Privacy policy

1. Who we are

10 Vocabs provides source-backed technology briefings and English vocabulary learning on the web and companion apps. This policy explains how we collect and use data when you use 10vocabs.com. Send privacy questions to support@10vocabs.com.

2. Data we collect

• Account data: email address, display name, password hash for email accounts, and an optional HTTPS avatar URL.
• Learning data: vocabulary viewed, selected packs, daily plans, recall outcomes, streaks, settings, and AI usage limits.
• Optional website analytics: if you allow analytics, Google Analytics measures page views, learning-start clicks, App Store clicks, and completed email registrations. We do not send your email, name, form contents, or URL query strings in these events. Google receives technical information associated with analytics requests and uses analytics cookies. You can decline or withdraw your choice using Analytics preferences. Advertising personalization and Google signals are disabled.
• Brief analytics: an aggregate view count for each published Brief. We do not keep a per-account Brief reading history or completion record.
• Optional AI requests: vocabulary terms and definitions required to create Premium examples, answer coaching, or learning passages.
• Technical data: session cookies and limited request and security data needed to operate and protect the service.

3. News and source data

Our publishing pipeline retrieves publicly available headlines, summaries, dates, and links from company newsrooms, research publications, venture firms, and selected industry sources. We store normalized source metadata and generated briefing content. This public source collection is separate from your personal account data.

4. Why we use data

We use data to authenticate you, publish and improve briefings, maintain your learning plan and spaced-repetition schedule, provide support, protect the service, and enforce Premium limits. We do not sell personal information or use learning data for targeted advertising.

5. Service providers

We use Cloudflare Workers, Queues, D1, and R2 to host the application, account data, mobile synchronization, avatars, and briefing pipeline; Supabase to verify Google and Apple sign-in; Firebase Analytics for app usage measurement and, with your choice, Google Analytics for website usage measurement; Resend for account emails such as verification, welcome, password reset, and security messages; and OpenRouter for server-side briefing generation, verification, and optional Premium learning content. Brief generation sends public source facts, not your account identity. Optional personalized generation sends only the vocabulary context needed for the request, not your password or session token. Provider handling is governed by their own notices: Cloudflare, Supabase, Firebase, Google Analytics, Resend, and OpenRouter.

6. Automated and Premium content

Automated systems help cluster public developments, draft concise briefings, check factual support, and explain vocabulary. High-confidence editions may publish automatically; lower-confidence editions remain available for review. Automated summaries and Premium learning content can still contain errors. Source links are provided so you can inspect the underlying material.

7. Retention and your choices

We retain account and learning data while your account is active unless you clear or delete it. Account deletion is processed in the app, subject to limited backup, fraud-prevention, and legal-retention needs. Aggregate Brief view counts, public source records, and published briefings are editorial or service-level records and are not tied to your account.

8. Security

Passwords are stored as salted PBKDF2-SHA256 hashes with a server-side pepper. Sessions use random, HttpOnly, SameSite cookies and are stored only as hashes. Requests use HTTPS in production. No system is perfectly secure; use a strong, unique password and sign out on shared devices.

9. International processing, children, and changes

Providers may process data in countries other than yours. 10 Vocabs is not directed to children under 13 and we do not knowingly collect their personal information. We may update this policy as the service changes; the date above indicates the latest revision.