Privacy Policy

1. Scope

This Privacy Policy applies to the VocaPass website, account system, vocabulary learning surfaces, profile and plan setup, progress synchronization, support communications, payment entitlement workflows, and related operational systems.

2. Information you provide

We may collect your email address, password authentication data, account name if provided, support messages, billing questions, refund requests, correction requests, and other information you choose to submit through the service or by email.

3. Learning and account records

We store display-language preference, selected vocabulary set, learning period, pressure style, immutable plan terms, daily word assignments, word and sentence progress, review answers, scores, final-exam records, timestamps, entitlement state, and synchronization metadata to provide the learning service across devices.

4. Technical and device information

We may process browser type, device type, operating system, request metadata, coarse IP-derived country or region signals, referrer, page paths, error logs, performance logs, security events, cookie identifiers, local-storage keys, and service-worker cache metadata needed to operate, secure, and troubleshoot the service.

5. Payment information

Web purchases are processed by Stripe through tokenized checkout. VocaPass stores payment and entitlement identifiers such as checkout session ID, customer ID, payment intent ID, charge ID when available, amount, currency, paid-access start timestamp, refund status, provider event IDs, and entitlement dates. We do not store raw card numbers, expiry dates, CVC codes, PANs, or sensitive authentication data.

6. How we use information

We use information to authenticate users, provide vocabulary plans, synchronize progress, display selected-language learning content, process paid access, enforce trial and entitlement rules, determine refund eligibility, prevent abuse, investigate errors, answer support requests, maintain payment audit records, improve reliability, and satisfy legal or processor requirements.

7. Legal and business bases

Depending on your location, our reasons for processing may include performing the service contract, taking steps you request before purchase, legitimate interests in security and product operation, compliance with legal obligations, fraud prevention, dispute handling, and consent where required for optional features.

8. Sharing and processors

We may share necessary information with hosting providers, payment processors, logging and analytics providers, email or support tools, security vendors, professional advisers, and authorities when legally required. Stripe processes payment data under its own terms and privacy documentation. We do not sell personal information as a standalone business activity.

9. Cookies and local storage

VocaPass may use cookies, session identifiers, local storage, and service-worker cache storage for authentication, signed-in hints, API-base configuration, display-language caching, learning-state continuity, and static asset performance. Disabling these technologies may prevent account login or learning synchronization from working correctly.

10. Retention

We retain account, learning, entitlement, payment audit, refund, security, and support records for as long as needed to provide the service, enforce access terms, resolve disputes, comply with tax/accounting/legal obligations, and maintain security. Some technical logs are retained for shorter operational periods unless needed for investigation.

11. Security

We use safeguards appropriate for a digital learning service, including tokenized payment collection through Stripe, server-side entitlement checks, access-controlled operational records, and separation of raw payment data from VocaPass systems. No online service can guarantee absolute security.

12. International access and transfers

VocaPass may be accessed from multiple countries, and service providers may process data in countries where they operate. Production launch in a specific region may require additional localized notices, transfer mechanisms, or consumer disclosures before marketing the service there.

13. Children and students

VocaPass is an educational vocabulary product and may be used by younger learners where permitted by law and account setup. Any school deployment, child-directed launch, parental-consent workflow, or jurisdiction-specific minor-user workflow requires the child-privacy approvals recorded in the product specification before production release.

14. Your privacy choices

You may contact support to request access, correction, export, deletion, restriction, objection, or review of account and learning records. Some records may need to be retained for payment, fraud prevention, tax, security, legal, or dispute-resolution reasons.

15. Communications

We may send transactional messages about account access, payment status, refunds, security, service changes, or support requests. Marketing communications, if introduced, must provide any legally required opt-out mechanism.

16. Policy changes

We may update this Privacy Policy to reflect product, legal, operational, payment-processing, or security changes. Material updates will be posted on this page with a new last-updated date.

17. Contact

For privacy requests, account questions, or data-protection concerns, use the Support page or email [email protected].