Wordbee — Privacy Policy

Effective date: 18 July 2026  ·  Last updated: 18 July 2026

This Privacy Policy explains what Wordbee ("we", "us", the "app") collects, why, who processes it on our behalf, and the choices you have. Wordbee is a vocabulary-learning app that shows you one word a day.

We built Wordbee to be private by design: no ads, no advertising identifiers (no GAID/IDFA), no selling of data, and no tracking of you across other companies' apps or websites. You can start using Wordbee without creating an account.

Who we are

Wordbee is operated by Onto Mars Productions PTE LTD, a company registered in Singapore at 32 Pekin Street, Singapore 048762.

We are the organisation responsible for your personal data — the “data controller” under European law, and the organisation with obligations under Singapore’s Personal Data Protection Act 2012 (PDPA). Data-protection queries go to our Data Protection Officer at [email protected].

What we collect, and why

1. An anonymous device identifier

On first launch the app generates a random anonymous ID and stores it on your device. It is not your name, email, phone number, or advertising ID — it is a random value used to keep your analytics events consistent (so we can, for example, measure whether a feature helps people learn). This ID stays the same even if you later link an account.

• Purpose: product analytics; joining your events into one anonymous profile.
• Legal basis (where GDPR applies): legitimate interest in improving the app / your consent where required.

2. Product-analytics events (via PostHog)

We record how the app is used — which screens are viewed, which features are tapped, onboarding progress, review activity, streaks, and purchase events — to understand what helps people learn and to fix problems. This is processed by PostHog, our analytics provider.

By strict design rule, analytics events contain only identifiers, category labels, counts, prices, and durations. They never include:

• your email, name, or any contact details,
• the words you save, definitions, examples, or any free-text content (words are referenced only by a numeric ID),
• your precise or approximate location,
• any advertising identifier.

PostHog also collects standard device/technical properties (e.g. platform, app version, device model, coarse locale) for segmentation and debugging.

• Purpose: product improvement, understanding retention and activation, diagnosing issues.
• Not used for tracking across other apps or companies, and not sold.

3. Optional account email (only if you link an account)

Wordbee works anonymously. If you choose to link an account with Apple, Google, or email, we receive and store the identifier needed to sign you in — typically your email address (or an Apple/Google account identifier). We use it only to authenticate you and sync your data across your devices. Linking is entirely optional.

• Purpose: authentication and cross-device sync.
• Legal basis: performance of a contract (providing the account you asked for).

4. Purchase and subscription data (via RevenueCat)

If you buy a Wordbee subscription or one-time purchase, the transaction is processed by the app store (Google Play) and managed through RevenueCat, our subscription-management provider. We (and RevenueCat) receive purchase metadata — which product was purchased, whether a trial is active, purchase and renewal status, price tier, and currency — tied to your anonymous ID and the store's purchase token.

We never receive or store your full payment-card number or bank details. Payment is handled entirely by Google Play; we only see whether a purchase succeeded and what entitlement it grants.

• Purpose: unlocking premium features, restoring purchases, subscription analytics.
• Legal basis: performance of a contract.

What we do not collect

• No advertising ID (no GAID / IDFA); no cross-app or cross-site tracking.
• No precise or approximate location.
• No contacts, photos, microphone, or camera data.
• No selling of personal data to anyone.
• No ads or ad networks in the app.

Third-party processors

We share the limited data above only with the service providers that make the app work, each acting as our processor under their own terms:

Provider	Role	What it processes	Privacy policy
PostHog	Product analytics	Anonymous ID, usage events, device/technical properties	posthog.com/privacy
RevenueCat	Subscription management	Anonymous ID, purchase/subscription status, product & price	revenuecat.com/privacy
Apple (Sign in with Apple)	Optional login	Account identifier / email, only if you link Apple	apple.com/legal/privacy
Google (Google Sign-In & Google Play)	Optional login; billing	Account identifier / email if you link Google; purchase processing via Play	policies.google.com/privacy

We do not sell your data or share it with advertisers or data brokers.

International transfers

Our providers may process data on servers in the United States or other countries. PostHog offers EU and US hosting; the app's configured ingestion region is chosen by the operator. Where required, transfers rely on appropriate safeguards (such as the providers' Standard Contractual Clauses).

Data retention

• Analytics events (PostHog): retained for the analytics provider's standard retention period and then aggregated or deleted; we keep event-level data only as long as it is useful for product analysis. (Set your PostHog project retention here, e.g. "13 months," before publishing.)
• Purchase/subscription data (RevenueCat): retained for the life of the subscriber record and as required for tax, accounting, and fraud-prevention purposes.
• Account email: retained until you delete your account or ask us to remove it.
• On-device data (your saved words, streak, settings, the anonymous ID): stored on your device and removed when you uninstall the app or clear its data.

Your choices and rights

• Use the app anonymously — you never have to give us an email.
• iOS tracking prompt (ATT): on Apple devices you'll see Apple's App Tracking Transparency prompt. Because we use no advertising identifiers, the app works fully whatever you choose; your answer only governs whether any cross-app identifiers could be attached (we attach none).
• Access, correction, deletion, and portability: subject to applicable law (including the GDPR and CCPA/CPRA), you may request a copy of, correction of, or deletion of your personal data, and object to or restrict certain processing. We do not "sell" or "share" personal information as those terms are defined under US state privacy laws.
• How to exercise them / delete your data: email [email protected] with your request. We will delete your account email and ask our processors to delete the analytics and purchase data associated with your anonymous ID, plus use the in-app account/delete options where available.

Children's privacy

Wordbee is a general-audience educational app and is not directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us and we will delete it.

Changes to this policy

If we change what we collect or how we use it, we will update this page and the "Last updated" date above. Material changes will be reflected in the app or store listing.

Contact

Questions, requests, or complaints — including data-access and deletion requests — go to [email protected].

Onto Mars Productions PTE LTD
32 Pekin Street, Singapore 048762