Privacy

Your collection and progress

The app saves collected words, practice results, review schedules, preferences, and recovery copies on your device. We do not upload this learning history. Your operating system may include it in a device backup, depending on your settings.

You can export your progress or delete it in the app’s You tab. Deleting progress also removes the app’s local recovery copies and turns off server checking. Copies you export or retain in a system backup must be managed separately.

Optional sentence checking

On supported devices, Verbrary can check a practice sentence using an on-device model. That check does not send your writing to our server. If checking is unavailable, you can continue without a score for that sentence.

Learners who indicate they are 13 or older may explicitly enable server checking in the You tab. When enabled, the app sends the target word, its part of speech and meaning, your sentence, a difficulty level, and the content language to Verbrary’s server over HTTPS through Cloudflare.

Our server runs the model and returns feedback. We do not save sentence requests or responses, include their contents in application logs, or use your sentences to train models. We do not send them to a separate commercial AI API. Please avoid names, contact details, or other personal information in practice sentences.

You can turn server checking off at any time. AI feedback can be mistaken; it is a practice aid, not an authoritative assessment.

Younger learners

The age step stores only whether the learner is 13 or older, not an exact age or birthday. Server sentence checking is unavailable to learners who indicate they are under 13. Their practice writing stays on the device.

Public word-pack updates remain available to all learners. Download requests do not contain sentences, an age, or learning history.

Connections and security

Requests to our website and API pass through Cloudflare. Connection information, including IP addresses and technical request information, is processed to deliver content and protect the service. Our API temporarily holds IP-based request counters in memory to limit abuse; it does not store sentence contents in those counters.

Optional server checking uses Apple App Attest to verify a genuine app instance. Apple and our server process an app-generated key identifier and attestation proof. Our server issues a short-lived access token containing an opaque identifier derived from that key. This is used for access control, not advertising or cross-app tracking.

We do not sell personal information. The site has no advertising or analytics scripts. Service providers may process technical information under their own policies: Cloudflare privacy policy and Apple privacy policy.

Questions and requests

Email vincent@vincenttoms.com with privacy questions or requests. If you contact us, we receive your email address and the information you choose to send, and use it to respond and resolve the request. Do not include a child’s personal details or private practice writing.

Changes to this policy will be posted here with a new effective date.