Effective 31 August 2026 · Last updated 31 August 2026
Vocabee ("Vocabee", "we", "us") is a vocabulary-learning app for iOS and Android. It is operated by Onto Mars Productions PTE LTD, a company registered in Singapore at 32 Pekin Street, Singapore 048762.
We are the organisation responsible for your personal data — the "data controller" under European law, and the organisation with obligations under Singapore's Personal Data Protection Act 2012 (PDPA). Data-protection queries go to our Data Protection Officer at [email protected].
This policy explains what the app collects, why, who processes it on our behalf, and what you can ask us to do about it. It describes the current version of the app. Where a feature does not exist yet, we say so plainly rather than claiming rights over data we do not hold — and we update this page when that changes.
The first time you open Vocabee, the app asks our server to create an anonymous account. The server generates a random UUID and returns a session token, which is kept in the device's secure keychain/keystore. That UUID is how your learning progress is recognised on later launches.
It is generated by us, is not derived from any device or hardware identifier, and maps to no real-world identity. If you delete and reinstall the app, a new one is created and the old progress is no longer reachable from your device.
Purpose: to provide the service. Basis: necessary to perform our agreement with you — and, under the PDPA, data you are deemed to have consented to provide so the app can function.
Stored on our servers against that anonymous ID:
Words are referenced by numeric ID from our own dictionary. The app currently has no free-text input, so no text you type is sent to us.
Purpose: to provide the service. Legal basis: performance of a contract.
We use PostHog to understand which features help people learn — for example how many people add the widget, complete onboarding, or return the next day. Events are attached to an app-generated anonymous ID, never to a name or email.
Alongside events, PostHog records ordinary technical properties: platform (iOS or Android), app version, device model, and coarse locale. This is first-party analytics only. There is no advertising SDK in the app and no advertising identifier is collected.
Purpose: to improve the app. Basis: our legitimate interests in understanding product usage in a way that does not identify you; under the PDPA we rely on the legitimate-interests exception for basic product analytics. You can object at any time (see Your choices and rights).
Vocabee Premium is sold through the Apple App Store and Google Play. Payment is handled entirely by Apple or Google — we never see your card, bank details, or billing address.
We use RevenueCat to validate purchases and tell the app whether Premium is active. We store: which product was bought, whether you are in a free trial, the subscription status and its renewal or expiry date, the store it came from, and a RevenueCat customer identifier. This is linked to your anonymous ID so your Premium access follows your progress.
Purpose: to provide and support purchases. Legal basis: performance of a contract.
These never leave your phone and we cannot read them:
Deleting the app removes all of it.
Daily reminders are scheduled locally on your device. Vocabee does not operate a push-notification server and does not collect a push token. If you decline the notification permission, everything else in the app continues to work.
For the avoidance of doubt: no precise or coarse location, no contacts, no photos or videos, no audio, no messages, no calendar, no health or fitness data, no browsing or search history, no biometric data, no advertising identifiers, and no payment card numbers.
Vocabee needs a network connection to fetch your words. Words come from our API — the app ships with no built-in dictionary — so a brand-new install must reach the internet once before it has anything to show. After that, the cache described above lets it open offline. Our server necessarily receives your IP address to answer a request, as any web server does; we use it only to deliver the response and for security, and we do not build a location profile from it.
These companies process data on our behalf, under contract, and may not use it for their own purposes.
| Processor | Role | What it receives |
|---|---|---|
| PostHog | Product analytics | Anonymous ID, usage events, device/platform properties |
| RevenueCat | Purchase validation | Anonymous ID, purchase and subscription status |
| Apple | App distribution and billing | Payment processing; we receive only purchase status |
| App distribution and billing | Payment processing; we receive only purchase status | |
| Cloudflare | Network, TLS termination, DDoS protection | Proxies requests to our API, so it processes connection metadata including IP addresses |
| DigitalOcean | Server and database hosting | Hosts the Vocabee API and its database |
We are based in Singapore, and our servers and processors may be located in other countries, including the United States and the European Union.
Where we transfer data out of Singapore, we comply with the PDPA's Transfer Limitation Obligation: recipients are bound by contract to a standard of protection comparable to the PDPA. Where data leaves the United Kingdom or the European Economic Area, transfers rely on the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses, as applicable.
| Data | Retention |
|---|---|
| Anonymous account, preferences, learning progress | Kept while the account is in use, and until you ask us to delete it. |
| Analytics events | Retained by PostHog under our project's retention settings, then deleted or aggregated. |
| Purchase records | Kept for the life of the entitlement and afterwards where tax, accounting, or fraud-prevention law requires. |
| On-device cache and token | Until you delete the app or clear its data. |
Under the PDPA you may ask what personal data we hold about you and how it has been used, and ask us to correct it. If you are in the UK or EEA you additionally have rights to erasure, restriction, portability, and to object to processing. We honour all of these for everyone, wherever you live — it is simpler than checking, and we hold very little to begin with.
In the app, at any time, you can:
Deletion. Because there is no account, there is no in-app delete button — we would have nothing to authenticate you against. To have your data erased, email [email protected] from the device in question and we will tell you how to supply your anonymous ID. On request we delete the account record and everything attached to it, and ask our processors to delete the data keyed to that ID. We respond within 30 days.
You may also object to analytics specifically, without deleting your learning data, by emailing the same address.
Vocabee is a general-audience app, rated 4+ on the App Store and Everyone on Google Play. It is not directed at children under 13 (or under 16 where local law sets that threshold), we do not knowingly collect data from them, and we run no child-directed advertising because we run no advertising at all. If you believe a child has used the app and you would like their data removed, email us and we will delete it.
All traffic between the app and our servers, and to every processor listed above, uses HTTPS/TLS. Session tokens are held in the platform's secure keychain or keystore rather than ordinary storage. No system is perfectly secure, but we hold very little about you to begin with — there is no password to steal and no email address on file.
Vocabee does not offer accounts today, and this policy describes the app on that basis — no email address, no password, and nothing that identifies you personally.
We intend to add optional accounts in a future release, so that progress can be recovered and synced across devices. When that ships it will be optional: using Vocabee anonymously will remain supported. Before the feature is released we will update this policy to describe exactly what an account stores and why, and update the privacy labels on both app stores to match. Nothing about your data changes until you choose to create one.
If we change what we collect, we will update this page and move the effective date above. Material changes — including the introduction of accounts — will be announced in the app before they take effect.
Questions, requests, or complaints — including data-access and deletion requests — go to [email protected].
Onto Mars Productions PTE LTD
32 Pekin Street
Singapore 048762
If you are not satisfied with our response, you may complain to Singapore's Personal Data Protection Commission (PDPC) at pdpc.gov.sg. If you are in the UK or EEA, you may instead complain to your national data-protection authority.