WordFlow Privacy Policy
WordFlow is made by Melon Labs (ABN 31 267 542 900), a sole trader business based in New South Wales, Australia. This policy explains what information the WordFlow app handles, what leaves your device, and what never does. It is written to describe what the app actually does, not what a template says.
The short version:
WordFlow has no accounts and no sign-in. Your practice sessions, recordings, transcripts, and stats live only on your phone. WordFlow has no backend server, so there is nowhere for us to send your voice even if we wanted to.
Speech transcription runs entirely on your device. There are no ads in WordFlow and no usage tracking.
Two things can leave your phone, and only two. Crash reports (Sentry), which are off unless you switch them on and are never available on an under-13 profile. And, if you buy WordFlow Pro, an anonymous purchase record (RevenueCat). Neither includes your identity, your recordings, or anything you said.
Your voice recordings
If recording is enabled, WordFlow records your practice sessions so you can play them back and see your speech report. Recordings are saved in the app's private storage on your device. They are never sent to us, to any server, or to any third party. You can turn recording off with the microphone toggle on the session screen, and you can delete any recording from the Recordings tab. Deleting the app deletes them all.
One honest caveat: like most app data, recordings and practice history can be included in your phone's own cloud backup (iCloud or Google backup) under your own account. That backup belongs to you; we never receive it. You can exclude WordFlow from device backups in your phone's settings.
Transcription happens on your phone
WordFlow's speech report (transcripts, filler-word counts, pace) is produced by a speech-recognition model that runs entirely on your device. Your audio is never uploaded for processing. The app downloads the speech model once (a plain file fetch from a public server, containing nothing about you); after that, transcription works offline. Transcripts and speech metrics are stored in the app's local database only.
Your profile name
The speaker name you enter when setting up a profile is not an account. It is stored only on your device, together with your chosen colour and practice settings, and is never transmitted anywhere.
What we do not collect
- No account or sign-in. We never ask for or hold your name, email address, phone number, or password.
- No ads and no usage analytics. WordFlow contains no ad network and no product-analytics tracker. We do not measure which features you use.
- No advertising identifier. The app never reads your device's advertising ID (IDFA on iOS, advertising ID on Android), and never asks our purchase provider to collect it.
- No location, contacts, photos, camera, or calendar access. The app never requests these permissions. The only sensitive permission it asks for is the microphone, for recording your own practice.
What does leave your device
- Crash and performance reports, only if you turn them on. Crash reporting is off by default. If you switch it on in Settings, a technical report goes to Sentry, our error-reporting service, when the app crashes or runs slowly. Reports contain the error details plus basic device context such as device model, operating system version, and language. We have configured Sentry not to collect your IP address or any personal identity data, and to attach no screenshots and no screen layout, so reports never include your recordings, transcripts, profile name, or any words from your sessions. On an under-13 profile the setting is not offered at all and crash reporting never runs.
- Purchase records, only if you buy Pro. WordFlow Pro is a one-time purchase, processed entirely by Apple or Google. We never see your payment details. RevenueCat, our purchase-management service, receives an anonymous ID it generates itself plus the store transaction, so the app can remember that you own Pro after a reinstall. We attach nothing to that ID: no name, no email, no advertising identifier.
- The speech model download. A one-time download request to fetch the transcription model, as described above.
Practice reminders
If you turn on reminders, they are scheduled locally on your device. There is no push-notification server and nothing about your practice schedule leaves your phone.
Services we use
- Sentry (crash and performance reporting), only when you have turned it on, as described above.
- RevenueCat (purchase management), only if you buy Pro, as described above.
- Apple App Store and Google Play process all payments under their own terms and privacy policies.
We do not sell, rent, or trade any data, and we do not share data with anyone beyond the services listed above. Any third party that receives data through the app is required to protect it to the same standard described in this policy.
Keeping and deleting data
Because WordFlow has no accounts, there is no profile of you for us to keep or delete. Everything the app stores lives on your phone and is removed when you delete individual recordings or uninstall the app. Crash reports in Sentry, if you turned them on, are kept only as long as needed for debugging, and anonymous purchase records in RevenueCat only as long as needed to honour your purchase. If you would like data connected to your device deleted from either service, email us and we will action it.
Children
WordFlow can be used by children, so when you set up a profile the app asks for a birth year. A profile for someone under 13 runs in child mode, and so does a profile where the question has not been answered yet. We deliberately resolve the borderline case toward child mode.
In child mode:
- Crash reporting is not offered and never runs, so no third-party service receives anything about that profile.
- Recording starts switched off, and has to be turned on deliberately.
- Buying Pro and following any link out of the app sit behind a parental gate.
Recordings, transcripts, and practice history are stored only on the device and are never transmitted, shared, or exported, for children and adults alike. Because that content never reaches us, we do not collect personal information from children as COPPA defines it, and no verifiable parental consent is required. If a sync, sharing, or export feature is ever added, this section and that arrangement change first.
Security
Everything the app sends is encrypted in transit using HTTPS. Your recordings and practice data are stored in the app's private sandbox, which other apps on your phone cannot read. The services we use (Sentry, RevenueCat) are established providers with their own security programs.
Your rights
We handle information in line with the Australian Privacy Principles. Depending on where you live, you may also have rights under laws such as the GDPR (Europe) or CCPA (California), including the right to access or delete data about you. Given how little we collect, the practical way to exercise any of these rights is to email us; we will respond to every request. If you are unhappy with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or your local data-protection authority.
Changes to this policy
If we change what the app collects, we will update this page and change the effective date at the top before the new behaviour ships. Significant changes will also be noted in the app's release notes.
Contact
Melon Labs
Email: [email protected]