Privacy Policy

2. How We Use Your Data and Legal Bases

Under the GDPR, we process your data on the following legal bases:

• To provide the Service (definitions, vault sync, study features, subscription management): performance of a contract.
• To generate anonymized, aggregated insights such as trending words: legitimate interest in improving and promoting the Service, using data that no longer identifies you.
• Product analytics: our legitimate interest in understanding which features are used so we can improve the Service, or your consent where applicable law requires it (for example, in the EEA, the UK and Switzerland). You can turn analytics off at any time.
• To communicate with you about your account, purchases, or support requests: performance of a contract and legitimate interest.
• To secure the Service, enforce fair-use limits, and prevent abuse: legitimate interest.

We do not sell your personal data. We do not use your personal data for third-party advertising.

3. How Definitions Are Generated

Definitions, translations, examples, and mnemonics are generated automatically. When you look up a word, the word and your language pair are sent to our servers and processed with the help of third-party cloud service providers acting on our behalf. We do not send your name, email address, or account identity with these requests. Our providers process this data only to deliver the Service and do not use it to advertise to you. Automatically generated content can contain mistakes; see our Terms of Service for details.

4. Shared Cache and Aggregated Data

To make the Service fast and affordable, definitions of commonly looked-up words are stored in a shared cache. Cache entries contain words and their definitions only. They are not linked to your identity.

If we publish "trending words" or similar insights, they are built from lookup counts aggregated by language pair. This data is anonymized and aggregated before use: it contains no account identifiers and no information about the websites where lookups occurred.

5. Data Sharing and Processors

We share personal data only with the service providers we need to run Fluent Tap:

• Google LLC / Google Cloud: authentication, database and cross-device sync, hosting and backend infrastructure, analytics, and automated generation of definitions and related content.
• Lemon Squeezy, LLC: payment processing, billing, tax handling, and subscription management, as merchant of record.
• Apple Inc. and Google (Play): if you subscribe through our mobile apps, the respective app store processes your payment under its own terms and privacy policy. Apple also provides Sign in with Apple and, in our iPhone app, the speech recognition used for voice input.
• Your web browser's maker (Google, Microsoft or Apple): if you use voice input on our website, your browser's built-in speech recognition turns your speech into text under that company's privacy policy.
• RevenueCat, Inc.: verifies in-app purchases and manages subscription status for our mobile apps.

We may also disclose data if required by law, or to protect the rights, safety, and security of Fluent Tap and its users.

6. International Transfers

Our infrastructure providers host data primarily in the United States. Where personal data of users in the European Economic Area, the United Kingdom, or Switzerland is transferred internationally, we rely on our providers' compliance mechanisms, including Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

7. Cookies and Analytics Consent

The Service uses:

• Strictly necessary cookies and local storage: to keep you signed in and make the Service work. These do not require consent.
• Analytics: analytics identifiers that help us understand feature usage (Google Analytics, without an advertising identifier; the words you look up are never sent). On the website, analytics runs only after you accept it in the cookie banner. In the iPhone app, analytics runs only after you give consent in the EEA, the UK and Switzerland; elsewhere it is on by default. You can change your choice at any time: in the cookie settings on the website, and in Profile, Account & data, Share usage data in the app.

We do not use advertising cookies.

8. Your Rights

Depending on your location, you have the right to access, correct, and delete your personal data, to object to or restrict certain processing, and to withdraw consent at any time. We honor these rights for all users regardless of location:

• Access and rectification: view and edit your saved words, mnemonics, and account details directly in the app.
• Erasure: delete your account at any time in the app settings. See Section 9.
• Portability: request an export of your vocabulary data by contacting support@fluenttap.app. Pro users can also export their vault from the app.
• Complaint: if you are in the EEA or UK, you can lodge a complaint with your local data protection supervisory authority.

To exercise any right you cannot complete in the app, email support@fluenttap.app. We respond within 30 days.

9. Data Retention and Deletion

We retain your data while your account is active. If you delete your account, your personal data, including your vocabulary vault and study progress, is permanently deleted from our production systems immediately, and from backups within 30 days. This action cannot be undone.

Anonymized cache entries and aggregated statistics that contain no link to your identity may be retained after account deletion.

Payment and tax records held by Lemon Squeezy are retained by Lemon Squeezy in accordance with its legal obligations.

10. Security

We protect your data using industry-standard measures, including encrypted connections (TLS), access rules restricting your data to your own account, server-side enforcement of access controls, and secrets management for our backend services. No method of transmission or storage is completely secure, but we work to protect your information and will notify affected users of any breach as required by law.

11. Children

Fluent Tap accounts are for users aged 13 and older (or the higher minimum age required in your country). Fluent Tap is not directed at children under 13, and we do not knowingly collect personal data from children under 13. Parents and guardians are welcome to use their own accounts to explore vocabulary together with their children. If you believe a child has provided us personal data through their own account, contact support@fluenttap.app and we will delete it.

12. Changes to This Policy

We may update this policy as the Service evolves. We will post the updated policy here with a new "Last updated" date, and for material changes we will notify you in the app.