VocabKit

Privacy Policy

Last updated: July 2026

This Privacy Policy describes how watermelonKode ("we," "us," or "our") collects, uses, and shares information across the VocabKit waitlist (vocabkit.ca and watermelonkode.com) and the VocabKit mobile application (the "App"), available on Android and iOS.

If you have any questions about this Privacy Policy, please contact us at vocabkit@watermelonkode.com.

If you're joining our waitlist

Before the App launches, this site collects a small amount of information to run the waitlist:

Your email address, submitted through our waitlist form, which is processed by LaunchList, a third-party waitlist service.
Basic, aggregated website analytics (such as page views and country-level location), collected through Cloudflare Web Analytics. This does not use cookies and does not identify you individually.

We use your email only to notify you when VocabKit launches and to occasionally share short pre-launch updates. We do not sell your email address or share it with advertisers. You can unsubscribe at any time using the link in any email we send, or by emailing us at the address above.

We rely on LaunchList and Cloudflare to run the waitlist; see their respective privacy policies for how they handle data on our behalf.

1. Information We Collect (App)

VocabKit is designed to work without requiring you to create an account or provide personal information such as your name or email address. Instead, the App uses anonymous authentication to identify your device.

1.1 Information Collected Automatically

Anonymous user identifier: A randomly generated ID (via Firebase Anonymous Authentication) used to associate your learning progress and credit balance with your device installation. This identifier is not linked to your name, email, or any other directly identifying information.
Vocabulary learning data: Your practice history, word packages accessed, spaced-repetition scheduling data (e.g., which words you've learned, review intervals, and performance), and in-app credit balance.
Diagnostic and usage data: Basic app usage and crash/performance data collected through Firebase (e.g., Firebase Crashlytics or Analytics, if enabled), used to diagnose bugs and improve app stability.
Device and technical information: Device type, operating system version, and app version, used for compatibility and troubleshooting purposes.

1.2 Information We Do Not Collect

We do not require or knowingly collect your name, email address, phone number, or physical address. We do not access your contacts, photos, or files stored on your device.

2. How We Use Information

We use the information described above to:

Provide and maintain the App's core functionality (vocabulary practice, spaced-repetition scheduling, and progress tracking)
Manage your in-app credit balance and unlock vocabulary content packages
Diagnose technical issues and improve app performance and stability
Provide AI-generated vocabulary content and features (see Section 3)
Communicate important updates about the App, where applicable

We do not sell your information to third parties.

3. Third-Party Services

VocabKit relies on the following third-party services to operate. Each service may process limited data as described below, subject to its own privacy policy.

3.1 Firebase (Google)

We use Google Firebase for:

Authentication (anonymous sign-in)
Cloud Firestore and Cloud Storage (storing your learning progress, credit balance, and vocabulary package content)
Cloud Functions (processing credit transactions and other server-side logic)
App Check (verifying that requests to our backend come from a genuine, unmodified copy of the App, to prevent abuse)
Remote Config (delivering configuration values to the App)

Learn more: Google Privacy Policy

3.2 Google Gemini (via Firebase AI Logic / Vertex AI)

Some vocabulary content and AI-assisted features are generated using Google's Gemini AI models. Requests sent to generate this content may include the vocabulary word or context needed to generate a definition, example, or related content. These requests are processed by Google's AI infrastructure and are not linked to your personal identity.

3.3 On-Device AI Processing

Certain AI features may run entirely on your device using an on-device model (via the Cactus SDK). When these features are used, no data is sent to any server — all processing happens locally on your device.

3.4 Translation Services

Word translations may be provided using platform-native translation services (Google ML Kit Translation on Android, or Apple's Translation framework on iOS 18+), which may process text locally on your device or through the platform provider's own infrastructure, subject to Google's or Apple's respective privacy policies.

3.5 Advertising (AdMob) — Planned Feature

In future versions, VocabKit may display advertisements and offer rewarded ads (where you can earn in-app credits by watching an ad) through Google AdMob. AdMob may collect an advertising identifier and other data to serve and measure ads. When this feature is introduced, this Privacy Policy and the App's in-app consent flow will be updated accordingly, and you will be able to manage ad personalization through your device settings.

Learn more: Google AdMob Privacy & Security

3.6 Subscriptions and Purchases (RevenueCat) — Planned Feature

In future versions, VocabKit may offer subscriptions or one-time purchases managed through RevenueCat, which processes purchase and subscription data on our behalf via the Apple App Store and Google Play billing systems. RevenueCat does not receive your name, email, or payment card details — this is handled directly by Apple/Google.

Learn more: RevenueCat Privacy Policy

4. Data Storage and Security

Your data is stored on Google Firebase servers. We use industry-standard security practices, including:

Server-side validation of all data-modifying operations (credit transactions, progress updates) through Cloud Functions — the App itself cannot directly write to our database
Firebase App Check to help ensure that only genuine copies of the App can access our backend services
Data transmitted between the App and our servers is encrypted in transit (HTTPS/TLS)

While we take reasonable steps to protect your information, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

5. Data Retention and Deletion

We retain your anonymous learning data for as long as you continue using the App. If you uninstall the App or wish to have your data deleted, you may contact us at vocabkit@watermelonkode.com with your request, and we will delete the data associated with your anonymous user identifier within a reasonable timeframe, except where retention is required for legal, security, or fraud-prevention purposes.

Because VocabKit does not collect personally identifying information, we may ask you to provide your anonymous user ID (available in the App's settings, if applicable) to help us locate and delete your data.

6. Children's Privacy

VocabKit is not directed at children under the age of 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us at vocabkit@watermelonkode.com so we can take appropriate action.

7. Your Rights

Depending on your location, you may have rights under applicable data protection laws (such as the GDPR in the European Economic Area, or the CCPA in California), including the right to access, correct, or delete your data, and the right to object to certain processing. To exercise these rights, contact us at vocabkit@watermelonkode.com.

8. International Users

VocabKit is available to users internationally, and your information may be processed and stored on servers located outside of your country of residence, including in the United States, through our use of Google Firebase and Google Cloud infrastructure.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the App after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

watermelonKode
Email: vocabkit@watermelonkode.com
Website: www.vocabkit.ca

This policy is written in plain language to reflect VocabKit's current and planned data practices as accurately as possible. It is not a substitute for legal advice. We recommend it be reviewed periodically by a qualified privacy lawyer as the App evolves, particularly regarding Canada's PIPEDA and the rules of other regions VocabKit serves.