SCROLLITO

Your words. Your data.

This policy explains the data used by Scrollito, our Spanish-learning app and website. Publisher and data controller: Start Learn LLC, 3402, 1603 Capitol Avenue, Suite 413A, Cheyenne, WY 82001, USA. Contact: hello@onewordnow.app.

Your account and progress

If you create an account, Firebase Authentication processes your account ID, display name, email, and the information needed for your sign-in method. Google or Apple supplies the information you agree to share. Firebase handles passwords; we do not store them in our CRM.

Firestore stores your profile and the information needed for rankings: XP, accepted answers, word, game and attempt identifiers, and timestamps. Your display name, XP and rank can appear in the weekly and all-time leaderboards. Your email is not displayed there. Choose a public display name you are comfortable sharing.

If you are signed in, your learning history is backed up in Firestore under your account so it can be restored on another device or after reinstalling: learned words and their review schedule, practice days, lesson counts, XP totals, badges and starred words. It is merged back when you sign in and erased when you delete your account. Rankings never read this backup; they count only accepted answers. Without an account, learning history stays on your device only. Language preferences, daily allowances and selected-app settings always stay on your device.

The optional daily reminder is a notification scheduled on your device at the time you choose. It is off by default and sends nothing to our servers; you can turn it off in your profile or in your device settings.

Android app pauses

This optional feature requires your explicit agreement before you enable it in Android Accessibility settings. It observes foreground app package identifiers and elapsed foreground time to open the lesson you requested. Blocker state and daily counts stay in the app’s private device preferences.

The service does not retrieve screen content. It does not read your messages, passwords, or the pages and videos you scroll through. You can change selected apps or disable the feature in the app or Android settings. iPhone app blocking is not available.

Speaking exercises and pronunciation

Speaking exercises are optional. The microphone is used only after you tap its button in an exercise, with your system permission. Your device’s speech recognition (for example Google’s on Android or Apple’s on iPhone) turns your voice into text to check the word; it may process the audio off the device under that provider’s terms. Scrollito does not keep the recording or the recognized text, and does not send them to our servers. You can skip an exercise, turn these exercises off in your profile, or remove microphone access in your device settings.

Pronunciation recordings for some topics are downloaded from Firebase Storage (Google) the first time you study them, then kept on your device. These downloads do not include your account; as with any internet request, Google processes technical connection data such as your IP address to deliver them.

Sentence feedback

When you ask the app for feedback on a sentence you wrote or said with a topic’s words, our server sends that sentence, the topic’s words and your app language to OpenAI, which returns a correction and a short comment. OpenAI processes this text under its API terms and does not use it to train its models. We do not store the sentence or the reply; we keep only a daily count per account (20 a day) to limit the cost. If you say the sentence, your device’s speech recognition turns it into text first, as in the speaking exercises.

Subscriptions

RevenueCat associates your account identifier with purchases, products, subscription status, and technical store information needed to validate access. Google Play or the App Store handles payment; we do not receive your full payment-card details. Deleting an account does not automatically cancel a store subscription.

Crash reports

If the app crashes or hits an unexpected error, Firebase Crashlytics (Google) receives a report with the device model, the operating system version, the app version, the technical stack trace and a Crashlytics installation identifier. The report does not include your account identifier, your email or your learning content, and it is used only to find and fix bugs. It is sent only by released versions of the app.

Usage statistics

To see where people get stuck, the app counts a few anonymous steps: each onboarding step reached and finished, a first finished lesson, a view of the Premium screen (and the screen it opened from) and the start of Premium. Each step is sent once, with a random identifier created by the app (not your account), the platform, the app language and the language you are learning. Nothing else is sent: no name, email, words or answers. The identifier is replaced every 13 months and the events are deleted automatically after 25 months. They are stored in Firestore (Google), acting as our service provider, and are used only for our own statistics: never for advertising, never shared. You can turn this off at any time in Settings → Share anonymous usage; the app then sends nothing more and forgets the identifier.

News and offers

Our CRM also keeps your account email, name and language, the choices you make while setting up the app (such as your daily goal, reminder and paused apps) and a summary of your progress (words learned, streak, lessons), so we can manage your account and adapt our messages to you. When you create an account, you can choose to receive Scrollito news and offers by email. The box is unticked by default and the app works the same either way. If you agree, our CRM stores your email, language, account identifier, and the date and source of your consent, and we use them only to send Scrollito news and offers. You can stop at any time with the unsubscribe link in every email, the News and offers switch in the app’s Settings, or by writing to us. Deleting your account also stops these emails. If you also keep the weekly recap switched on in the app, we email you a Sunday summary of your week (words, topics, days and streak), and after three days without a lesson we may send a short reminder; both stop with the same unsubscribe link or switch.

Early access and the website

The early-access form stores your email, language, signup source and timestamped consent in our CRM so we can send launch and product news. You can withdraw consent by email or through the unsubscribe link in messages. Joining does not create an app account or make a purchase.

The website uses essential session and form-protection cookies. This version of the theme does not load advertising pixels or third-party analytics. Hosting can process technical connection information, including IP addresses, to deliver and protect pages. The sample word game runs in your browser and does not send your answers.

Why we use data and who helps

We use account and learning information to provide the service and rankings you request, purchase information to manage access, and technical data to protect the service. Launch messages rely on your consent. Providers include Google/Firebase (including Firebase Crashlytics), RevenueCat, OpenAI (sentence feedback), the app stores, and our Laravel Cloud hosting. They may process information in different countries under their applicable contractual safeguards. We do not sell your data, and this theme does not use it for targeted advertising.

Retention and deletion

Account data remains necessary while you use the service. You can request deletion from your app profile or without reinstalling the app through our account deletion page. That page explains the account and ranking data removed, store information, and the pseudonymous guard against recreating deleted accounts. Accounting records or limited information needed for legal obligations or security may need to remain; we explain any applicable exception when handling your request.

Your choices and rights

You can request access, correction, deletion, a portable copy, or restricted use of your information, object to certain processing, and withdraw consent to messages. Contact hello@onewordnow.app. We may verify your identity and respond within applicable time limits. You may also contact your data protection authority. The service is not designed as a service for children; contact us if a child has supplied data without the required permission.