You can read without an account. Data services differ between iOS and Android; each platform section explains its data, export and deletion options.
About this policy
This policy covers the Verbilo app and verbilo.app. Verbilo supports language learning through reading, listening and practice. It describes currently available features; we will update it when new platforms or features change how we use data.
Contact the Verbilo team using the email below for privacy questions and data requests.
iPhone and iPad
In iOS 0.4.16, you can read as a guest. Downloaded stories, reading position, saved words, quiz answers, learning progress and preferences stay on your device. Signing in does not upload or synchronize this learning history.
Optional Sign in with Apple sends the name you choose to share, your email (including an Apple private relay address), your Apple account identifier and sign-in proof to Verbilo. We store your name, email, account identifiers and session records to authenticate and protect your account. We never receive your Apple password. Apple refresh credentials are encrypted on our server.
Practice uses the microphone only after permission and when you start recording. Recordings are stored temporarily on your device for replay and removed when you leave Practice. They are not sent to Verbilo, Azure or OpenAI. Listening uses the device speech service. This iOS version has no cloud pronunciation scoring, in-app AI generation, Google sign-in, Firebase Analytics, Crashlytics, advertising SDK or in-app purchases.
Requests for stories, images and account services pass through Cloudflare and our Hetzner server. Connection and security data can include IP addresses, request details, response status and timing. Verbilo keeps hashed IP rate-limit counters and limited service logs to prevent abuse, diagnose failures and keep the service available. These operational records are separate from your on-device learning history. We do not use iOS data for advertising tracking.
In Settings → Account & data, use Prepare data export to save your local learning data. To delete a signed-in account, choose Delete account and confirm with Apple. This revokes the Apple authorization and removes your Verbilo account and its associated active server records and current local account data; it does not delete your Apple account. The retention and support information below also applies to iOS.
Later iOS builds that show Privacy & diagnostics in Account & data also include Firebase Analytics, Crashlytics and Performance Monitoring. These services measure app activity, crashes, app startup and content-loading/network performance. They process app/device installation identifiers, usage, technical diagnostics and request timing/URL paths; Analytics may derive approximate location from IP. Our custom events exclude names, email addresses, account IDs, story text, saved words and recordings. Advertising identifier collection and personalized ads are disabled. Usage analytics, crash reports and performance monitoring are enabled by default and can be switched off independently on this device. Restart after disabling crash reports or performance monitoring to fully apply the SDK change. Disabling does not delete reports already sent; re-enabling crash reports may submit reports kept locally. These choices are separate from learning exports and account deletion.
The following sections marked Android describe features of the Android app. Apple handles its sign-in service under its own privacy policy; Cloudflare and Hetzner provide the network and hosting services described here.
Online notifications and device details · Android and iOS
Account connection records are automatic and do not depend on the notification or device-sharing switches. When a guest or signed-in account makes an authenticated online request, Verbilo stores only its latest IP address, approximate country supplied by Cloudflare and connection time for service operation and support. This is not an IP history or precise location; the country can reflect a VPN. Only authorized administrators can view it. The active record expires after 30 days without an authenticated connection and is removed by hourly cleanup, or when the account is deleted. Offline use cannot update it. Turning off optional device sharing or deleting its registration does not remove this separate account connection record. Backup retention below also applies.
In app versions offering Online notifications, both New stories and Share device details are off by default. Local daily reminders work without this registration. Enabling New stories sends Verbilo a random installation ID, notification token, platform, language and connection time. If signed in, the record is linked to your Verbilo account. The ID belongs to this installation and can change after reinstalling; it is not a hardware serial number or advertising ID.
The separate Share device details option sends the manufacturer, model, system version, app version and build, and stores the latest IP address seen by our server for support. We do not infer precise location from this IP. Network providers still process connection data described elsewhere in this policy when this option is off. Apple Push Notification service (iOS) and Firebase Cloud Messaging (Android) process the notification address, public story alert and connection information to deliver notifications. Firebase also uses installation identifiers and service metadata under its own policy. When device details are shared, we also keep the approximate connection country supplied by Cloudflare for up to 30 days for support. This is not precise location and can reflect a VPN.
Only authorized administrators can view device records; notification tokens are encrypted and are not displayed in the admin panel. We keep the latest IP for up to 30 days, device records for up to 90 days without a registration refresh, and recipient delivery outcomes for 30 days. An accepted request does not confirm that a notification was delivered or read. Non-personal story publication records prevent repeated alerts.
Turn off Share device details to remove those optional details from the active record. Turn both choices off to delete the active registration. If offline, changes reach the server when you next open Verbilo online; notifications already submitted to Apple or Google may still arrive. These choices apply to the installation across account changes. Deleting an account removes its associated active device records. The backup retention and support information below also applies.
Android — Optional Meta ad measurement
Android 0.4.23 and later versions that show the Meta ad measurement choice can use Meta App Events to measure our ads. It is off until you choose Allow, and is separate from Firebase usage analytics. Declining does not block learning or purchases. Earlier Android builds and the currently published iOS build do not include this measurement.
After consent, we share installation and app-open signals, subscription-screen visits, checkout starts, and newly server-verified trials or initial paid subscriptions with Meta. A trial is sent with zero revenue; an initial paid subscription includes its value and currency. Meta also receives app or installation identifiers, device and app information, and connection information such as IP address, which may indicate approximate location. This data is used for advertising measurement and analytics. We do not use the Android Advertising ID, upload contact lists, or send names, emails, Verbilo account IDs, purchase tokens, story text, answers or voice recordings to Meta.
You can change this device’s choice in Settings → Account & sync → Privacy & your data. Turning it off stops new manually logged events immediately; restart the app to stop the SDK’s remaining background connections. It does not recall data already sent or queued. Meta may process data outside your country and retains it under its own privacy policy. Reading and listening remain available without accepting ad measurement.
Android — Information we use
On your device: downloaded stories, reading preferences and position, saved words, reviews, quiz answers and practice results. These support your learning progress and offline use where available.
When you create an account or sign in: we receive information such as your name, email and account identifier from Google/Firebase, and keep session information to protect access. We do not receive your Google password. Password-based Verbilo accounts store a secure password hash.
When you use cloud features: we store account information, generated stories and generation requests, and upload learning records when you use sync. We may also process support messages you send and the contact details needed to reply.
Android — AI and microphone features
To generate a story, we send your chosen level, topic, interests and practice words to OpenAI. For sentence help, we send the selected sentence and requested help type. We store the results to provide them to you.
The microphone is used when you grant permission and start practice. Sentence recordings are uploaded when you request an assessment; continuous reading practice streams audio during the session you start. Microsoft Azure processes audio for transcription and pronunciation results. Verbilo does not keep practice recordings as permanent server files; transcripts and results may be saved in your practice history.
Temporary sentence recordings on your device are deleted when you leave practice, or on the next app launch after an interruption. Cloud narration sends story text to Azure and may cache the generated audio. An installed device voice may need its provider’s internet connection. Providers process and retain data under their own settings and terms.
Android — Analytics and crash reports
The app uses Firebase Analytics to understand feature use and Firebase Crashlytics to diagnose crashes. Both are enabled by default and may collect app activity, installation identifiers, device information, technical diagnostics and approximate location inferred from connection data such as IP address. The app does not request precise GPS location.
Our custom events do not include names, emails, story text, selected words, answers, pronunciation results or recordings. We do not use the Advertising ID or ad personalization.
You can switch each off under Settings → Account & sync → Privacy & your data. Full crash-report opt-out takes effect on the next launch. These settings apply to the device and do not delete reports already sent. Re-enabling reports may send crash information retained locally.
Purchases and subscriptions
In builds that offer subscriptions, Google Play on Android or the App Store on iOS handles payment. Verbilo receives purchase tokens or signed transaction data, product and transaction identifiers, subscription status and expiry, and an account identifier. We send these purchase identifiers to the relevant store and check current status on our server to grant, renew or restore training access. We store the current subscription record linked to your Verbilo account. We do not receive your payment-card details.
Purchase-verification records are used for app functionality and fraud prevention. We do not send their purchase tokens, transaction identifiers or linked account identifiers to Meta. With your separate consent, new trials or initial paid subscriptions can also be measured as described in Optional Meta ad measurement. Expiry keeps your saved words and learning progress. Account deletion removes associated active server records under our deletion policy; it does not cancel store billing. Cancel in the store first. Deleting the linked account can prevent restoration to a new account. The store retains its own payment records under its policy.
Services that help run Verbilo
Android: We use Hetzner for hosting, Cloudflare for website protection and delivery, Google/Firebase for accounts, analytics, crash reports and store services, OpenAI for content generation and explanations, and Microsoft Azure for voice features. Each receives information needed for its function as described above.
These services may process data outside your country. Our website and security services receive connection information such as IP address, browser and request details. Necessary security cookies may be used; the administration area uses cookies for administrator sign-in. We do not sell your personal data.
Security and retention
We use HTTPS, account and administrator access controls, and protected device storage for sign-in tokens. No storage or transmission method is completely risk-free.
We keep cloud account and learning data while needed to provide the service, or until you delete the data or account. Rotating backups expire within eight days. Limited security and administrative records may remain after deletion to protect the service, investigate abuse or meet legal obligations.
Provider retention depends on the service, settings and applicable terms. Deleting a Verbilo account does not delete device-based analytics and crash reports already submitted.
Export data and delete your account
Android: In the app, open Settings → Account & sync. You can export learning data, or select Delete account and complete the identity confirmation. Deletion removes your Verbilo account and associated records from the active database, including personal stories, learning history and sessions, and removes the current account’s local data.
If you cannot use the app, email the support address below from your account email with the subject “Delete my Verbilo account”. We need to verify account ownership before acting. Do not send passwords or sign-in codes. You can also request access to or correction of your information.
This does not delete your Google account. Backup copies may remain for up to eight days, and limited records may remain as explained above. You need to remove exported files and downloads on other devices yourself. Signing out alone does not delete learning data.
support@verbilo.appChanges and contact
We publish policy updates here with a revised date and explain significant changes within the service when needed. For privacy questions, access, correction or deletion requests, email the Verbilo team below.