隐私声明 (Privacy Notice)

This Privacy Notice explains how Vocafy (“Vocafy”, “we”, “us”, or “our”) collects, uses, stores, and protects personal data when you use our website, web application, and related services.

Vocafy is a language learning platform that uses artificial intelligence, personalized learning tools, saved vocabulary, learning collections, pronunciation features, and community-based content to help users learn languages in a more natural and contextual way.

We aim to keep our privacy practices clear, practical, and respectful. We do not sell personal data. We do not use third-party advertising trackers such as Meta Pixel or Google Analytics. We do not use your private learning content, AI tutor conversations, voice recordings, or imported personal content to train third-party AI models.

This Privacy Notice should be read together with our Cookie Notice and Terms of Service.

1. Who is responsible for your data?

Vocafy is operated under the Vocafy brand.

For privacy questions, requests, or complaints, you can contact us at:

privacy@vocafy.net

The legal operator of Vocafy may be identified in our Legal Notice, Terms of Service, or other official legal information made available on the website. If the legal operator changes in the future, we may update this Privacy Notice accordingly.

2. What this Privacy Notice covers

This Privacy Notice applies when you:

• visit the Vocafy website;
• create or use a Vocafy account;
• save words, phrases, sentences, or learning materials;
• create collections, lists, notes, or other learning content;
• use AI tutor, translation, explanation, correction, quiz, or personalization features;
• use pronunciation, speech, or audio features;
• upload, import, paste, or share content;
• use community, group, classroom, or sharing features;
• contact support or submit reports;
• subscribe to paid features, if and when paid plans become available.

3. Personal data we collect

We collect different types of data depending on how you use Vocafy.

3.1 Account data

When you create an account, we may collect and store:

• email address;
• username or display name;
• password hash;
• login method, such as password login, Google login, or Apple login;
• account status, such as active, pending confirmation, suspended, or deleted;
• registration date;
• last login or activity timestamps;
• internal user ID and public user ID;
• optional profile information, such as first name, last name, bio, language, country, or other information you choose to provide.

We do not store your password in plain text. Passwords are stored only as cryptographic hashes.

If you use a third-party login provider, we may store the provider name and a technical identifier needed to connect that login method to your Vocafy account.

3.2 Learning profile and learning activity

Vocafy is designed to personalize your learning experience. For this reason, we may process learning-related data such as:

• native language;
• target languages;
• language level, including CEFR level where applicable;
• learning goals and learning focus areas;
• saved words, phrases, sentences, and examples;
• personal word lists and collections;
• imported or user-created learning materials;
• progress data;
• experience points, streaks, daily goals, and similar learning statistics;
• quiz, test, and exercise results;
• correct and incorrect answers;
• review history and spaced repetition data;
• difficult words, weak items, mistakes, and learning gaps;
• tutor and AI persona preferences;
• language settings and interface preferences.

We use this data to provide the core learning service, personalize exercises, recommend content, adapt AI tutor interactions, schedule reviews, and show progress.

3.3 User-generated and imported content

Vocafy may allow you to create, upload, import, paste, or save content, including:

• custom word lists;
• user-created collections;
• notes;
• comments;
• imported texts;
• web articles;
• video subtitles;
• YouTube subtitle content;
• uploaded images;
• uploaded documents;
• uploaded or recorded audio;
• chat messages;
• AI tutor conversations;
• shared or public learning materials;
• community content.

You are responsible for the content you upload, import, create, or share. Some content may contain personal data if you include it yourself.

Depending on your settings, content may be private, accessible through a shared link, shared with a group or classroom, or public.

3.4 AI tutor conversations and AI-generated content

When you use AI features, we may process:

• your messages and prompts;
• AI tutor replies;
• conversation history;
• conversation summaries;
• saved words or expressions used in the conversation;
• your learning goals, level, preferences, and recent progress;
• mistakes, weak items, or review history relevant to the requested feature;
• generated exercises, explanations, translations, examples, images, or other learning materials.

We store AI tutor conversations and AI responses so that you can continue learning, review previous interactions, and receive a more personalized experience.

You can delete individual AI tutor conversations where the product interface supports this. If self-service deletion is not available for a specific data type, you may contact us at privacy@vocafy.net.

3.5 Voice, pronunciation, speech, and audio data

Some Vocafy features may allow you to record your voice, practice pronunciation, generate audio, or analyze speech.

When you use these features, we may process:

• voice recordings you intentionally submit;
• pronunciation attempts;
• speech-to-text results;
• pronunciation scores or feedback;
• syllable-level or word-level pronunciation analysis;
• generated audio files;
• cached audio files;
• related exercise and learning history.

Some speech or pronunciation features may run partly in your browser. Other features may send audio or derived speech data to service providers so that the requested analysis, transcription, or pronunciation feedback can be provided.

Voice recording features are used only when you actively choose to use them.

3.6 Support, contact, and abuse reports

If you contact us or use support and reporting features, we may collect:

• your name or display name;
• email address;
• account identifier;
• support messages;
• contact form submissions;
• ticket history;
• screenshots or attachments you provide;
• information about the issue you report;
• abuse, copyright, harmful content, or DMCA-related reports;
• reporter name and contact details where required by law or necessary to process the report.

Vocafy may provide abuse reporting tools across the platform. Reports may be reviewed automatically and, where appropriate, by a human reviewer.

3.7 Payment and billing data

Vocafy may offer paid plans in the future.

If paid features are introduced, payments may be handled by a third-party payment provider. We do not intend to store full payment card details on Vocafy servers.

We may process and store:

• billing name;
• billing email;
• billing address;
• tax or VAT information;
• subscription status;
• invoice history;
• payment events;
• refund records;
• payment provider identifiers;
• information needed for accounting, tax, fraud prevention, and customer support.

3.8 Emails and communications

We may send service-related emails, such as:

• registration confirmation;
• login code or authentication messages;
• password reset emails;
• security alerts;
• account notifications;
• product operation messages;
• support replies.

We may also send onboarding or product update messages where appropriate.

If we offer newsletters or marketing emails, we will send them only where permitted by law and with an unsubscribe option.

3.9 Technical, security, and log data

When you use Vocafy, we may automatically process technical data such as:

• IP address;
• approximate country or region;
• browser type;
• device type;
• operating system;
• requested URL;
• referring page;
• timestamps;
• session identifiers;
• visitor identifiers;
• rate limit events;
• login and security events;
• error logs;
• server logs;
• abuse prevention signals.

We use this data to operate, secure, debug, and improve Vocafy.

4. Cookies and similar technologies

Vocafy uses cookies and similar technologies to keep the service secure, maintain sessions, remember preferences, and understand how our own content is used.

We do not use third-party advertising cookies, cross-site tracking pixels, Meta Pixel, or Google Analytics.

For more information, please see our Cookie Notice.

5. How we use personal data

We use personal data for the following purposes.

5.1 To provide the Vocafy service

We use data to:

• create and manage accounts;
• authenticate users;
• maintain sessions;
• save learning materials;
• provide vocabulary, collection, reading, listening, quiz, and review features;
• provide AI tutor and AI-assisted learning features;
• provide pronunciation and speech features;
• show progress and learning statistics;
• enable sharing, community, group, or classroom features;
• provide support.

5.2 To personalize learning

Vocafy may personalize lessons, exercises, tutor responses, explanations, review schedules, and content recommendations based on your learning activity, saved vocabulary, mistakes, progress, language level, and preferences.

This personalization is used to improve your learning experience. We do not use automated processing to make legal or similarly significant decisions about you.

5.3 To provide AI-powered features

Vocafy uses AI systems to provide features such as:

• AI tutor conversations;
• grammar explanations;
• translation and rewriting;
• vocabulary explanations;
• quiz and exercise generation;
• personalized examples;
• pronunciation and speech analysis;
• content recommendations;
• learning support and feedback.

Depending on the feature, relevant parts of your input, learning context, saved vocabulary, progress, conversation history, or preferences may be processed by AI service providers so the feature can work.

We do not use your private learning content, AI tutor conversations, voice recordings, or imported personal content to train third-party AI models.

5.4 To protect the platform

We use data to:

• detect and prevent abuse;
• prevent spam, scraping, bots, and automated attacks;
• apply rate limits;
• investigate suspicious activity;
• protect accounts;
• enforce our Terms of Service;
• process copyright, harmful content, and abuse reports;
• maintain the security and reliability of the service.

We may use automated systems to detect abuse, copyright misuse, spam, harmful content, or technical threats. Important enforcement actions may be reviewed by a human where appropriate.

5.5 To improve Vocafy

We may use data to:

• debug errors;
• improve performance;
• understand which content and features are useful;
• improve the user experience;
• develop new features;
• measure product quality;
• improve learning tools and recommendations.

Where possible, we use aggregated or anonymized information for product and analytics purposes.

5.6 To communicate with you

We may use your contact information to:

• respond to support requests;
• send security messages;
• send account-related messages;
• send important service notices;
• send product updates or onboarding messages;
• send marketing emails only where permitted by law and with an unsubscribe option.

5.7 To meet legal and business obligations

We may process data to:

• comply with legal obligations;
• maintain accounting and tax records;
• respond to lawful requests;
• handle disputes;
• establish, exercise, or defend legal claims;
• process copyright, DMCA, or similar legal notices;
• maintain records required for compliance.

6. Legal bases for processing

For users in the European Economic Area, the United Kingdom, and other regions with similar legal requirements, we rely on the following legal bases.

Contract

We process data where it is necessary to provide the Vocafy service you request, including account management, learning features, AI tutor functionality, saved content, progress tracking, and support.

Legitimate interests

We process data where necessary for our legitimate interests, including:

• security;
• fraud and abuse prevention;
• service reliability;
• debugging;
• product improvement;
• limited first-party analytics;
• handling support and reports;
• enforcing our Terms of Service.

We balance these interests against your privacy rights.

Consent

We rely on consent where required, including for:

• optional cookies or analytics where applicable;
• marketing emails;
• certain optional features where consent is required by law;
• processing of children’s data where parental or guardian consent is required.

You can withdraw consent where the processing is based on consent.

Legal obligation

We process data where necessary to comply with legal obligations, such as accounting, tax, payment, consumer protection, security, or legal reporting obligations.

Vital or public interests

In rare cases, we may process data where necessary to protect someone’s vital interests or comply with public authority requirements.

7. First-party analytics

Vocafy may use privacy-friendly first-party analytics to understand how our own website and learning content are used.

This may include aggregated statistics about:

• page views;
• popular learning materials;
• languages used;
• approximate country or region;
• content popularity;
• product performance;
• technical errors;
• feature usage.

We do not use Google Analytics, Meta Pixel, or third-party advertising trackers.

We do not use analytics data to track you across other websites.

We do not sell analytics data.

We do not build permanent behavioral advertising profiles of guest users.

We may briefly process your IP address for security, abuse prevention, and approximate country detection. Your raw IP address is not stored in our long-term analytics database. Server security logs may contain IP addresses for a limited time where necessary to protect the service and investigate abuse.

8. AI and machine learning

Vocafy uses AI to provide language learning features. AI may help with:

• conversations;
• role-play;
• explanations;
• translations;
• corrections;
• grammar support;
• vocabulary examples;
• quiz generation;
• speech or pronunciation analysis;
• personalized learning support.

To provide these features, Vocafy may send relevant information to AI service providers. This may include your prompt, conversation history, selected learning context, saved vocabulary, learning level, goals, mistakes, or progress where needed for the feature.

We aim to send only the information reasonably needed for the requested feature.

We do not use your private learning content, AI tutor conversations, imported personal content, or voice recordings to train third-party AI models.

We do not use your private learning content to train Vocafy’s own foundation models.

AI features may produce inaccurate, incomplete, or unexpected results. You should review AI-generated explanations, translations, corrections, and learning content before relying on them.

9. Voice and pronunciation features

If you use pronunciation, speech, or voice features, Vocafy may process your audio input and related analysis data.

Audio features are used only when you actively choose to use them.

Depending on the feature, audio may be:

• processed locally in your browser;
• sent to a speech processing provider;
• stored so you can review pronunciation exercises;
• used to generate feedback;
• cached for performance;
• linked to your learning progress.

You may request deletion of stored voice-related data where supported by the product or by contacting us.

We do not use voice recordings for advertising or to train third-party AI models.

10. User content, public content, and sharing

Vocafy may allow you to create private, shared, group, classroom, or public content.

Content may include:

• word lists;
• collections;
• notes;
• imported texts;
• images;
• examples;
• comments;
• learning materials;
• shared resources;
• community contributions.

You control whether certain content remains private, is shared through a link, is shared with a group, or is made public, depending on the available product settings.

If you make content public or share it with others, that content may be visible to other users or visitors. Please do not publish personal data, confidential information, copyrighted content you do not have permission to use, or content that violates our Terms of Service.

If you delete your account, your private learning data will be deleted or anonymized according to our retention rules. Content that you chose to make public or shared may remain available, but it will no longer be linked to your personal profile unless we are required to keep certain information for legal, attribution, abuse prevention, or dispute-related reasons.

11. Content moderation and abuse reporting

Vocafy may use automated and human review processes to detect, prevent, and respond to:

• spam;
• abuse;
• harmful content;
• copyright misuse;
• illegal content;
• harassment;
• platform misuse;
• security threats;
• repeated violations of our Terms of Service.

Users may report content through abuse reporting tools. Reports may be stored and processed so we can investigate and respond appropriately.

For copyright or DMCA-related reports, we may need to collect and process the reporter’s name, email address, statement, evidence, and other information required to handle the report.

12. Children and younger learners

Vocafy is a general language learning platform. Some features may be useful for younger learners, but Vocafy is not intended to be used independently by children below the age at which they may legally consent to the processing of their personal data in their country.

Younger learners may use Vocafy only with the involvement and consent of a parent, guardian, teacher, or school where required by law.

In particular:

• users under 13 should not create an independent account without appropriate parent, guardian, teacher, or school involvement;
• users below the age of digital consent in their country may need parent or guardian consent;
• in Québec, users under 14 may require consent from a parent, guardian, or tutor, unless an exception applies under local law;
• where classroom or school features are used, the school, teacher, or organization may be responsible for obtaining any required permissions.

We do not knowingly collect personal data from children where required consent has not been obtained. If you believe that a child has provided personal data to Vocafy without the required consent, please contact us at privacy@vocafy.net.

For younger users, we may apply additional protections, such as private profiles by default, limited visibility, restricted public sharing, or disabled marketing communications.

13. Optional age or age-range information

Vocafy may allow users to optionally provide age-related information, such as year of birth or age range, to help recommend age-appropriate learning content.

Where possible, we prefer to use age ranges rather than exact dates of birth.

Age-related information is used to improve learning recommendations and support age-appropriate safeguards. It is not used for third-party advertising.

14. Service providers

We may share personal data with trusted service providers that help us operate Vocafy.

These may include providers for:

• hosting and infrastructure;
• content delivery and security;
• email delivery;
• payment processing;
• AI and language model functionality;
• speech-to-text and text-to-speech processing;
• customer support;
• database, storage, and backups;
• moderation, abuse prevention, and security;
• technical operations.

These providers may process data only as needed to provide services to Vocafy and according to contractual, technical, and organizational safeguards.

We may maintain a separate Service Providers or Sub-processors page with more detailed information. This allows us to keep provider information updated without rewriting this Privacy Notice every time our infrastructure changes.

15. International data transfers

Vocafy is currently operated with a global approach. Our infrastructure, users, and service providers may be located in different countries.

Some personal data may be processed in Hungary, the European Economic Area, the United States, Canada, or other countries, depending on the feature and service provider involved.

For example, AI, speech, email, payment, security, or infrastructure providers may process data outside your country.

Where required, we use appropriate safeguards for international transfers, such as data processing agreements, contractual protections, standard contractual clauses, or other lawful transfer mechanisms.

16. Data retention

We keep personal data only as long as reasonably necessary for the purposes described in this Privacy Notice, unless a longer retention period is required or permitted by law.

Our typical retention approach is:

Account data

Kept while your account exists. After account deletion, account data is deleted or anonymized unless retention is needed for legal, billing, security, abuse prevention, or dispute-related reasons.

Learning data

Kept while your account exists or until you delete the relevant content, where deletion is available.

AI tutor conversations

Kept until you delete the conversation or account, unless limited retention is needed for security, abuse investigation, legal reasons, or technical recovery.

Voice and pronunciation data

Kept while the related feature, exercise, or learning record remains active, unless you delete it earlier or request deletion where available.

Support tickets and contact messages

Normally kept for up to 3 years after the last interaction, unless a longer period is needed for legal, security, or dispute-related reasons.

Billing and payment records

Kept as required by tax, accounting, payment, and legal obligations.

Raw server logs

Normally kept for up to 90 days, unless longer retention is necessary for security, abuse investigation, debugging, or legal reasons.

Security and abuse logs

Normally kept for up to 180 days, or longer where necessary to investigate abuse, fraud, security incidents, repeated violations, or legal claims.

Raw analytics events

Normally kept for up to 90 days before deletion, aggregation, or anonymization.

Aggregated analytics

May be kept for longer because aggregated statistics do not directly identify individual users.

Backups

Backups are normally deleted on a rolling basis, for example within 30 to 90 days, unless longer retention is necessary for security, recovery, or legal reasons.

17. Security

We use reasonable technical and organizational measures to protect personal data.

These may include:

• password hashing;
• encryption in transit;
• access controls;
• restricted administrative access;
• logging and monitoring;
• rate limiting;
• abuse prevention;
• database security measures;
• backups;
• infrastructure security controls.

No online service can guarantee absolute security. You are responsible for keeping your login credentials safe and for using a secure password.

18. Your privacy rights

Depending on where you live, you may have rights regarding your personal data.

These may include the right to:

• access your personal data;
• correct inaccurate data;
• delete your data;
• restrict processing;
• object to processing;
• withdraw consent;
• request data portability;
• unsubscribe from marketing emails;
• change cookie preferences;
• lodge a complaint with a data protection authority.

You can contact us about privacy requests at:

privacy@vocafy.net

We may need to verify your identity before fulfilling certain requests.

Some data may not be deleted immediately if we need to keep it for legal, security, billing, abuse prevention, backup, or dispute-related reasons.

19. Account deletion and data export

Vocafy may provide self-service tools for account deletion and data export in the future.

Until self-service tools are available for all relevant data, you can request account deletion or data export by contacting us at:

privacy@vocafy.net

If you delete your account, we will delete or anonymize your personal data according to our retention rules.

Public or shared content may remain available if you chose to publish or share it, but it will no longer be linked to your personal profile unless we are required to retain attribution or related records for legal, safety, abuse prevention, or dispute-related reasons.

Aggregated analytics and anonymous statistics may remain because they do not identify individual users.

20. Marketing communications

We may send service-related messages that are necessary for the operation of Vocafy, such as account, login, password reset, security, or important product messages.

If we send newsletters or marketing emails, we will do so only where permitted by law. You can unsubscribe from marketing emails using the unsubscribe link in the email or by contacting us.

Even if you unsubscribe from marketing emails, we may still send necessary service-related messages.

21. Third-party links and imported content

Vocafy may allow you to import or interact with content from other websites, such as articles, videos, subtitles, or other learning materials.

Third-party websites and services have their own privacy practices. This Privacy Notice does not apply to websites or services that Vocafy does not control.

You are responsible for ensuring that you have the right to upload, import, share, or publish content through Vocafy.

22. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our product, technology, service providers, legal requirements, or business practices.

The “Last updated” date at the top shows when this Privacy Notice was last changed.

If we make material changes, we may notify you by email, in-app notice, website notice, or another appropriate method.

23. Vocafy – Learn from the Web browser extension

Vocafy – Learn from the Web allows a signed-in user to deliberately save selected text, surrounding context, readable page content, or available YouTube subtitles from the active browser tab to the user’s private Vocafy learning space.

Data handled by the extension

The extension processes information from the active page only when needed for a user-facing feature initiated by the user.

• When you save selected text, the extension may process and send the selected text, optional surrounding sentence or paragraph, the source URL or canonical URL, page title, language, author information where available, and other source metadata needed to create the saved learning material.
• When you choose to save readable page content, the extension may process the relevant page text and source information and present it for review before it is saved to Vocafy.
• On supported YouTube pages, the extension may detect subtitle tracks available to the active video. When you choose to import subtitles, the selected subtitle content and the video and subtitle metadata needed to identify and process that learning material are sent to Vocafy.
• The extension stores authentication and connection information in Chrome's extension storage so that it can securely connect to your Vocafy account. This information is used only to authenticate the extension and maintain your connection to Vocafy.

The extension does not continuously monitor or collect your browsing history. It does not collect content from unrelated tabs or pages that you have not chosen to use with the extension.

The extension is not designed to collect passwords, form submissions, cookies, or unrelated page data. It does not send or store YouTube video or audio files. YouTube video content remains hosted by YouTube; Vocafy stores only the information and learning content needed for the features you choose to use.

Purpose and use of extension data

Information submitted through the extension is used to create, store, and process language-learning material in your Vocafy account and to provide the Vocafy features you request, such as vocabulary learning, contextual word information, translation, language analysis, and other learning tools.

Data obtained through the extension is not sold, used for personalized advertising, used to build advertising profiles, or used to determine creditworthiness or for lending purposes.

Vocafy may share or process extension data with service providers only where reasonably necessary to provide, maintain, secure, or support the requested Vocafy functionality, to comply with applicable law, or to prevent fraud, abuse, or security threats. The relevant categories of service providers and international processing are described in sections 14 and 15 of this Privacy Notice.

Vocafy personnel do not access private content obtained through the extension except where you explicitly request assistance involving that content, where access is necessary for security or abuse investigation, where required by law, or where information has been appropriately aggregated or anonymized for permitted internal operations.

Storage, retention, and deletion

Content that you save through the extension becomes part of your Vocafy learning data and is retained according to the rules described in section 16 of this Privacy Notice. Saved content generally remains until you delete the relevant content or your account, subject to the retention exceptions described there.

Authentication and connection information stored locally by the extension remains only as needed to maintain the connection to your Vocafy account. Disconnecting the extension removes its locally stored authentication information and revokes the corresponding server-side extension connection.

Extension data transmitted between Chrome and Vocafy is sent over secure HTTPS connections.

Chrome Web Store Limited Use

Vocafy – Learn from the Web uses information received through Chrome only to provide or improve its user-facing save-to-Vocafy functionality. Vocafy's use of this information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

24. Contact us

If you have questions, requests, or complaints about this Privacy Notice or how Vocafy handles personal data, contact us at:

privacy@vocafy.net

You may also have the right to contact your local data protection authority or privacy regulator.

Last updated: August 11, 2026