Last updated: 8 August 2026
This policy explains what personal data the Voc'iz app processes, why, for how long, and what you can require about it. It describes how the app actually works rather than a generic template.
This is a translation. The French version is the authoritative one and prevails in case of discrepancy.
NL-Development, a SARL with share capital of 5 000 €, registered office at 41 rue Rémy Sevestre, 76230 Bois-Guillaume, France, registered with the 981 011 315 R.C.S. Rouen trade register (SIREN 981 011 315) — "we" — publishes Voc'iz and is the data controller under Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act of 6 January 1978 as amended.
For any question, or to exercise your rights: [email protected].
We have not appointed a Data Protection Officer. None of the three conditions in Article 37 GDPR applies: we are not a public authority, our core activity does not consist of large-scale regular and systematic monitoring, and we process no special-category data within the meaning of Article 9.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email address (stored lowercased), password (bcrypt hash only — never in clear text) | Create and secure your account | Performance of the contract | For as long as the account exists |
| Name and picture, only if you sign in with Google and your Google account provides them | Identify you to your friends inside the app | Performance of the contract | For as long as the account exists |
| The language you speak, the languages you are learning | Configure the app and your sessions | Performance of the contract | For as long as the account exists |
| The display name you choose, if you enter one | Identify you to your friends inside the app | Performance of the contract | For as long as the account exists |
| Your grammatical agreement preference (feminine, masculine or neutral), if you choose one. This is a wording setting, not a declaration of identity: it is used only to inflect the titles and sentences that describe you, it is never asked for at sign-up, and you can change or remove it at any time | Correctly inflect the titles and messages about you, in French and Spanish | Performance of the contract | For as long as the account exists, or until you remove it |
| The 6-digit confirmation code: only a salted hash is stored, together with an attempt counter | Verify that the address is yours | Legitimate interest (security) | 15 minutes, then cleared; erased entirely on confirmation |
| Password reset request: only a SHA-256 hash of the link is stored, together with the time it was used | Let you choose a new password when you have forgotten yours | Performance of the contract | The link expires after 1 hour and works once; the record of the request is kept 24 hours to enforce the sending limits |
| Session tokens: the refresh token is stored only as a SHA-256 hash | Keep you signed in without re-entering your password | Performance of the contract | 30 days maximum, rotated on every use, revoked on sign-out |
| Your per-word progress: correct and incorrect counts, words marked as known, last review date | Measure what you know and choose which words to serve you | Performance of the contract | For as long as the account exists |
| Your sessions: configuration, score, duration, date | Show your statistics and your challenge history | Performance of the contract | For as long as the account exists |
| Your word lists: the name you give them and the words you put in them | Let you practise a selection you made yourself | Performance of the contract | For as long as the list exists, then as long as the account does |
| Your friends, your groups, the names of groups you create, your challenges and their results | Operate the social features | Performance of the contract | See section 7 |
| The invitation link you create for a group: the link's own code, the group it opens, and your identifier as the person who created it | Let someone you send the link to join that group | Performance of the contract | The link stops working after 7 days; the record is deleted when you disable it, when a member replaces it with a new one, or with the group |
| Words you suggest and mistakes you report: the text, the domain, the level, your optional comment | Correct and grow the app's content | Legitimate interest (service quality) | For the life of the submission, after which the resulting content correction remains |
| The email address of someone you invite | Deliver your invitation | Legitimate interest — see section 3 | See section 3 |
Name and email address passed on by Apple if you use "Sign in with Apple". If you choose to hide your address we only ever receive a relay address @privaterelay.appleid.com, never your real one |
Create your account and identify you to your friends | Performance of the contract | For the life of the account |
| The people you block: the blocked person's identifier and the date of the block | Prevent them sending you an invitation or a challenge | Performance of the contract | Until you unblock them, or either account is deleted |
| Your IP address and the date of your last sign-in, recorded on a sign-in, a session renewal or a password reset, never on every request | Detect and stop abuse: limit request rates, and block an account or an address where necessary | Legitimate interest (security) | Only the latest known value is kept, for the lifetime of the account. If an account is banned, the address observed at that moment is kept with the decision, so that it can be reviewed |
| Your device's notification token, and which operating system it runs | Tell you about a friend request or a new challenge | Consent, given through the permission your phone asks for and withdrawable at any time in its settings | Until you sign out, uninstall the app, or delete your account |
The access token authenticating each request is a JWT valid for 30 minutes; it is never stored on our servers.
We collect nothing else. The app embeds no analytics, no advertising tracker and no crash-reporting kit. We build no advertising profile, take no automated decision producing legal effects concerning you, and neither sell nor rent any data.
This is the only case in which Voc'iz writes to someone who does not use it, and it deserves to be described precisely.
When you invite a friend by entering their email address:
This processing rests on our legitimate interest (Article 6(1)(f) GDPR) in letting you find the people you know on the app. We balanced that interest against the invited person's rights and bounded it technically:
The invitation email constitutes the information required by Article 14 GDPR. The invited person may object to the processing, or request erasure, at any time by writing to [email protected].
If they use the opt-out link, their address is added to a suppression list kept without time limit — which is precisely what allows their request to keep being honoured. That list serves no other purpose.
We use the following processors, and no others:
| Provider | Role | Data involved |
|---|---|---|
| Railway Corporation | Hosting of the app and the database | All data described above |
| Cloudflare, Inc. | Serving the website, protecting the service against abuse, and hosting the words' audio recordings | The requests sent to our servers, including your IP address. No account data is stored there |
| Resend | Sending transactional email | Recipient address and message content |
| Google Ireland Ltd. | "Sign in with Google", if you use it | Email address, name and picture supplied by Google |
| Anthropic PBC | Assisted generation of a vocabulary entry when an administrator processes a word suggestion | The suggested word only. The identity of the person who suggested it is never transmitted |
| Expo / EAS (650 Industries, Inc.) | Building and distributing app releases, and delivering notifications | For notifications: your device token and the message text. No other data |
| Apple Distribution International Ltd. | "Sign in with Apple", if you use it, and delivery of notifications to your device | Apple identifier and email address (real or relay) passed on by Apple; device token and message text |
Other Voc'iz users. Your friends, and the members of the groups you have joined, can
see your display name, your picture if you have one, the languages you speak and are
learning, your learning progress (trophy count, words seen, words in progress and to
review, per language), the badges and titles you have earned, the challenges you share
and their results. Your email address is
never disclosed to another user: where you have no name, we show the part of your address
before the @, never the address itself. Your personal word lists, the people you have
blocked and your settings stay private. Someone you have blocked no longer has access to
this information.
Exactly one of your settings is visible to others, and only if you wear a title. When you choose to display a title under your name, your grammatical agreement preference travels with that title — because the title is rendered on the reader's device and in their language, which is the only way "Confirmée en animaux" can agree with you rather than with them. If you wear no title, or have chosen no preference, nothing is shared.
Our administrators access data through a protected back-office, only as far as necessary for support and content correction.
Your data may also be disclosed to a judicial or administrative authority where the law requires it.
Data is hosted by Railway Corporation, in the europe-west4 (Amsterdam, Pays-Bas) region.
Some of our providers are established in the United States. Those transfers are governed by the European Commission's Standard Contractual Clauses and, where applicable, by the provider's certification under the EU–US Data Privacy Framework, in accordance with Chapter V GDPR. You may ask us for a copy of the safeguards in place.
Voc'iz uses no advertising cookie and no analytics tracker, and therefore displays no consent banner.
Only items strictly necessary to deliver the service are used, exempt from consent under Article 82 of the French Data Protection Act:
httpOnly cookie holding the refresh token, restricted to the
single path used to renew your session;You can delete your account at any time from the Profile tab. Deletion is immediate and irreversible; it requires no written request.
Permanently erased: your email address, your password, your name and picture, your language and grammatical-agreement preferences, all of your progress and sessions, your word lists, your sign-in tokens, your devices' notification tokens, your friendships, your group memberships and the invitations you sent. If you signed in with Apple, we also ask Apple to revoke the authorisation you gave us.
An invitation link you had created for a group simply stops being attached to you: the group belongs to its other members too, and deleting the link would take away an access they may still be using. It then carries no information about you at all, and any of them can disable it.
One thing survives, and we would rather say so plainly. Where you took part in a challenge, your participation row is kept with your identity removed: it is no longer attached to any account and shows no name, email or picture. The reason is that the challenge belongs to the other participants too — erasing the row would rewrite a ranking they finished and distort their statistics. What remains is therefore no longer personal data about you, but the outcome of a game played by several people.
Likewise, content corrections resulting from a word you suggested or a mistake you reported remain in the app: they are now part of the vocabulary, independently of you.
You have the rights of access, rectification, erasure, restriction, objection and portability over your data, as well as the right to give directives on what becomes of your data after your death (Article 85 of the French Data Protection Act).
To exercise them, write to [email protected]. We answer within one month, extendable by two months for complex requests; we may ask for proof of identity where there is reasonable doubt.
The right to erasure is most directly exercised by deleting your account from the app (section 7).
If you believe your rights are not being respected, you may lodge a complaint with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr — or with the supervisory authority of your own country of residence.
Traffic between the app and our servers is encrypted (HTTPS). Passwords are stored as bcrypt hashes and are never readable, including by us. Refresh tokens are kept only as hashes, are rotated on every use, and reusing an already-consumed token revokes the whole session family. Confirmation codes are limited in attempts and in time.
No system is infallible: in the event of a data breach likely to result in a high risk to your rights, we will inform you in accordance with Article 34 GDPR.
Voc'iz is for people aged 15 or over, the age of digital consent set by Article 45 of the French Data Protection Act. We do not knowingly collect data about anyone younger; if you become aware of such an account, write to us and it will be deleted.
We may update this policy, in particular if the app starts processing new data. The date of the last update appears at the top of this page, and any substantial change will be signalled in the app before it takes effect.