word's Chinese meaning, we record the word and the day on your account, and we count the tap without your identity. Both go with your account if you delete it.
• Where you came from: If you open the website from a link we post on social media (our Instagram profile, our Facebook Page, our Threads profile, our YouTube channel, or an answer we wrote on Dcard), a cookie remembers the source for 30 days, and when you sign up we record the source name on your account (just "ig", "fb", "th", "yt" or "dc", nothing about your social media account). A second cookie remembers whether the link came in our reply to your comment or from our profile, and that word ("reply" or "bio") is recorded and deleted the same way. Link-preview robots are not counted and get no cookie. With each click we also count the kind of device (just "iPhone", "Android" or "desktop", from the browser's user agent, not tied to you), and a tap on the "install the app" link, or on a sign-in button (with which one, Apple or Google), is counted the same way. We use it only to see which channels bring learners and which app to offer. It is deleted with your account.
• Comments with our keyword (社群留言關鍵字): If you comment "Master" under one of our posts on Instagram, Facebook, Threads or YouTube, we reply once with a link to the website, in public under your comment; we do not send you a message. We reply only to people who wrote the keyword, and only once per post. To avoid a second reply we keep the comment's id, the platform and the day; we do not keep your name, your account name or what you wrote. Write to the address in section 9 with the platform and the post, and we delete the record.
• Subscription Information: Vocabulary Master Pro is bought in the Android app through Google Play. Google takes the payment and holds the payment details; we never see or store a card number, and the website sells nothing. To know which account is Pro we use RevenueCat, a subscription service in the United States: we send it a random account identifier, and it sends back which plan is active, which store it came from and when the period ends. Your email address, your name and your learning record are not sent to it. We keep the plan, the store, the start date and the renewal date on your account for as long as the account exists, so the app knows what you have paid for. If you are one of our founding testers, we keep the date your free Pro ends on your account, and it is deleted with the account. The tester group is a Google Group: Google holds its member list under Google's policy, and as its owner we see the members' email addresses.
• Questions about a word: On a practice card you can type a question about that word, and a stuck card can show you a memory hook. The question, the word and its meaning are sent to Anthropic (the maker of Claude, in the United States) to write the answer; your email, your name and your learning record are not sent. We do not store the question or the answer. We keep on your account only how many questions you asked today and the day, so the free limit works, and the memory hook is kept on the word, not on you. Anthropic keeps API inputs for a short period under its own policy and does not train on them. It is deleted with your account.
• On your phone only: The mobile apps' daily reminder (on or off, and the time) is stored on your device and never sent to us.
• Chrome extension: The extension sends us the word you ask it to look up, exactly as searching on the website does, and nothing else from the page you are reading. When you double-click or select a word on a page, the extension reads that one word in your browser to show its meaning; it does not read, keep or send the rest of the page, and you can turn this off in the extension, everywhere or on one site. To save a word to your queue it needs a key, which you create yourself on the connect page: the key lives in the extension's storage on your computer, and we keep only a one-way hash of it. Making another key replaces the old one, which is how you disconnect the extension.

2. How We Use Your Information

We use the collected information for various purposes:

• To provide and maintain our Service.
• To analyze your learning progress and adapt the Spaced Repetition algorithms to your needs.
• To communicate with you, including sending technical notices, updates, security alerts, and support messages.
• To detect, prevent and address technical issues or fraudulent activities.

3. Data Storage and Security

We retain collected information for as long as necessary to provide you with your requested service. What data we store, we’ll protect within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification.

4. Sharing Your Information

We don’t share any personally identifying information publicly or with third parties, except when required to by law, or with trusted service providers who assist us in operating our website, conducting our business, or serving our users (e.g., payment processors, hosting services), so long as those parties agree to keep this information confidential.

5. Third-Party Links

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies.

6. Your Rights

You are free to refuse our request for your personal information, with the understanding that we may be unable to provide you with some of your desired services. You have the right to access, update, or delete the information we have on you.

7. Deleting Your Data

You can delete your account yourself, at any time: open Account, choose Delete my account and confirm. That removes your account and your whole learning record at once, including any Chrome extension key, and asks RevenueCat to delete its record of your subscription. If you cannot sign in, follow the steps on our Delete Your Account page. The word data itself is shared content and holds nothing about you.

Deleting your account does not cancel a paid subscription: Google Play holds that, so cancel it there first, under Subscriptions. Google keeps its own record of the purchase under Google's policy.

8. Children

Vocabulary Master is exam preparation for learners aged 13 and over. It is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us and we will delete it.

9. Contact

Questions and requests about your data: aa.studio.focus@gmail.com.

10. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "lastUpdated" date.

Changelog

• 2026-03-16: Initial publication of Privacy Policy to comply with Merchant of Record requirements.
• 2026-09-13: Named what Google sign-in provides, the device-only reminder setting, how to delete your data, the age policy and a contact address, for the Android app on Google Play.
• 2026-09-20: Named what Sign in with Apple provides, including Apple's relay address, for the iOS app on the App Store and the website.
• 2026-09-22: Replaced the payment processor Paddle with Google Play and RevenueCat, named what is sent to RevenueCat and what is kept, and said that deleting an account does not cancel a Google Play subscription.
• 2026-09-23: Named the source cookie set by links we post on social media and the source name kept on the account.
• 2026-09-23: Named what the Chrome extension sends and the key it uses.
• 2026-09-26: Said what the Chrome extension reads when you double-click a word on a page, and how to turn that off.
• 2026-09-27: Added Threads and Dcard to the places a source link can come from, and said link-preview robots are not counted.
• 2026-10-03: Said that a click on a source link, and a tap on the install-the-app link, count the kind of device.
• 2026-10-08: Named the tour language recorded at sign-up and the Chinese-meaning taps.
• 2026-10-08: Said that a tap on a sign-in button is counted the same way, and named the founding-tester end date and the tester Google Group.
• 2026-10-10: Named the question box and the memory hook on practice cards, what is sent to Anthropic for them, and that only a daily count is kept.
• 2026-10-11: Named the one reply to a comment with our keyword and the comment id we keep, added YouTube to the source links, and said that a reply link is told apart from a profile link.