Operator and scope
Wordip is operated in South Korea by Jaeyun Kim, who is responsible for privacy requests at jaeyunkim0125@gmail.com. This policy covers the Wordip app and official website.
Using Wordip without an account
Without an account, words, meanings, sets, levels and notification settings remain on your device. We do not send guest word contents or word, set or level counts, device models or OS details for operational analytics. We do not collect advertising IDs, contacts, location, microphone recordings, keystrokes or activity in other apps. Update checks and network requests may involve communication data needed to deliver the service. Pronunciation uses your device’s speech engine. If the selected engine uses online voices, text to be spoken may be processed under that operating system or voice provider’s policy.
Account and sync
An email account uses your email, nickname, one-way password hash, account ID, sessions and sign-in/latest access times for account access, verification, sync and security. Server verification codes are hashed and expire after 10 minutes. Signing in stores words, meanings, sets and levels on the server for cross-device sync. We process these only to provide the selected features, not for advertising, data sales or AI training. If in-app purchases are offered, Apple processes payment; we may keep transaction ID, product, date and status for verification. We do not receive card details.
Optional usage statistics
Optional usage analytics is currently disabled on the server. Any future option is off by default and requires separate consent for a hashed random installation ID, first/last activity times, activity day and consent version/time. Signing in may link it to your account ID to avoid duplicate counts. Word contents and device details are excluded. Refusal does not affect words, quizzes or sync. Turning it off requests deletion of linked analytics, processed on the next connection if offline. Earlier records without confirmed consent are excluded from new metrics and are no longer used.
Retention and deletion
Accounts and synced data remain while the account exists and are removed from the operational database when you delete the account. Sessions expire within 30 days. If optional analytics resumes, daily activity is limited to the latest 30 days; installation and consent records are removed after withdrawal or 30 days of inactivity at the next daily cleanup. Legacy analytics and installation links without confirmed consent have been removed. Support messages remain only as needed to resolve the request. Purchase or dispute records required by law are kept separately only as necessary. Deleted data is no longer used by the normal service, but may temporarily remain in providers’ restricted disaster-recovery copies.
Processors and international processing
Cloudflare, Inc. processes hosting, database and network security; Resend (Plus Five Five, Inc.) sends verification emails you request. Necessary data is transferred over encrypted connections when you request account or sync services. Resend receives the recipient email and verification message; its default email-log retention is 30 days. Both companies are based in the United States. Cloudflare may process data on distributed infrastructure, including Japan; South Korea-only storage is not guaranteed. Provider materials below identify processing locations, subprocessors and safeguards. You may avoid international account, sync and verification processing by using local features without an account, or delete an existing account. International analytics processing stays disabled pending verification. Provider contacts: Cloudflare privacyquestions@cloudflare.com; Resend support@resend.com. Support emails you send may be received and stored by Gmail (Google LLC, United States), under that service’s safeguards and policy.
Security and administrator access
We use encrypted transport, password/code hashes, server-side authorization and restricted access. The admin console shows account identifiers, word/set counts, level summaries and storage status; word and meaning content access is blocked. Infrastructure providers may handle IP addresses and other communication data for essential delivery and security, not advertising tracking or fingerprinting. Administrative access and exports are logged for security.
Your rights
In Settings → Account you can change your nickname or delete the account; words can be exported or deleted in the app. Email us for access, correction, deletion, restriction, objection, withdrawal or a portable copy. We verify identity using only what is necessary. Deleting a server account does not remove device-only data or files you already exported. You may complain to your competent data protection authority.
Children and policy changes
Optional analytics is offered only to people aged 16 or older. We do not intentionally collect children’s account information without any parental authorization required locally. A guardian may contact us to request deletion. This policy was updated on 2026-10-22. Material changes to purposes or collection will be communicated and any necessary consent obtained separately.