Wordlings privacy policy

Effective 8 November 2026. Version 6. Version 6 adds the website newsletter. Version 5 adds the optional parent account, syncing progress across devices, purchases through RevenueCat, and opt-in marketing email to parents. Version 4 renamed the app from Lumo to Wordlings. Version 3 added word lists and power-ups. Version 2 added problem reports and the detail of learning progress.

Wordlings helps children learn English words through short daily missions and games. It is made for children and their grown-ups. This policy says what Wordlings keeps on your device, what it sends to us and why, and how to delete it.

The short version

Wordlings works fully without an account. Without one, your child’s progress stays on your device.
A grown-up can choose to create a parent account with an email address, to keep progress in step across your devices and to restore it on a new device. This is the only time Wordlings sends your child’s learning progress to us.
Family Plus is bought through Apple. Our purchase provider, RevenueCat, receives the purchase details so the app knows what you’ve bought.
Wordlings has no ads, no analytics and no tracking. We never sell or share information for advertising.
Your child’s name stays on your device unless you choose to show it on your other devices.
You can delete the account, and everything we hold, in the app at any time.

What Wordlings saves on your device, and why

What	Why	When it is saved
Your child’s first name or nickname	So Wordlings can greet your child by name	During setup, if you type a name (it can be left empty)
A recording of a grown-up saying the name (optional)	So the greeting uses the right pronunciation	Only if a grown-up taps Record during setup and allows the microphone
Age group and word level	To choose words and games that fit	During setup and the optional word check
Learning progress: words met; each answer, how long it took, the date and time zone, and whether VoiceOver, Switch Control or Reduce Motion was on; game scores; power-ups; the garden	To plan each day’s review and show progress	While your child plays
Problem reports (optional): what your child chose (for example “The picture looks wrong”) and a picture of the screen at that moment, which may show their name	So a problem with a word, picture or sound can be found and fixed	Only if your child taps the flag button and picks a reason
Word list (optional): the words from a file a grown-up chooses, and the file’s name. The file itself isn’t copied	To teach those words first	Only if a grown-up chooses a file in Grown-ups
Settings: voice, sounds, vibration, new words a day, game clock	To remember your choices	When you change them in Grown-ups

Without an account, none of this leaves your device.

The parent account (optional)

Only a grown-up can create an account, after the parental gate in Grown-ups. You sign in with a one-time code sent to your email address; there is no password. Before the code is sent, the app shows a short notice of what is kept, and asks you to confirm that you are the child’s parent or guardian. With an account, we keep:

What	Why
Your email address	To send your sign-in codes and important messages about your account (never marketing unless you ask for it)
An account number and a random number for each device you sign in on	To know which progress belongs to your family and which device it came from. The device number is made by Wordlings; it isn’t your device’s name or Apple’s advertising or vendor identifier
The app version and whether the device is an iPhone or iPad	To help with support
For each child profile: age group, word level, picture choice, English level, home language and the settings you chose in Grown-ups	So every device uses the same plan
Your child’s name or nickname, only if you turn on “Show the name on my other devices”	To greet your child by name on your other devices. Otherwise the name stays on the device where you typed it
Your child’s learning progress: the words met, each answer, how long it took, the day and time zone, game scores and power-ups, the words from a word list you added (the words only, not the file or its name), and finished missions	So your child can carry on from where they left off on any of your devices, or after changing phones
Whether answer speed should be ignored for an answer (yes or no)	Wordlings ignores answer speed when assistive settings are on. We don’t record which assistive feature was on
Your Family Plus purchase (plan, dates, whether it renews)	To let you add as many child profiles as your plan allows on all your devices

We don’t receive name recordings, problem reports or screenshots, setup answers, your choices of voice or sound, unfinished missions, or anything about your device’s other apps.

Signing out stops syncing at once. Progress on the device stays.

Purchases

Family Plus is sold through Apple’s App Store. Apple handles payment, and we never see your card details.

We use RevenueCat to check purchases. When you open the paywall, buy or restore, the app sends RevenueCat the purchase information from Apple, together with:
- a random customer number, which is your account number if you’ve signed in;
- the device’s language, country and system version.
RevenueCat tells our server what you’ve bought. We set it up without advertising identifiers and without any advertising or analytics links.
RevenueCat’s privacy policy: https://www.revenuecat.com/privacy

Emails from us

We email you only:

your sign-in codes;
messages about your account or a purchase;
if you tick “Send me occasional emails about Wordlings” (it starts unticked), occasional news and offers.

We record when you agreed. You can stop marketing emails at any time with the unsubscribe link in each email, or in Grown-ups › Account. We never email children.

The newsletter is for adults (18 or over). If you sign up on our website, we use your email address only to send the letter. Nothing is saved until you press the button in the confirmation email we send you; if you don’t, your address is not kept. Email is sent through Resend, which stores your address and the date you confirmed. Every letter has an unsubscribe link. The website has no ads and no tracking.

The microphone

Wordlings asks for the microphone only when a grown-up chooses to record the child’s name during setup. The recording lasts at most 4 seconds and is saved on the device. It is never sent to us. Wordlings never listens at any other time and does not use speech recognition.

What Wordlings does not do

No ads, no analytics, no tracking, and no advertising, attribution or crash-reporting software.
No social sign-in and no phone numbers.
We don’t sell or rent personal information, share it for advertising, or allow third parties to track you.
We never use your child’s information for advertising, profiling or marketing.
Links out of the app, purchases and the account are behind a parental gate.

Who processes the data for us

We use these service providers. They may only use the data to provide their service to us:

Supabase (database, sign-in and server functions; data stored in the United States);
RevenueCat (purchases);
Resend (sending sign-in codes and the newsletter; its sending servers for our domain are in Japan);
Resend (marketing email, only for parents who opted in);
Apple (App Store payments, and iCloud or device backups under Apple’s privacy policy).

We disclose information only if the law requires it.

Apple services

If you back up your device to iCloud or to a computer, Wordlings’ saved data is included in that backup, like other apps’ data. Apple handles those backups under Apple’s privacy policy. If you have chosen to share crash reports with app developers in your device settings, Apple may send us anonymous crash reports. These contain technical information about the crash, not your child’s name or progress.

Where data is stored and how it is protected

Account data is stored in the United States and sent encrypted (HTTPS).
Each family’s data is walled off at the database level, so one account can never read another’s.
Only the developer can reach the database, using two-factor sign-in.
If you’re outside the United States, your data is transferred there under the providers’ standard contractual safeguards.

How long data is kept, and how to delete it

On your device: data stays until you delete the app. Deleting Wordlings erases everything it saved on the device: the name, any recordings, problem reports, word lists, settings and progress. “Stop using this list” stops Wordlings using a word list. In Grown-ups, “Go through setup again” lets you change the name, age and level. Choosing not to use a name recording stops Wordlings using it; earlier recordings stay in the app’s private storage until the app is deleted.

With an account:

Data	Kept
Account, profiles and progress	While the account exists
A child you stop syncing (Grown-ups › Account › Stop syncing)	Deleted from our servers at once, with all of that child’s progress. The child stays on your device
A device not seen for 13 months	Deleted (its progress stays with the child)
Purchase webhook records	90 days
Marketing consent record	While the account exists. After you withdraw, we keep the date you withdrew while the account exists
An account not used for 24 months	We email you, then delete it 30 days later unless you sign in
Deleted account	Removed at once from our database. Supabase’s backups roll over within 7 days; RevenueCat deletes its copy when we ask it to, which we do as part of the deletion

To delete everything we hold: Grown-ups › Account › Delete account (behind the parental gate), or email [email protected].

Deleting the account doesn’t cancel a subscription. Cancel it in Settings › your name › Subscriptions.
After deleting the account, the app asks whether to keep the progress on that device or erase it.
Without an account, everything stays on your device, as before.

Children’s privacy

Wordlings is made for children aged 9 to 11, and children can’t create an account or buy anything: both sit behind a parental gate meant for grown-ups.

The account belongs to the parent or guardian, who gives the child’s details and decides whether progress is synced.
Before an account is created, we show the parent a notice of what is kept and why, and ask for consent. After sign-up we send the parent an email confirming the account, with how to withdraw consent and delete the data.
We collect only what the app needs to work, and never use children’s data for advertising, profiling or marketing.

A parent can at any time:

see the child’s profiles and progress in the app;
correct the profile in Grown-ups;
stop syncing (sign out), or stop syncing one child, which deletes that child’s data from our servers;
delete the whole account in the app, or ask us by emailing [email protected]. We reply within 30 days.

We aim to meet the US Children’s Online Privacy Protection Act (COPPA), including its 2025 amendments, the EU and UK GDPR, and the UK Age Appropriate Design Code. For the account and syncing, we rely on our contract with you; for marketing email, on your consent, which you can withdraw at any time.

Changes to this policy

If we change what Wordlings collects or how it is used, we will update this policy first and ask for permission where the law requires it. The date at the top shows when this policy last changed. Version 5 adds the optional parent account, sync, purchases through RevenueCat, and opt-in marketing email to parents.

Contact

Questions about privacy, or a request to see, correct or delete your data: [email protected].