Privacy Policy

WordGate (“we,” “our,” “us”) is an app that blocks your distracting apps until you finish a short daily word-practice session. This policy explains exactly what data WordGate handles, where it goes, and what control you have over it. We've written it in plain English. If anything is unclear, email us at mediareddawn@gmail.com.

1. What we collect

WordGate has no accounts, no sign-up, and no login. We do not collect your name, email, phone number, address, photos, contacts, calendar, health data, or location. The app has no user-generated content features.

Here is every piece of data the app sends off your device, broken down by the service that receives it.

AppsFlyer — install attribution

AppsFlyer tells us which marketing channel brought you to the app (for example, which ad or link you clicked). It collects:

• Advertising identifier (IDFA on iOS) — only if you grant permission via Apple's App Tracking Transparency prompt
• Vendor identifier (IDFV on iOS)
• Device model, OS version, locale, and app version
• Install source, session starts, and app opens

Under Apple's definition, this counts as “tracking.” That's why iOS shows you the ATT prompt. You can revoke this permission at any time in Settings → Privacy & Security → Tracking. AppsFlyer shares this data with our ad networks only for attribution measurement — not to build ad profiles for other advertisers. See AppsFlyer's privacy policy.

PostHog — product analytics

PostHog helps us understand which parts of the app work and which parts confuse people. It collects:

• An anonymous distinct_id generated on your device — not tied to any account, because there are no accounts
• Event data: app launches, onboarding steps completed, lessons started and completed, paywall views, subscription started or restored, lock and unlock events
• Event properties: streak count, word index, lesson outcome (correct/incorrect), daily-goal tier
• Auto-captured device properties: device type, OS, locale, app version

PostHog data is not shared with ad networks and is not linked to your identity. See PostHog's privacy policy.

Supabase — vocabulary backend

Supabase hosts the vocabulary and quiz content. The app sends read-only queries to fetch words and quiz distractors. The only parameters included are language code, proficiency level, and word IDs — all non-identifying. There are no user accounts in Supabase, and the app never writes user data back to it.

Apple App Store / Google Play — subscriptions

Subscription payments are handled entirely by Apple's StoreKit and Google Play Billing. We never see your credit card number. We receive only the subscription status (active, expired, refunded) needed to unlock premium features.

2. What stays on your device

The following is stored locally on your phone via AsyncStorage or the system frameworks, and is never transmitted to our servers:

• App-blocking selection. On iOS, your chosen apps are stored through Apple's FamilyActivityPicker and Screen Time / Family Controls APIs. On Android, selection is stored locally and enforced via an accessibility overlay. We never see which apps you picked or how long you were locked out.
• Onboarding preferences. Target language, proficiency level, daily goal, and wake-up time.
• Progress. Lock state, streak count, word completion progress.
• Offline cache. Downloaded vocabulary so lessons work without signal.

Notifications

WordGate schedules local reminders on your device (streak reminders and lock-time nudges) using expo-notifications. We do not register a push token and we do not send notifications from a server. Nothing about your notifications leaves the device. You can disable notifications in your phone's system settings at any time.

3. How we use the data we do collect

• Product analytics (PostHog): understanding onboarding drop-off, feature adoption, and which lesson flows need work.
• Attribution (AppsFlyer): measuring which marketing channel installed the app, so we know where to spend ad budget.
• App functionality (Supabase): delivering the vocabulary and quiz content for your selected language.
• Subscription entitlements (Apple/Google): unlocking premium content when your subscription is active.

4. Who we share data with

• AppsFlyer and the ad networks listed in its attribution flow, for attribution measurement only.
• PostHog, as our analytics processor.
• Supabase, as our backend host for vocabulary queries.
• Apple and Google for subscription processing through the App Store and Google Play.

We do not sell your personal information. We do not share data for behavioral advertising beyond install attribution. We do not embed third-party ad SDKs in the app.

5. How long we keep data

• AppsFlyer: retained per AppsFlyer's default policy (currently up to 24 months for attribution data). See AppsFlyer's retention terms.
• PostHog: retained per PostHog's default policy (currently 7 years for event data on their standard plans). See PostHog's retention terms.
• Supabase: no user-identifying data is stored.
• Local device data: kept until you delete the app, at which point your phone wipes it.

6. Your rights (GDPR)

If you are in the European Economic Area, the UK, or Switzerland, you have the following rights under the GDPR and UK GDPR:

• Access — ask what data we have about your device.
• Deletion (“right to be forgotten”) — ask us to delete your PostHog and AppsFlyer records.
• Portability — ask us to export the event records associated with your device identifier.
• Objection — object to processing based on our legitimate interests.
• Withdraw consent — revoke ATT tracking permission on iOS at any time.
• Lodge a complaint — contact your local data protection authority.

Because WordGate has no accounts, requests need to be matched to a device. To make a request, email support@wordgate.reddawn.app from any address and include your PostHog distinct_id (found in the app under Settings → About → Debug Info) or your AppsFlyer ID. We'll action the request within 30 days.

7. Your rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to know what personal information we have collected about you in the last 12 months.
• Right to delete personal information we've collected.
• Right to opt out of sale or sharing. We do not sell personal information. We share device identifiers with AppsFlyer for install attribution, which some interpretations of the CCPA treat as “sharing for cross-context behavioral advertising.” To opt out, decline the ATT prompt on iOS, or email us with the opt-out request.
• Right to non-discrimination — we will not charge you more or degrade the app if you exercise your rights.

Send CCPA requests to support@wordgate.reddawn.app.

8. App Tracking Transparency (iOS)

On first launch (and any time we re-prompt), iOS shows a system dialog asking whether WordGate can track you across apps and websites owned by other companies. If you tap Ask App Not to Track, AppsFlyer will not receive your IDFA. You can change this decision any time in Settings → Privacy & Security → Tracking → WordGate.

9. Children's privacy

WordGate is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect data from minors. If you believe a child has used the app and you want their device data removed, email us and we'll delete the associated PostHog and AppsFlyer records.

10. International data transfers

AppsFlyer, PostHog, and Supabase process data in the United States and other jurisdictions. Where required, we rely on Standard Contractual Clauses or equivalent safeguards for transfers out of the EEA and UK.

11. Cookies

The WordGate mobile app does not use cookies. This section applies to our website (wordgate.reddawn.app) only, which uses minimal first-party cookies for basic site operation and no third-party advertising cookies.

12. Changes to this policy

If we change how the app handles data, we'll update this page and change the “Last updated” date at the top. Material changes (new SDKs, new data categories) will also be highlighted in-app on the next launch.

13. Contact

For privacy questions, data requests, or anything else:

• Email: mediareddawn@gmai.com