Legal

Privacy Policy

Last updated 20 October 2026. Applies to the Pack Lingo app for iPhone and to this website.

The short version. You can learn in Pack Lingo without giving us a name, an email address, or a date of birth. We ask your birth month and year once, turn it into an age bracket on your phone, and throw the date away before anything is sent. We do not track you, we do not advertise, and we do not sell or share your data with anyone. You can export everything we hold and delete your account from inside the app.

Who is responsible for your data

Pack Lingo is operated by LEGAL NAME OF OPERATOR. For anything in this policy, write to privacy@packlingo.app and a person will read it.

Where Pack Lingo is available

Pack Lingo is offered in the United States, Canada, Australia and New Zealand. It is not offered in the European Economic Area or the United Kingdom, and we do not direct it at people there. If that changes, this policy will change with it before the app becomes available.

You can use the app without an account

When you first open Pack Lingo, your phone creates an anonymous account. It is identified by a random code and nothing else. No email address, no name, no phone number, no contacts.

You can later link that account to Sign in with Apple, which is what lets your collection survive a lost or replaced phone. Linking is optional, and everything in the app works without it.

What we collect, and why

What	Why	Kept where
A random account code	To keep your collection and your progress attached to you	Our database
Your Apple account identifier, and an email address, only if you sign in with Apple	To let you sign back in and recover your collection. If you choose Apple's Hide My Email, we only ever see the relay address Apple gives us, never your real one	Our database
An age bracket: 13 to 15, 16 to 17, or 18 and over	To meet the law on children's and teenagers' data, and to keep anything non-essential switched off for under-18 accounts	Our database
Your learning data: which cards you own, your review history and results, packs you have opened, your streak	This is the app. It is how your collection and your review schedule exist at all	Our database
Your time zone and the hour your day rolls over	So a daily pack and a streak mean the same thing to you as they do to someone eight time zones away	Our database
A short record of account events: created, linked, merged, deletion requested, data exported	So we can answer honestly if you ask what happened to your account, and so a support question has a factual answer	Our database
Your subscription status, if you buy one	To unlock what you paid for. Apple handles the payment and we never see your card	Apple and RevenueCat, plus a copy in our database
Crash and error reports	To find and fix the thing that broke	Sentry
Your settings, your downloaded audio, and your sign-in token	So the app opens fast and works offline	Only on your phone

We collect each of these because the app needs it to work, to meet a legal obligation, or to keep the app from breaking. We do not collect anything for advertising, and we do not collect anything we are not using.

How we handle age, and why we do it this way

We ask for your birth month and year once, in two empty fields with nothing filled in for you. Your phone converts that into one of three brackets and discards the date immediately. The date is never sent to us, so it cannot appear in a server log, a crash report, or a backup. There is no field in our database that could hold a date of birth, and no value that could record someone as being under 13.

If the answer puts you under 13, the account is deleted straight away with no waiting period, and nothing about the age that was entered is recorded. We keep only the fact that a check did not pass, on the device, so the question is not simply asked again.

Pack Lingo is for people aged 13 and over. We do not knowingly collect anything from children under 13. If you believe a child under 13 has an account, email privacy@packlingo.app and we will delete it.

If you are under 18

For accounts in the 13 to 15 and 16 to 17 brackets we process only what is strictly necessary to run the app. No advertising, no marketing, and no optional analytics or profiling, whatever this policy permits for adult accounts.

What we never collect

No date of birth. Covered above. It never leaves your phone.
No tracking. We do not use Apple's advertising identifier, we do not track you across other apps or websites, and we show no ads.
No location. We never ask for it and the app cannot read it.
No contacts, photos, calendar, or health data.
No microphone and no recording. The app plays audio and never captures it. Microphone access is switched off in the build itself, not merely left unused.
No payment details. Subscriptions are bought through Apple. We never see your card number.
No selling or sharing. We do not sell your personal information and we do not share it for cross-context behavioural advertising. We have never done either, and we have no plans to.

The app does read your phone's motion sensor to make the foil on a pack and a card shine as you tilt it. That reading is used for the animation on the screen in front of you and is never stored or transmitted.

Who else handles your data

We keep this list short on purpose. These are the only companies that process personal data on our behalf, and each is bound to use it only for what we have asked.

Company	What they do for us	What they see
Supabase	Database, sign-in, and the audio files the app downloads	Your account code, your email if you linked one, your age bracket, your learning data
Apple	Sign in with Apple, and all subscription payments	Your Apple account and payment details, which Apple already holds. We receive only an identifier and whether a subscription is active
RevenueCat	Keeps track of which subscriptions are active	Your account code and your subscription status
Sentry	Crash and error reports	Your account code, the error, and where in the app it happened. Sign-in tokens, keys, and similar secrets are stripped out on your phone before the report is sent

The Japanese audio in the app was generated once, before release, using a text-to-speech service, and ships as ordinary sound files. Nothing you do in the app is sent to that service, and it never receives anything about you.

Where your data is held

Our database and audio files are hosted by Supabase in SUPABASE REGION, e.g. the United States (AWS us-east-1). Apple, RevenueCat and Sentry operate internationally.

So if you are in Canada, Australia or New Zealand, your information is stored and processed outside your own country, including in the United States, and is subject to the laws there. We take reasonable steps to make sure each company we use handles it consistently with this policy, and by using Pack Lingo you agree to it being handled this way.

How long we keep it

While your account exists, we keep your account and learning data, because that data is your collection.
If you ask us to delete your account, it is locked immediately and erased after 30 days. The 30 days exist so that an accidental deletion can be undone, and the account is unusable throughout. You can cancel during that window, or choose immediate deletion and skip it entirely.
If an age check does not pass, deletion is immediate with no waiting period.
Crash reports are kept for 90 days by Sentry and then discarded.
Records we are required to keep for tax or accounting reasons, which come from Apple rather than from the app, are kept for as long as the law requires.

Deleting your account

Open Settings in the app and choose Delete Account. This removes your profile, your collection, your review history, and your email address if you linked one. If you signed in with Apple, we also tell Apple to revoke the app's access to your Apple account, so no connection is left behind.

You do not need to email us or wait for a reply. If you cannot reach the screen for any reason, write to privacy@packlingo.app and we will do it for you.

Your rights

Wherever you live, you can ask us to:

tell you what we hold about you,
give you a copy of it, which the app can produce for you directly,
correct it if it is wrong,
delete it,
stop using it for anything you object to, and
withdraw consent where we relied on consent.

We will not charge you, refuse you service, or give you a worse experience for exercising any of these. We answer within 30 days, and sooner when we can.

United States. If you are in California, Colorado, Connecticut, Texas, Virginia, or another state with its own privacy law, those laws give you the rights listed above, including the right to know, to delete, to correct, and to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of, and we do not use your data for any automated decision that has a legal or similarly significant effect on you. You may appeal a refused request by replying to our answer, and in some states you may then complain to your state Attorney General.

Canada. You have the right under PIPEDA to access and correct your personal information and to challenge how we handle it. If we cannot resolve a complaint, you may take it to the Office of the Privacy Commissioner of Canada.

Australia. You have the rights given by the Australian Privacy Principles, including access and correction. If we cannot resolve a complaint, you may take it to the Office of the Australian Information Commissioner.

New Zealand. You have the rights given by the Privacy Act 2020, including access and correction. If we cannot resolve a complaint, you may take it to the Office of the Privacy Commissioner.

Security

Traffic between the app and our servers is encrypted. Access to the database is restricted per account by the database itself rather than by the app asking nicely, so one account cannot read another's data even with a hand-made request. Crash reports are stripped of sign-in tokens and keys on your phone before they are sent. No system is perfect, and we will tell affected users and the relevant regulator if a breach ever requires it.

Changes to this policy

If we change it in a way that matters, we will update the date at the top and tell you in the app before the change takes effect. Older versions are available on request.

Contact

privacy@packlingo.app