Privacy policy
Last updated 4 October 2026
Controller: the developer of Tangoya (tangoya.app and the Android and iOS apps), luke.pane@gmail.com. This is the contact for all requests below.
Data, purposes and legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| Anonymous account ID (every user, also without an account) | Run the app and sync | Contract |
| Email address (account sign-up; the password is held by Firebase Authentication) | Sign-in, verification and password-reset emails | Contract |
| Handle, weekly points, answer count, follows, blocks. Handle, points and answer count are public. | Weekly boards, friends | Contract |
| Answer log (word, question, what you chose or typed, right or wrong, time, device label), synced when you have an account | Progress across devices | Contract |
| Reports and word removals (reason, note, the question), custom card requests | Fix content, make and count cards | Legitimate interests; contract for cards |
| Purchases (ID, pack, amount, currency) and card balance | Credit purchases, accounting | Contract; legal obligation |
| Anonymous usage counts and error reports: event name, platform, random number; for errors, the error class and the first line of the stack. No account ID. Off with the Settings switch “Share anonymous usage counts”. The website counts page views. | See whether the app is used and where it breaks | Legitimate interests; you can switch it off |
| Network address (for IPv6, its network part), combined with the date into a code by a one-way hash; the code and a count, not the address, are kept as that day’s counter, with no account ID. Since the date is known, the code could be matched back to an address by trying every address: it is a pseudonym. | Rate limits against abuse | Legitimate interests |
No cookies. No advertising. Your data is not sold or shared for advertising.
Providing the account ID is needed to use the app. The email is needed only for an account. Nothing else is required by law or contract. There is no automated decision-making with legal or similar effects.
Who receives it
- Google (Firebase, Google Cloud): hosting, sign-in, database, functions.
- Anthropic: the sentence, its translation, the word and the text you typed, for “Was my word also correct?”; the dictionary word and meaning, for a custom card’s sentence. No account ID or email.
- Google (speech synthesis): the text of a custom card’s sentence.
- Stripe (web and Android payments): payment details are entered with Stripe, not me; I receive the payment ID, amount and currency.
- Apple (iOS purchases): I receive the transaction ID, product and price.
- GoatCounter (tangoya.goatcounter.com): the counts above. It sees the IP address and user agent and records the country, region, browser and operating system from them; the IP address and user agent are kept only in its memory, for at most 8 hours, to tell repeat visits apart, and never stored.
These providers may process data outside the EEA and UK, including in the United States, under their own transfer safeguards.
Retention and deletion
- Account data, reports, card records and balance are kept until you delete the account.
- Records that you were served a card sentence: 30 days.
- Per-address counters are not linked to your account, so deleting it does not remove them; old ones are cleared.
- Payment records (no name or email) are kept for accounting. A deletion note (account ID and date) is kept so that late requests or payments cannot recreate data.
To delete your account: in the app, Settings, Account, Delete account; or on the web at tangoya.app/delete-account. This deletes everything above except the payment records, the deletion note and the per-address counters, then your sign-in account and email. You can also email me to request deletion.
Your rights
You can ask for access, rectification, erasure, restriction, objection, portability, and withdraw consent where it applies, and you can complain to your data-protection supervisory authority. California residents have the same rights to know and delete, and I do not discriminate for using them. Write to luke.pane@gmail.com.
Children
Tangoya is not directed at children under 13, and I do not knowingly collect their data.