1. Who We Are

VocaApp ("we", "us", "our") is a Hebrew-English vocabulary learning platform. This Privacy Policy applies to all users of vocaapp.online and related services.

2. What We Collect

We do not collect: credit card numbers (handled by PayPal), location beyond IP, or biometric data.

3. How We Use Your Data

• To provide, maintain, and improve the VocaApp service.
• To authenticate you and keep your account secure.
• To process subscription payments through PayPal.
• To send you important service notifications (not marketing, unless you opt in).
• To personalize your learning experience based on your progress.
• To detect and prevent fraud, abuse, and security threats.
• To comply with legal obligations.

4. Data Storage & Security

Your data is stored on secure servers. Passwords are hashed using bcrypt and are never stored in plain text. We use HTTPS encryption for all data in transit. We apply industry-standard security practices to protect your data from unauthorized access.

While we take strong precautions, no system is 100% secure. If you suspect unauthorized access to your account, contact us immediately.

5. Third-Party Services

We use a limited number of third-party services:

• PayPal — payment processing. PayPal's privacy policy applies to payment data.
• Google Gemini AI — generating vocabulary stories. Prompts may be processed by Google. No personal data is sent beyond the story prompt.
• Google Fonts — serving web fonts. Google may log font requests.
• STUN servers (Google) — used by VUAC Talk for WebRTC peer connection. No conversation data passes through these servers.

We do not use Facebook Pixel, Google Ads tracking, or any advertising network trackers.

6. VUAC Talk & Video Chat

VUAC Talk uses WebRTC peer-to-peer technology. Video and audio streams go directly between users — VocaApp's servers do not receive, record, or store video or audio content. Signaling data (connection setup) passes through our servers briefly and is not stored.

7. Cookies & Local Storage

We use browser local storage (not tracking cookies) to save your language preference, theme, and learning progress locally on your device. We do not use third-party advertising cookies.

8. Data Sharing

We do not sell, rent, or trade your personal data. We may share data only in these limited circumstances:

• With service providers listed in Section 5 who process data on our behalf.
• When required by law, court order, or government authority.
• In connection with a merger, acquisition, or sale of assets (you will be notified).

9. Your Rights

You have the right to:

• Access — request a copy of your personal data.
• Correction — request correction of inaccurate data.
• Deletion — request deletion of your account and personal data.
• Portability — export your vocabulary list at any time from Manage Words.
• Opt-out — unsubscribe from marketing emails at any time.

To exercise these rights, visit your Profile or contact us via the Contact page.

10. Children's Privacy

VocaApp is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us immediately so we can delete it. VUAC Talk requires users to be 18 or older.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top reflects the most recent revision.

12. Contact

Privacy questions or requests? Contact us at our contact page. We aim to respond within 5 business days.