This English version is the binding one. Last updated: October 4, 2026
Workphrase is an app for learning work English. This page explains what data we keep, why, for how long, and who helps us process it.
What we keep
Account: your email address and how you sign in. Your name, only if you give it to us or Apple shares it the first time you sign in with Apple. Giving a name is optional. A password only if your account has one, stored only as a hash.
Sign in with Apple or Google: the account ID that Apple or Google gives us for Workphrase and the email address they share. See «Sign in» below.
Guest profile: if you start without an account, your answers to the first questions, your languages, App Store country, time zone, iPhone model and progress. See «Guest mode» below.
Learning profile: your level, goal, job, industry, deadline, daily goal and reminder time.
Languages and region: the interface language, the language of translations you chose, your phone's language and your App Store country, if the app sends them.
Progress: your answers in exercises and games, lessons, streak, deck and settings.
AI checks: the sentences you send for checking and the AI's answer.
Ideas and problems you send us: your text, screenshots you add and some details about the app. See «Ideas and problems» below.
Purchases: when you buy Pro, Apple tells us which plan you have, its status, dates and price, and transaction IDs. The app gives Apple a code that stands for your Workphrase account, not your name or email, so that we can connect the purchase to your account. We never see your payment card.
Usage events and request logs: which screens and actions were used, the app version, and technical logs of requests to our server, including your IP address. Usage events carry a random install ID that the app creates, so that we can count events before you sign in. It is not your advertising ID. Whether the app sends usage events depends on your choice and on the country of your App Store: see «Usage statistics» below.
Reports about phrases: which phrase you reported and why. A report has no text from you.
Sign in
You can sign in with Apple or with Google.
Apple. Apple gives us an ID for your account, your email address and, the first time only, your name if you choose to share it. If you use Hide My Email, we get a private Apple address, not your real one. Apple forwards our emails from it to your real address. Apple may also tell us whether the account is likely used by a real person. We use this only to protect the service from abuse. We keep a sign-in token from Apple in encrypted form, only so that we can turn off Sign in with Apple for Workphrase when you delete your account or remove this sign-in method.
Google. Google gives us an ID for your account, your email address and whether Google has confirmed it. We keep only these three things. We do not keep your name, profile photo or work domain from Google, or any Google tokens.
We never get your Apple or Google password, your contacts or other data from those accounts. We connect a sign-in method to an account by the ID from Apple or Google, not by the email address. If Apple or Google confirms an email that already has a Workphrase account, we add this sign-in method to that account. A Hide My Email address is never used to connect accounts.
Guest mode
You can start learning without an account. Then we create a guest profile on our server. It keeps your answers to the first questions, your languages, App Store country, time zone, iPhone model and progress. It has no name and no email.
To connect this iPhone to your guest profile, the app keeps a random key in the iPhone Keychain. We store only a hash of this key. The key is not copied to other devices. It usually stays on this iPhone even if you delete the app and install it again.
Guests cannot use the AI check or sign in on another device. You can buy Pro as a guest: Apple links the purchase to your Apple Account.
Save progress. When you sign in with Apple or Google, your guest profile becomes your account. Your progress stays.
Sign in to an account you already have. We move the guest progress and your messages to us into that account and delete the guest profile.
Delete. You can delete your guest profile at any time: Profile → Settings → «Delete data».
No activity. If a guest profile is not used for 90 days and has no subscription, we delete it automatically. Its usage events stay, without any link to it.
Ideas and problems
In the app you can send us an idea or tell us about a problem. Then we get:
the topic you chose and your text;
up to 3 screenshots, if you add them. Before sending, your iPhone makes a new copy of each image without location, date and other hidden details. Our server makes one more new copy. The app does not get access to your photo library;
details that help us understand your message: app and iOS version, iPhone model, the screen you came from, the phrase or lesson if you wrote from it, app language and translation language, your level, whether Extra help is on, your plan, your learning stage (for example, new or returning), App Store country and how many days you have studied. For problems, also the last connection errors in the app, without their content.
The message is linked to your account or guest profile. You can see this list in the form before you send.
Why. To answer you, fix problems and decide what to build next. Ideas go into our plan as short summaries and counts, without your name or email.
Who sees it. Only the Workphrase team, and only with our highest admin access. Screenshots open only through links that work for 5 minutes. We log who opens a message or a screenshot and every export. Exports have no email address or account ID. Your text does not go into usage events or technical logs. A usage event has only the topic, where you opened the form, the approximate length and simple flags, for example whether you added a screenshot.
AI. To sort messages, find repeats and draft replies, we use an AI model that runs on our own computers. Your messages and screenshots are not sent to any external AI service. A person reads every message and sends every reply.
Replies. We reply only if you turn on «Reply to me by email». We write from our support mailbox to the email of your account. If it is a Hide My Email address, the reply goes through Apple. A guest profile has no email, so we cannot reply to a guest by email.
How long. We delete messages marked as spam after 30 days and all other messages after 24 months. We delete screenshots 90 days after we close the message, and never later than 12 months after you send it. When you delete your account or guest profile, we delete your messages and screenshots at once.
On your iPhone. If you close the form, your text stays on your iPhone as a draft for up to 7 days. Screenshots are not kept in the draft. A message that waits for a connection stays on your iPhone with its screenshots until it is sent. When you sign out or delete your account, all of this is deleted from the iPhone.
Usage statistics
Usage statistics are events about what you do in the app, for example the screens you open, your answers in exercises, your settings and purchases. They help us improve the app. We do not use them for ads. They are linked to your account or guest profile, so we do not call them anonymous.
In the EU, the EEA, the UK and Switzerland (we go by the country of your App Store), we ask you first. Until you answer, the app sends no usage events. If you tap «Don’t allow», we do not send them and do not ask again. If the app cannot tell the country of your App Store, it works the same way.
In all other countries, usage statistics are on from the start, and you can turn them off at any time.
Wherever you are, you can change your choice at any time in Profile → Settings → Privacy → «Usage statistics». Turning it off is as easy as turning it on. When it is off, the app stops sending usage events and deletes the ones it has not sent yet, and our server stops recording usage events for your account. The app works the same either way.
If the country of your App Store changes to one where we ask first, we stop sending usage events and ask you, unless you have already said yes in one of those countries. If you turned usage statistics off, they stay off in every country.
We keep your answer with its date, whether it was given in a country where we ask first, and the version of the question, as a record of your choice. It is deleted with your account or guest profile.
Even when usage statistics are off, reports about a mistake in a phrase that you send on purpose still reach us, and we keep a record of actions our staff take on your account, for example giving you Pro. We always keep what the app needs to work: your account, progress and answers, and technical request logs.
Why
To run your account, choose lessons, show phrases in your language, count your progress and streak, protect the service from abuse and improve the app. We do not sell your data and do not show ads.
AI
Explanations in the «AI check» are written by an AI model, not by a person, and can be wrong. When the AI check is on, your text and the phrase you are learning are sent to the AI model, without your name, email or account identifiers. Please do not write personal data there. At launch the AI check is switched off, so nothing is sent.
Who helps us
Hetzner Online GmbH — our servers, in Germany (EU).
Cloudflare — network protection and delivery, and encrypted backup storage.
Resend — sending emails, for example a password reset code.
Apple — purchases go through the App Store, so we do not see your payment card. Also Sign in with Apple, if you use it.
Google — Sign in with Google, only if you use it.
How long we keep it
Account, profile, progress and settings — until you delete your account.
AI checks — 90 days, then they are deleted automatically.
Technical request logs with IP addresses — 90 days, then they are deleted automatically.
Guest profiles — deleted after 90 days without activity, unless they have a subscription.
The Apple sign-in token — until you delete your account or remove Apple sign-in. After that, up to 30 days, only until Apple confirms that Sign in with Apple is turned off.
Ideas and problems: the text — 24 months; screenshots — 90 days after we close the message, and never longer than 12 months; spam — 30 days. Then they are deleted automatically.
Backups. When you delete something, it is deleted from our working database at once. Our encrypted backups can still keep it for a limited time, until they are replaced on schedule. Only we have the key to the backups. We use backups only to recover from a failure.
When you delete your account or guest profile, we delete the account, progress, deck, AI checks, your messages and screenshots, and waitlist entries for your email, and we turn off Sign in with Apple. Usage events stay, but we remove from them your account ID, the install ID and any personal details, so they are not linked to anyone. Request logs stay without your account ID until they are deleted after 90 days. For 90 days we keep only a note that the account with this internal number was deleted, so that it stays deleted.
Your rights
You can see, change and delete your data. Delete your account in the app: Profile → Settings → Account → Delete account. A guest can delete the guest profile in Profile → Settings → «Delete data». To get a copy of your data or to ask a question, write to us at support@workphrase.app. If you live in the EU, the EEA, the UK or Switzerland, you can also complain to your data protection authority.
Children
Workphrase is made for adults who use English at work. It is not meant for children under 13.
Changes
If we change this policy, we update the date at the top and tell you in the app if the change is important.