Privacy Policy

Last updated: May 21, 2026

1. Introduction

This Privacy Policy explains how Andrii Kovalchuk, a private entrepreneur registered in Ukraine ("we," "us," or "our"), collects, uses, stores, and protects your personal data when you use the Voca mobile application ("App").

By using the App, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the App.

For questions, contact us at: support@getvoca.app

2. Data We Collect

2.1 Account Data

When you register, we collect:

• Full name
• Email address
• Password (stored as a cryptographic hash — never in plain text)
• Email verification status

2.2 Learning Data

Data you create while using the App:

• Flashcard decks (name, target language)
• Flashcards (word, translation, transcription, examples, notes, part of speech)
• Review history (ratings, review timestamps, learning state, spaced repetition metrics)
• Planned review schedules
• Learning preferences (target languages, UI language, timezone, daily card limit, reminder time)

2.3 Usage & Technical Data

Collected automatically during App use:

• Device type and operating system (iOS / Android)
• App version
• Crash reports, error logs, and diagnostic data (via Sentry — see Section 5)
• Usage events and interaction patterns (via PostHog analytics — see Section 5), which may be linked to your account and may include limited feature input metadata
• Device push notification token (for daily reminders)
• IP address (processed by server infrastructure and third-party services)

2.4 Subscription Data

• Premium subscription status
• Subscription tier and renewal date (managed by RevenueCat — we do not store payment card details)

3. How We Use Your Data

We do not use your data for advertising, profiling for marketing purposes, or selling to third parties.

4. Data We Share with Third Parties

We share data only with the service providers listed below, strictly to operate the App. We do not sell your personal data.

All third-party providers acting as data processors are bound by data processing agreements where required under GDPR.

5. Third-Party Services — Additional Details

Sentry: We use Sentry for crash and error reporting. Sentry is configured to collect personally identifiable information (PII), which may include your user ID and device identifiers. This helps us diagnose issues affecting your account specifically. Sentry is covered by a Data Processing Agreement under GDPR.

Google Gemini: When you request AI-generated word information (definitions, examples, transcriptions), the word or phrase you submit is sent to Google's Gemini API. Do not submit sensitive personal information through this feature.

PostHog: We use PostHog to understand how users interact with the App in order to improve it. Analytics data may be linked to your account through identifiers such as your user ID and account properties like your name and email. In limited cases, analytics events may also include short user-submitted inputs needed to understand feature usage, such as the word and selected language you submit when requesting AI-generated word information. We do not send your full flashcard library to PostHog.

6. Data Storage and Security

Your data is stored on our server hosted by OVHcloud in Frankfurt, Germany (European Union). Local copies of your data are also stored on your device using encrypted SQLite storage.

We implement the following security measures:

• Passwords are stored using cryptographic hashing (never plain text)
• Authentication uses JWT tokens stored in device secure storage (expo-secure-store)
• All data transmission uses HTTPS/TLS encryption
• Account tokens are invalidated on logout from all devices

No method of transmission or storage is 100% secure. If you suspect a security breach, contact us immediately at support@getvoca.app.

7. Data Retention

When you delete your account, all your personal data is permanently deleted from our servers in a cascading deletion. Residual copies in third-party services (e.g., Sentry logs) are subject to those services' own retention policies.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — request correction of inaccurate data
• Deletion — delete your account and all associated data directly in the App (Settings → Delete Account), or by contacting us
• Restriction — request that we limit processing of your data
• Objection — object to processing based on legitimate interests
• Portability — request your data in a portable format (currently fulfilled manually via email request)

To exercise any of these rights, contact us at support@getvoca.app . We will respond within 30 days.

If you are located in the EU/EEA and believe we have violated your privacy rights, you have the right to lodge a complaint with your local data protection authority.

9. Push Notifications

Daily reminder notifications are opt-in. You can disable them at any time in the App (Settings → Daily Reminder) or through your device's notification settings. Disabling notifications does not affect your ability to use the App.

10. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at support@getvoca.app and we will delete it promptly.

11. International Data Transfers

Our server is located in Germany (EU). If you access the App from outside the EU, your data may be transferred to and processed in the EU and in the USA (by our third-party providers). Where required, such transfers are governed by Standard Contractual Clauses or equivalent safeguards under GDPR.

12. Cookies and Tracking

The App itself does not use cookies. Our website (getvoca.app) is a static page and does not use cookies or tracking technologies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above and notify you via the App or email. Continued use of the App after changes constitutes acceptance of the revised Policy.

14. Contact

For privacy-related questions or to exercise your rights:

Andrii Kovalchuk
Email: support@getvoca.app
Website: getvoca.app