Words Keeper mobile privacy policy
Updated 5 October 2026. This policy covers the Words Keeper mobile app and its home-screen widgets.
Who is responsible
The service is operated by Aliaksei Kavaliou.
Information used by the service
When you register, the service processes your email address, a password hash and account identifier. It stores language preferences, language packs, known words and learning progress so that your account works across devices. Your password is not stored as plain text. Network requests also expose technical information such as your IP address to the servers and infrastructure handling them.
Purpose
Account and learning data are used to provide the service you request. Technical information is used to operate and protect the service and investigate failures. Support correspondence is used to respond to your request. Where GDPR applies, service delivery is based on performance of the service agreement; security and support are based on legitimate interests, subject to your applicable rights.
On your device and in widgets
The app stores session credentials using the operating system’s secure storage. Local storage holds preferences and the current widget card. The widget receives a separate limited, expiring permission to advance cards or mark words as known. It does not receive your password or account refresh token. Widget contents may be visible to anyone who can see your home screen.
Providers and tracking
Hosting, network and email infrastructure process the information needed to deliver requests, protect the service and send account emails. The mobile app does not include advertising or cross-app tracking code. Links opened in an external browser, including the main website, may have separate cookie and privacy choices.
Retention and deletion
Account and learning records are retained while your account exists. You can permanently delete them through Settings → Delete account, with password confirmation. This deletes the account across the website and mobile app and ends its access to the service. Operational logs and any backup copies are separate from the live account database; contact the operator for their applicable retention and removal details. Records that must be retained by law are subject to those requirements.
Your rights
You may request access, correction, deletion or a portable copy of your personal data, and restriction of or objection to processing where applicable. Contact the operator using the support address. You may also complain to your local data protection supervisory authority. Request account deletion online or delete your account directly in the app; uninstalling the app does not delete your server account.