Privacy Policy
Effective date: [EFFECTIVE_DATE]
VocaNow is operated by Useful Inc. ("we", "us", "Useful Inc."). This policy explains what personal information we collect when you use VocaNow at VocaNow.app, why we collect it, and the choices you have. If you have questions, email support@useless.app.
1. Information we collect
Account information
- Email address, display name, and profile image when you sign in with Google or Apple.
- An internal user identifier and authentication session records.
Content you create or upload
- Decks, vocabulary words, definitions, example sentences, tags, study progress, and test results you create.
- Files you upload for vocabulary extraction (photos, PDFs of vocabulary lists). These are stored on Vercel Blob at randomized URLs that are not enumerable, processed by our extraction pipeline, and removed from storage after processing per our retention schedule. Anyone who comes into possession of one of these URLs can fetch the file while it remains in storage, so you should not share them. We use authenticated server-side reads for our own access.
Billing information
- When you purchase a paid plan or import pack, our billing processor Lemon Squeezy collects your payment details directly. We do not receive or store your full card number. We receive transaction metadata (purchase ID, plan, status, country) needed to provision your subscription and comply with tax law.
Usage information
- Product analytics (pages viewed, features used, study sessions, error events) collected via Amplitude. We use this to improve the product. Amplitude may collect device, browser, and approximate-location data inferred from IP.
- Server logs (IP address, request path, user agent, timestamps) generated by our hosting provider Vercel for security, diagnostics, and abuse prevention.
Cookies and similar technologies
- Authentication cookie — keeps you signed in.
- Locale cookie — remembers your interface language (English / Korean).
- Amplitude device cookie — links anonymous events from the same browser.
2. How we use information
- To provide, secure, and improve the VocaNow service.
- To extract vocabulary entries from files you upload.
- To process your subscription, prevent fraud, and comply with tax obligations.
- To respond to support requests and send service-related communications.
- To investigate and prevent abuse, security incidents, or violations of our Terms.
We do not sell your personal information, and we do not use your uploaded content or study data to train AI models.
3. Service providers (subprocessors)
We rely on the following third parties to operate the service:
| Provider | Purpose |
|---|---|
| Vercel | Hosting, file storage (Vercel Blob), and request logs |
| Supabase | Managed PostgreSQL database for application data |
| Google, Apple | OAuth sign-in providers |
| Lemon Squeezy | Payment processing, invoicing, tax collection |
| Amplitude | Product analytics |
| Vercel AI Gateway, OpenAI, Anthropic, Google AI | Vocabulary extraction from uploaded files |
Each provider acts under contractual obligations that limit how they can use your data. Files sent to AI extraction providers are submitted on a per-request basis to generate the vocabulary list and are not retained for model training under our agreements with those providers.
4. International transfers
VocaNow is operated from the United States. If you access the service from outside the US, your information will be transferred to and processed in the US and other countries where our service providers operate.
5. Data retention
- Account data, decks, and study progress are retained until you delete the data or close your account.
- Uploaded source files (photos / PDFs) are deleted shortly after extraction completes via our orphan-blob cleanup process.
- Server logs are retained by our hosting provider per their standard retention period.
- Billing records are retained as long as required by tax and accounting law.
6. Your rights and choices
- Access and export. You can review your decks and study data inside the app.
- Correction. You can edit or delete decks, words, and tags from your library.
- Deletion. Email support@useless.app to request account deletion. We will delete your account and associated personal data within a reasonable period, except where retention is required by law.
- Marketing communications. We currently do not send marketing email. Service messages (security notices, billing receipts) are required and cannot be opted out of while your account is active.
Depending on where you live, you may have additional rights under laws such as the GDPR, UK GDPR, or the CCPA (e.g., the right to object, restrict processing, or appeal a denial of a request). To exercise any such right, contact us at the email above.
7. Children
VocaNow is not directed to children under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
8. Security
We use industry-standard measures including TLS in transit, encrypted database storage, OAuth-based authentication, and access controls. No system is perfectly secure; if you suspect unauthorized access, please notify us immediately.
9. Shared decks
If you create a public share link for a deck, the deck contents (words, definitions, examples) and your display name become accessible to anyone with the link. You can revoke a share link at any time from the deck page.
10. Changes to this policy
We may update this policy as the service evolves. When we make material changes, we will update the effective date above and, where appropriate, notify you in the app. Your continued use of VocaNow after changes take effect constitutes acceptance of the updated policy.
11. Contact
Useful Inc.
Email: support@useless.app