Privacy policy

Last updated: 18 August 2026

This policy explains what Vocarium collects when you use the app, why we collect it, who we share it with, and the choices you have. Vocarium is a vocabulary review and flashcard app. By creating an account or using Vocarium without an account you agree to the practices below.

1. Who we are

Vocarium is operated by the Vocarium team. If you have any question about this policy, your data, or a request about your rights, write to us at hello@vocarium.app. We answer data requests within 30 days.

2. Data we collect

  • Account data — email address, password (stored hashed by our authentication provider), username, display name and profile photo if you add one. If you sign in with Google we receive your email, name and profile picture from Google.
  • Content you create — languages, folders, sets, flashcards, notes, imported files and anything you choose to share publicly through Media, Study Groups or a shared link.
  • Study data — review scores, review dates, levels, streaks, XP, burning-word status and session preferences.
  • Technical data — device type, browser, operating system, language, approximate location derived from your IP address, and server log data.
  • Usage data — which screens and features you use, so we can find bugs and decide what to improve.
  • Communications — messages you send through the contact form, plus your optional marketing e-mail opt-in.
  • Payment data — if you buy Premium, the payment is handled by our payment provider. We receive the subscription status and invoice details, never your full card number.

Guest mode: if you use Vocarium without an account, your folders, sets and study history are stored only in your browser's local storage on that device. We do not receive them until you create an account and choose to move them to the cloud.

3. Why we use your data and our legal basis

  • To provide the service (contract) — accounts, saving your sets, scheduling reviews, syncing between devices.
  • To keep the service safe and working (legitimate interest) — abuse prevention, security monitoring, debugging, backups.
  • To improve Vocarium (legitimate interest) — aggregated, non-identifying usage analysis.
  • To send you optional marketing e-mail (consent) — only if you opt in.
  • To show advertising (legitimate interest for non-personalised ads, consent for personalised ads where the law requires it) — see section 6.
  • To comply with legal obligations — accounting, tax and lawful requests.

4. Sharing your data

We never sell your personal data. We share it only with service providers that help us run Vocarium, and only for that purpose:

  • Cloud hosting, database, authentication and file storage providers.
  • Google, if you choose Google sign-in.
  • AI providers that power dictionary suggestions, text-to-speech and text extraction from imported images or PDFs.
  • E-mail delivery and customer support tools.
  • Payment providers, when Premium billing is active.
  • Advertising partners, as described in section 6.
  • Authorities or advisors when we are legally required to disclose information.

Content you deliberately publish — a set shared to Media, a public profile, a shared link, or a creator page — is visible to other users or to anyone with the link. Do not put private or sensitive information into shared content.

5. Cookies and similar technologies

We use local storage and cookies that are strictly necessary to keep you signed in and to remember your preferences (theme, study settings, guest data). We may also use analytics and advertising cookies or identifiers. Where consent is required, we ask for it through a consent banner before any non-essential cookie is set, and you can change your choice at any time.

6. Advertising

Vocarium is free to use and may show advertising inside the app, including banner and in-content formats. Advertising may be delivered by third-party ad networks and measurement partners.

  • Ad partners may collect device identifiers, IP address, coarse location, ad interactions and app usage signals to serve, cap, measure and prevent fraud in advertising.
  • Where required by law, personalised advertising is only enabled after you give consent; otherwise you will see non-personalised (contextual) ads.
  • You can withdraw or change your advertising consent at any time from the app's privacy settings.
  • We do not use sensitive categories of data for ad targeting, and we do not show personalised ads to users we know to be children.
  • Premium Pro subscribers use Vocarium without advertising.

7. International transfers

Our providers may process data outside your country, including in the United States and the European Union. When data leaves the EEA/UK/Türkiye we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

8. How long we keep data

  • Account and content data: while your account exists.
  • After you delete your account: removed or anonymised within 30 days, except backups which roll off within 90 days.
  • Support messages: up to 24 months.
  • Billing records: as long as tax law requires (usually up to 10 years).
  • Guest data: stays on your device until you clear it.

9. Your rights

Depending on where you live (GDPR, UK GDPR, Türkiye's KVKK, CCPA and similar laws) you can request access to your data, correction, deletion, a portable copy, restriction of or objection to processing, and withdrawal of consent. Most of this is available directly in Settings; for anything else write to hello@vocarium.app. You also have the right to complain to your local data protection authority.

10. Children

Vocarium is not intended for children under 13 (or under the minimum age in your country, such as 16 in parts of the EEA) without the consent of a parent or guardian. If we learn that we hold data from a child without valid consent, we delete it.

11. Security

Data is transmitted over encrypted connections and stored with row-level access rules so that only you (and people you share with) can reach your content. Passwords are hashed. No system is perfectly secure, so please use a strong, unique password.

12. Changes to this policy

If we make a material change we will update the date at the top and notify you in the app or by e-mail before the change takes effect.

13. Contact

Questions or requests: hello@vocarium.app

Payments and seller identity

Vocarium is operated by Babur Aydogan, who is the data controller for the data described in this policy.

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. When you buy a subscription, your name, email address, billing address, tax details and payment method are collected and processed directly by Paddle — we never see or store your card details. Paddle uses that data to take payment, manage your subscription, issue invoices, meet tax obligations, prevent fraud and handle refunds.

Paddle passes back to us only what we need to link the subscription to your account: subscription and customer identifiers, plan, status and billing period dates.

Back home