Privacy Policy
This Policy explains what personal data Retite collects, why, who receives it, how long we keep it and how you can control it. It covers the Retite apps for iPhone and Android (the "App"), the service behind them and this website.
The controller of your personal data is Retite Ltd ("Retite", "we", "us"), a company registered in England and Wales under company number 17341581, registered office 56 Rathcoole Gardens, London N8 9NB, United Kingdom. For anything about your data, write to support@retite.app.
1. In short
- We collect what the App needs to work: your account, your learning progress and the text you send us to look up, translate or hear.
- Words and phrases you look up or translate are sent to AI, translation and speech providers to produce the result.
- The free plan shows ads from Google AdMob. In the UK, EEA and Switzerland we ask before ads are personalised, on iPhone we ask before your advertising identifier is used, and everywhere you can turn personalisation off (section 5).
- We use analytics and crash reports to improve the App; both providers store the data in the European Union.
- We do not sell your personal data for money. You can delete your account and its data in the App at any time.
2. What we collect
Account. Your email address; your name, if you enter it or Apple or Google share it when you sign in; a password if you sign up with email, stored only as a secure hash; and the identifiers and tokens that Sign in with Apple or Google Sign-In give us.
Profile and preferences. Your native language, App language, English level, British or American English, interests, daily goal, reminder settings and, if you answer, how you heard about us.
Learning data. The words you add, your answers and review history, your review schedule, level test results, progress with irregular verbs and the word suggestions we prepare for you.
Text you enter. Words you search for, the letters you type while the App suggests words, text and phrases you translate, text you ask the App to pronounce, and the reports you send us about dictionary entries.
Voice. When you answer aloud or dictate, your device's built-in speech recognition turns speech into text on the device. We do not receive or keep recordings of your voice. Text that you then send us is handled as text you enter.
Purchases. If you subscribe to Retite Pro: the store you used, the product and plan, the store's transaction or purchase identifiers, the subscription status, dates and price. Apple or Google take the payment; we never receive your card or bank details.
Notifications. If you allow notifications, a push token that Apple or Google issues for your device, so that we can send the reminders you set and keep the App's widgets up to date.
Device and technical data. IP address, device model, operating system, App version, language and time zone, the identifiers that the App and our service generate (an account ID and an analytics ID for your installation), diagnostic logs and crash reports.
Usage analytics. Events describing how you use the App — for example the onboarding steps you reach, whether you create an account, searches, reviews, opening the subscription screen and purchases — together with the device and technical data above and an approximate location (country and city) that our analytics provider derives from your IP address. Before you create an account the events are tied to the analytics ID of your installation; afterwards, to your account ID as well. We do not send your name or email address to analytics.
Advertising data. On the free plan, Google's advertising software in the App collects your device's advertising identifier (on iPhone only if you allow tracking), IP address, device and App information and how you interact with ads. Google collects this directly; see section 5.
Messages to us. Your email address and whatever you write when you contact us.
Website. This website uses no cookies and no analytics. If you joined our waitlist before launch, we hold the email address you gave, your platform, native language and English level if you gave them, the campaign or site that referred you, your country and a one-way hash of your IP address.
We don't ask for sensitive data such as health information. Please don't put it, or other people's personal data, into searches, translations or reports.
3. How we use it and why we are allowed to
UK and EU data protection law requires a legal basis for each use of personal data. These are ours:
- Providing the App — your account and sign-in, the dictionary, translations, pronunciation, reviews and reminders, purchases and access to Retite Pro, account emails such as verification codes, and answering your requests. Basis: performing our contract with you, the Terms of Use.
- Keeping the App secure — preventing fraud, scraping and abuse, enforcing usage limits and our Terms, and investigating suspicious activity. Server logs are analysed automatically to spot unusual activity; a person reviews it before an account is restricted. Basis: our legitimate interest in protecting the service and the people who use it.
- Fixing and improving the App — crash reports, diagnostics, usage analytics, and anonymised review statistics that improve the dictionary and the review schedule. Basis: our legitimate interest in a reliable App that gets better. You can object at any time (section 9).
- Advertising on the free plan — showing and measuring ads. Personalised ads and use of the advertising identifier on iPhone: your consent, where the law requires it. Non-personalised ads and ad fraud prevention: our legitimate interest in funding the free plan.
- Notifications and the microphone — only after you grant the permission on your device. Basis: your consent, which you can withdraw in your device settings.
- Legal obligations — keeping records required for tax and accounting and responding to lawful requests from authorities. Basis: legal obligation.
The App chooses which words to suggest and when to review them from your level and answers; that is the service you ask for. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.
4. AI, translation and speech
Several features work by sending text to specialised providers:
- When you look up a word that is not in our dictionary yet, the word is sent to a third-party AI provider whose model writes the entry. The new entry joins the shared dictionary that every learner sees, with no link to you.
- When you translate, your text and any context you add are sent to third-party machine translation and AI providers. To find which meaning of a word fits your phrase, we send the phrase, its translation and the word's meanings to an AI provider. We do not keep the text you translate once the result is returned.
- When you ask the App to pronounce something, the text is sent to a speech synthesis provider. The audio may be kept on our servers for reuse, with no link to you.
- Suggestions as you type come from a word suggestion service, which receives the letters you have typed.
These providers receive the text, not your name or email address, and process it to return the result to us under their agreements with us. AI-written and machine-translated content can contain mistakes; see the Terms of Use.
5. Advertising
The free plan shows ads served by Google AdMob. Retite Pro subscribers, and new accounts during their free period of full access, see no ads.
Google receives the advertising data described in section 2 directly from its software and uses it as an independent controller to show, limit, measure and personalise ads and to prevent fraud, under the Google Privacy Policy. Google explains how it uses information from apps that use its services. Google may work with the other advertising companies named in its consent message.
Your choices:
- UK, EEA and Switzerland: before the App requests ads, Google's consent message asks whether they may be personalised. You can change your answer at any time in Settings → Privacy choices.
- iPhone: the App asks before your advertising identifier can be used for tracking. You can change this in iOS Settings → Privacy & Security → Tracking.
- Android: you can delete or reset your advertising ID, or opt out of ads personalisation, in your device settings (usually Settings → Privacy → Ads, or Settings → Google → Ads).
- If you decline personalisation, you still see ads, but they are not based on a profile of you. Retite Pro removes ads altogether.
In some US states, letting advertising partners use device identifiers for personalised ads can count as "selling" or "sharing" personal data or as "targeted advertising". You can opt out with the settings above or by writing to us.
6. Who we share data with
We share personal data only as this Policy describes, with these recipients:
- Apple — Sign in with Apple, App Store purchases and subscription status, notifications on iPhone. Apple acts under its own privacy policy.
- Google — Google Sign-In, Google Play purchases and subscription status, notifications on Android, and ads (section 5). Google acts under its own privacy policy.
- AI and language service providers (in the United States and the European Union) — writing dictionary entries, translation, finding the meaning of a word in your phrase, pronunciation and word suggestions (section 4).
- An email delivery provider (United States) — account emails such as verification and password reset codes.
- An analytics provider (EU data centre) — usage analytics.
- A crash reporting provider (EU data centre) — crash and error reports with technical data about the error and the device. We filter email addresses and request contents out of the reports our servers send.
- Hosting and infrastructure providers — the servers in the UK that run our service, encrypted backups, a standby copy of our database, network protection and delivery for our servers and this website, and forwarding of email sent to support@retite.app.
Our service providers may use personal data only to provide their services to us, on our instructions, and are bound by contract to protect it at least as well as this Policy describes. Write to us if you would like the current list of our service providers.
We may also disclose personal data to our professional advisers; where the law or a valid request from a public authority requires it; to protect the rights, safety or property of Retite, our users or others; or to a buyer or successor if our business or the App is transferred, who must then protect it as this Policy describes. We do not sell personal data for money.
7. International transfers
We are based in the UK and our servers are in the UK. Some of the providers above process data in the United States or other countries. When personal data leaves the UK or the European Economic Area, we rely on adequacy regulations or decisions, such as the UK–US Data Bridge and the EU–US Data Privacy Framework for certified providers, or on the standard contractual clauses approved for the UK and the EU that are part of each provider's data processing terms. Write to us for more detail.
8. How long we keep it
- Account, profile, learning data and push tokens: while your account exists. When you delete your account, we delete them from our live database straight away.
- Backups: deleted data stays in our encrypted nightly backups until they are replaced, within about 15 days. We use backups only to restore the service after a failure.
- Server logs (IP address, account ID and the address of each request, which can include a word you searched for) and diagnostic logs from the App: up to about three weeks, then deleted automatically.
- Verification codes: 15 minutes.
- Crash reports: up to 90 days at our crash reporting provider.
- Analytics events: kept by our analytics provider under your account ID and the analytics ID of your installation, without your name or email address. They are not deleted automatically when you delete your account; ask us and we will have the provider erase them.
- Review history and reports about dictionary entries: when you delete your account we remove your account ID from them. The anonymised records stay, to improve the dictionary and the review schedule.
- Subscription records: after you delete your account we keep the store's transaction or purchase identifier and the subscription status, with no link to you, so that the subscription can be restored to another account on the same Apple ID or Google account, and to keep the records the law requires.
- Messages to us: as long as we need to resolve your request and keep a record of it.
- Waitlist: until we have told you about the launch on your platform, or until you ask us to delete it, whichever comes first.
- Where the law requires us to keep data for longer, for example for tax or to establish or defend legal claims, we keep it for that period only.
9. Your rights and choices
Depending on where you live, you have the right to access your personal data, correct it, delete it, restrict or object to how we use it, receive it in a portable format, and withdraw your consent at any time without affecting what was done before.
- In the App: change your name, email address, password and learning preferences in Settings; change your ad choices in Settings → Privacy choices, where the App shows it; delete your account in Settings → Delete account.
- On your device: turn notifications, microphone, speech recognition and tracking permissions on or off in your device settings.
- By email: for anything else, including a copy of your data or erasing your analytics data, write to support@retite.app from the address on your account. If you can't open the App, see how to request deletion without it.
We answer within one month and may ask you to confirm that the request comes from you. We don't charge for this unless a request is clearly unfounded or excessive.
Deleting the App from your device does not delete your account, and deleting your account does not cancel a subscription: cancel it in your App Store or Google Play settings.
If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority where you live or work.
10. Security
Connections to our service are encrypted. Passwords and verification codes are stored only as hashes, backups are encrypted, and access to our servers is restricted and monitored. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach is likely to put your rights at risk, we will tell you and the regulator as the law requires.
11. Children
The App is not directed to children. You must be at least 13 to use it, or older if your country sets a higher age for consenting to online services. We do not knowingly collect personal data from children below that age. If you believe a child has given us personal data, write to us and we will delete it.
12. Changes to this Policy
We update this Policy when the App or the law changes, and the date at the top shows the latest version. If a change materially affects how we use your personal data, we will tell you in the App or by email before it takes effect.
13. Contact
Write to us at support@retite.app. Our company details are at the top of this Policy.