16Word (“we”, “us”) is a vocabulary-learning app available on the web and as iOS and Android apps. This policy explains what we collect, why, and the choices you have. We collect only what we need to run and improve the app and to see which of our own ads bring new learners. We never sell your personal data, we never show ads inside 16Word, and on the website Google’s analytics and advertising cookies are set only if you allow them.
Information we collect
Account — your email address and a securely hashed password (and an optional display name) so you can sign in and sync across devices.
Learning data — your progress: levels, streaks, mastered and pending words, answers, and test results. This powers spaced repetition and your stats.
Preferences — chosen languages, currency, and sound settings.
Diagnostics — if a crash occurs, limited technical error information (via Sentry) to help us fix bugs. No advertising identifiers.
Optional analytics (website only, opt-in) — if you accept Analytics in the cookie banner, usage statistics (which pages and features are used) through our own events and Google Analytics, which sets cookies such as _ga, to improve the app. Off by default, never used to show you ads, and never active in the mobile apps.
Optional advertising measurement (website only, opt-in) — if you accept Advertising in the cookie banner, the Google Ads tag may set cookies such as _gcl_au, and we keep the identifier of the Google ad click that brought you (see “Where you came from”), so we can tell which of our own ads lead to sign-ups and subscriptions. Off by default and never active in the mobile apps.
Where you came from — when you create an account, we record the campaign tags in the link that brought you to the website (utm_source, utm_medium, utm_campaign, utm_term, utm_content — for our Google ads, the campaign and the search keyword), the page you landed on and the name of the website that sent you. They are remembered on your device between visits (for up to 30 days) only if you accepted Analytics or Advertising. The ad-click identifier Google adds to links from its ads (gclid, gbraid or wbraid) is kept with your account only if you accepted Advertising.
Payment status — your plan and a payment reference. Card details are entered with the payment provider, never stored by us.
Voice recordings (website) — when you answer with the microphone on the website, or tap “Say it aloud”, we keep the recording of your final attempt for each item when it was graded right (an answer graded wrong is not kept), with the answer it was for. Nothing is recorded unless you press the microphone or “Say it aloud”, and the iOS and Android apps do not keep your voice. People we invite to help train our speech recognition also read words and sentences aloud on 16word.com/record, with their consent (date and version), whether they are a native speaker, and — only if they choose — an age band, voice type and accent region.
The Google tag before you choose, and if you decline: on the website the Google tag (Google Tag Manager, Google Analytics and Google Ads) runs in Consent Mode v2 with every signal denied. In that state it sets no cookies, stores nothing on your device and removes ad-click identifiers from what it sends; it only sends Google cookieless signals (for example that a page was viewed or a purchase happened), which Google uses for aggregated statistical modelling of how its ads perform. Like any web request, these reach Google with your device’s IP address and browser type; none of it is used to show you ads.
How we use it
To provide the learning experience and sync your progress across your devices.
To process subscriptions and keep your plan up to date.
To send account and lifecycle emails (e.g. welcome, reminders, trial ending). You can unsubscribe from non-essential emails at any time.
To keep the service secure and to fix problems.
To see which of our own ads and links bring learners who go on to practise and subscribe — sign-ups, practice and payments counted per campaign and keyword. If you accepted Advertising and came through one of our Google ads, our server reports your first payment on the website (its time, amount and currency, with the ad-click identifier — never your name or email) to Google Ads, so the purchase is credited to that ad.
To keep our sales figures complete: when you buy a plan on the website, our server tells Google Analytics that a purchase happened (plan, price, currency and an order reference). This is sent whatever you chose in the cookie banner; it carries no name or email, and is linked to your Google Analytics cookie if you accepted Analytics, otherwise to a code derived from your account.
Voice recordings: only to improve the quality of 16Word — in particular our own speech recognition and pronunciation checking. They are stored privately, never played to other learners, never published and never sold; for training they are linked only to a random speaker code, not to your name or email. For learners this rests on our legitimate interest in improving 16Word, as stated in the Terms you accept: it is on by default, and you can object at any time by switching it off in Account → My voice recordings, where you can also listen to and delete any or all of your recordings. Invited contributors record with their explicit consent and manage their recordings on 16word.com/record. Deleting your account deletes your recordings too.
Service providers we use
Supabase — database, authentication, and secure storage of your account and progress.
Stripe — payment processing for web purchases.
Apple App Store / Google Play (via RevenueCat) — payment processing for in-app purchases on mobile.
SendGrid — sending account and lifecycle emails.
Sentry — crash and error reporting.
Netlify — hosting of the web app.
Google (Tag Manager, Analytics, Ads) — on the website only: usage statistics with your Analytics consent, ad-conversion measurement with your Advertising consent, and the cookieless signals and purchase signal described above.
Access & correction — view and edit your account details in the app.
Delete your account — you can permanently delete your account and associated data at any time from Account → Delete account. This removes your personal data from our systems.
Email preferences — unsubscribe from non-essential emails using the link in any email.
Cookie choices — on the website, accept or decline Analytics and Advertising, and change your mind at any time, via Cookie settings in the home page footer or on our Cookie & Storage Policy page.
Payment management — manage or cancel your subscription from your account (web) or your Apple/Google account (mobile).
Data retention
We keep your data while your account is active. When you delete your account, your personal data is removed; limited payment records may be retained where required by law.
Children
16Word is not directed to children under 13, and we do not knowingly collect personal data from them.
International transfers & security
Your data may be processed on servers located in other countries by the providers above. We use encryption in transit and industry-standard safeguards to protect it.
Changes
We may update this policy; material changes will be reflected here with a new date.