Privacy Policy
1. Who is responsible
Wordivo, operated by ФОП Branickiy Yurii Yuriyovych (ФОП Браницький Юрій Юрійович), Ukraine, 08330, Kyiv Oblast, Boryspilskyi District, village of Dudarkiv, Sonyachna Street, building 9a, tax ID (РНОКПП) 3510205975, is the data controller for your information. Contact: hello@wordivo.co.
2. What we collect
- Telegram identifiers: your Telegram user ID, username, first name, and language setting (provided by Telegram when you use the bot).
- Learning data: words and translations you add, practice answers, progress, schedules, and activity timestamps.
- Teacher/student relationships: group membership and assignments.
- Voice recordings: when you record a spoken answer, the bot stores Telegram's reference to that recording (a file identifier), the scenario you were asked to talk about, the words involved, the length in seconds, and when it was sent. The audio itself stays on Telegram's servers — we never download or store a copy, and nothing transcribes or scores it. The recording is delivered to your teacher, which is the whole point of the exercise; a teacher may answer with a recording of their own, delivered back to you the same way. If you have no teacher, the bot does not ask you to record anything.
- Payment data: processed by LiqPay (PrivatBank), our payment service provider. We receive transaction status and limited billing metadata — we never see or store your full card details.
3. How we use it
- To provide and personalize practice (scheduling, exercises, progress tracking).
- To operate teacher–student features and payouts, including passing a spoken answer to your teacher and their answer back to you.
- To process subscriptions (via LiqPay) and prevent abuse.
- To communicate service and billing information.
Legal bases (GDPR): performance of contract, legitimate interests, and consent where required.
4. Who we share it with (sub-processors)
- Telegram — message delivery (the platform the bot runs on).
- LiqPay (PrivatBank) — payment processing. Wordivo is the seller of record and is responsible for the underlying sale, not LiqPay.
- Microsoft — text-to-speech. To pronounce a word or read a sentence aloud, the text is sent to Microsoft's speech service. That text is your own vocabulary, so please don't save anything private as a "word". Audio is cached so the same text is sent once, not on every review.
- Hosting/infrastructure: Railway (application), Neon (database) and Vercel (this website).
- Backups: a weekly copy of the database is kept on our own equipment and a second copy in Apple iCloud Drive; the eight most recent copies are retained (about two months), then deleted. Backups contain the same data as the live database, with payout details still encrypted and no secrets or keys.
- Teacher payouts are transferred manually by us to the bank/payment details the teacher provides in-app; we don't route payouts through a fixed third-party payout provider. Those details are encrypted before they are stored, with the key held outside the database; a teacher sees only a masked version of their own entry on screen.
We do not sell your personal data.
This website loads no third-party fonts, scripts, analytics or cookies — everything it needs is served from our own domain, so visiting it does not tell anyone else that you did.
5. International transfers
Your data may be processed outside Ukraine/EU by the providers above, under appropriate safeguards (e.g. standard contractual clauses where required).
6. Retention
References to voice recordings are learning data and go the same way as the rest of it. How long the audio itself remains reachable is Telegram's to decide, not ours — we hold a reference, not a file.
Learning data is kept while your account exists, and is deleted within 30 days of an erasure request or after 24 months of complete inactivity. Payment records are kept for 3 years to meet accounting obligations — when an account is erased those records stay, but the link to you is removed, so what remains is an amount and a date with no person attached.
7. Your rights
Subject to applicable law, you may request access, correction, deletion, export, or restriction of your data, and you may object to certain processing. To exercise any right, email hello@wordivo.co. EU users may also complain to their local data-protection authority.
8. Children
Wordivo is not directed to children under 16. If you believe a child has provided data without consent, contact us and we will remove it.
9. Security
We use reasonable technical and organizational measures to protect your data. No method of transmission or storage is 100% secure.
10. Changes
We may update this policy; material changes will be announced in-app or by email.