Zásady ochrany
súkromia

• Word list:words, translations, examples, notes, learning status, test results, an unfinished test and settings. The file library.json in the app's storage.
• Protection state: whether protection is on, the current unlocked session, the queue of words received through Share and the queue of countdown messages. Storage shared by the app and its extensions (App Group).
• In this iPhone's Keychain: access details for the countdown server and, if you entered it, your OpenAI API key.

I do not send this data anywhere and have no access to it. If you back up your iPhone (iCloud or computer), iOS may include it according to your settings. The countdown message queue and sensitive files are excluded from backup.

aspondaco uses Apple's Family Controls, Managed Settings and Device Activity frameworks with a permission you grant yourself for your own device. iOS gives aspondaco the apps you choose only as opaque tokens. The app cannot read app names or the list of installed apps from them. Tokens stay on the device. They are not sent to a server, written to diagnostics or included in the word list export.

a) Ending the countdown (Live Activity)

When you unlock an app, aspondaco starts a countdown on the Lock Screen. So that it can end even when aspondaco is not running, the app sends a short message to a server I operate on the Vercel platform (the function runs in the Frankfurt, Germany region). The server passes it to Apple Push Notification service (APNs), which ends the countdown.

The message contains only:

• a random session identifier (UUID), new for every unlock,
• the Live Activity push token from Apple, valid only for this one countdown,
• the number of granted minutes,
• the number of used minutes,
• the time the app recorded the event,
• a flag saying the countdown has ended.

It does not contain your name, email, device identifier or advertising identifier, words, answers, app names or Screen Time tokens.

The server does not store the message and has no database. The server log records only the APNs result, the number of used minutes and the end flag, without the token and without the UUID. As the infrastructure provider, Vercel technically processes the IP address when delivering the request and keeps logs under its own terms (1 hour on the current plan). I do not analyse the IP address or combine it with other data.

b) Translation suggestions through OpenAI (optional)

This feature is off until you enter your own OpenAI API key in Settings. The key is stored only in your iPhone's Keychain and is sent only to OpenAI to authenticate your account. When you then ask for a translation suggestion in the word editor, the app sends the expression you typed (foreign or Slovak, up to 1,000 characters) and the language pair directly from your iPhone to OpenAI (api.openai.com). I add no user or device identifier to the request. The request goes to your own OpenAI account and OpenAI processes it under its API terms and privacy policy (including its retention period). I have no access to it. Your whole word list, test results and app selection are never sent. Without a key nothing is sent to OpenAI, and you can always enter a translation by hand.

c) What is not sent

• Pronunciation uses iOS voices on the device.
• A word received through Share is stored only on the device. A received URL is stored as text; the app does not open it.
• A word list export is a file that you save or send yourself, wherever you choose.

There are no accounts or sign-in. I use no analytics, advertising, tracking or third-party SDKs. I do not sell data or share it for marketing. If you enabled sharing analytics with app developers in iOS, Apple may give me anonymous crash reports under its own rules.

• Vercel Inc. (USA), provider of the countdown server. The function runs in Frankfurt.
• Apple Inc. (USA), operator of APNs.
• OpenAI (USA), only if you use translation suggestions with your own key, under your own relationship with OpenAI.

With companies based in the USA, data may be transferred outside the EU under their contractual safeguards (for example the EU-US Data Privacy Framework or standard contractual clauses).

The app sends the countdown message and the translation request to provide a feature you turned on or asked for (Art. 6(1)(b) GDPR). The data is designed not to identify you.

Data on the device stays until you delete it or uninstall the app. The countdown message is not stored on the server; it is only passed to APNs. Server logs (without tokens and UUIDs) are kept by Vercel as described in 03 a).

• Deletion:uninstalling aspondaco makes iOS delete the word list and protection state. iOS may keep Keychain items after uninstalling, so delete your OpenAI API key in the app's Settings before uninstalling.
• Backup and transfer: export the word list as a JSON file in Settings and import it later.
• Screen Time: pause protection in the app (Prístup / Access) and revoke the permission in iPhone Settings.

Under the GDPR you have the right of access, rectification, erasure, restriction and objection. Because there are no accounts and countdown messages do not identify you, I usually cannot link any data to you. Write to me at marek@cezzo.sk and I will help. You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).

aspondaco is not a parental control app and does not manage other people's devices. I do not knowingly collect data from children.

If the data the app sends changes, I will update this policy and its effective date. For a significant change I will also mention it in the release notes.