Privacy Policy

Last updated: December 2025

1. Data Controller

2. What Data We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Display name (optional)
• Account creation date

2.2 Practice Data

When you use WortHeld, we store:

• Word lists you create or generate
• Practice session history
• Spelling results and feedback
• Practice duration and timestamps

2.3 Handwriting Images

When you take photos of your handwritten work:

• Images are temporarily processed by our AI service to analyze your spelling
• For registered users, images may be stored to display in your feedback history
• Guest users' images are not permanently stored

2.4 Technical Data

We automatically collect:

• Device type and operating system
• App version
• Language preference
• Error logs (for troubleshooting)

3. How We Use Your Data

We use your data to:

• Provide the spelling practice service
• Analyze your handwriting and provide feedback
• Save your progress and word lists
• Improve our AI models and service quality
• Send important service updates (if you opt in)
• Process subscription payments

4. Third-Party Services

We use the following third-party services:

4.1 Firebase (Google)

We use Firebase for:

• User authentication
• Database storage (Firestore)
• Image storage (Cloud Storage)
• Cloud functions for AI processing

Firebase Privacy Policy: https://firebase.google.com/support/privacy

4.2 Google Gemini AI

We use Google's Gemini AI to:

• Analyze handwriting in photos
• Check spelling and provide corrections
• Generate word definitions and examples
• Generate age-appropriate word lists

Google AI Privacy: https://ai.google/responsibility/principles/

4.3 RevenueCat (for subscriptions)

We use RevenueCat to manage subscriptions. They process:

• Subscription status
• Purchase history
• Anonymous device identifiers

RevenueCat Privacy Policy: https://www.revenuecat.com/privacy

5. Data Retention

• Account data: Retained until you delete your account
• Practice sessions: Retained until you delete them or your account
• Handwriting images: Retained with your practice sessions
• Guest data: Stored locally on your device only

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Delete your account and all associated data
• Portability: Export your data in a machine-readable format
• Object: Object to certain processing of your data
• Restrict: Request restricted processing

To exercise these rights, use the Settings page in the app or contact us at info@quick-deals.eu.

7. Children's Privacy (COPPA)

8. Data Security

We protect your data through:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest (Firebase security)
• Access controls and authentication
• Regular security reviews

9. International Transfers

Your data may be processed in:

• European Union (primary data storage)
• United States (Firebase, Google Cloud services)

Transfers to the US are protected by Standard Contractual Clauses (SCCs) and Google's compliance with data protection frameworks.

10. Cookies and Local Storage

We use browser local storage to:

• Remember your language preference
• Remember your theme preference (light/dark)
• Store guest session data
• Remember age verification status

We do not use tracking cookies or third-party advertising cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email.

12. Contact Us

13. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.