WonderLang Privacy Policy

Effective date: 19 October 2026

1. Who we are

WonderLang is operated by Jonathan Bariller, trading as WonderLang, France. Jonathan Bariller is the controller responsible for the personal information described in this policy.

Privacy contact: contact@wonderlang.app

This policy explains how we collect, use, disclose, retain, and protect personal information when you use the WonderLang iOS and Android apps and related account, purchase, cloud-save, and support services. It also describes relevant processing when you use our website to purchase or manage access.

2. Information we process

Accounts and sign-in

When you create or use a WonderLang account, we process your email address, account identifier, linked sign-in providers and their identifiers, and any name or profile information supplied by your provider.

Available sign-in methods include Google, Apple, and email links, depending on the platform. Apple may supply a private relay email address.

We process authentication and session information to secure your account and maintain sign-in. We do not receive your Google or Apple password.

Purchases and subscriptions

We process product and purchase-provider information, transaction or subscription references, purchase-verification information, relevant dates, amounts and currencies where supplied, and purchase, renewal, expiration, cancellation, refund, or revocation status.

We use this information to grant access, verify subscriptions, restore eligible purchases, prevent receipt reuse, and handle support requests.

Apple and Google handle payments for purchases made through their stores. We do not receive your full payment-card details from those stores. Stripe processes website payments and provides order and payment-status information used to grant access.

Game progress and cloud saves

The app stores settings and saved progress on your device. If cloud saves are available for your account, saved-game files for the selected profile are uploaded with profile names and identifiers, timestamps, revision information, and file-integrity information.

Saved files can contain character or profile names, language selections, learning progress, quests, playtime, and other game state.

Cloud saves are linked to your account and can synchronize between supported devices using the same account and profile. The service maintains the current cloud version and up to three previous revisions for recovery.

Usage and progress analytics

We collect information about interactions such as startup, screens viewed, language-pack downloads, tutorial completion, progress checkpoints, completion of the free introduction, store and paywall visits, purchase-button interactions, and purchase or access-verification results.

Associated information can include app version, platform, event time, selected languages, language level, playtime, and access tier.

Our own progress-reporting service receives a randomly generated player identifier stored on the device, map and checkpoint information, quest counts, character statistics, in-game currency, and selected game settings. These settings include the game’s character or grammatical-gender selection.

The identifier allows events from the same installation to be associated with each other and is not necessarily anonymous.

Device, security, and diagnostic information

We and our service providers process IP addresses, app or installation identifiers, device and operating-system information, app versions, network information, security or integrity signals where enabled, error messages, crash traces, and diagnostic context.

Some providers can derive an approximate country or region from network information. This does not mean the game requests precise GPS location.

Advertising measurement

We use Meta and TikTok tools to measure whether advertising leads to app activity, trials, subscriptions, and purchases, and to evaluate and improve campaigns.

These providers receive relevant event information, such as event type, product, value and currency, together with device, installation, or network information collected by their SDKs.

Advertising identifiers can be processed when available to a provider and permitted by the operating system. Disabling an advertising identifier does not necessarily stop all measurement or data transmission.

Website purchase reporting can also involve purchase events, hashed email addresses, IP addresses, browser information, and advertising click or cookie identifiers when available. A hashed email address can still be used for matching and is not anonymous.

Support and reports

If you contact us, we process your email address, name if supplied, message, and any screenshots, diagnostic reports, or other information you send.

Diagnostic reports can contain device information, error details, and game-state context. Please review reports before sending them and avoid including passwords or payment-card details.

Newsletters

If you subscribe to a WonderLang newsletter, we process your email address and subscription preferences to send the communications you requested. You can unsubscribe using the link in those communications or by contacting contact@wonderlang.app.

Newsletter preferences are separate from account, purchase, support, and app-analytics processing.

3. How and why we use information

We use information to:

  • Authenticate accounts and maintain secure sessions.
  • Verify purchases and subscriptions, grant access, and restore eligible purchases.
  • Store and synchronize progress and recover saved games.
  • Provide support and respond to privacy requests.
  • Detect fraud, abuse, and technical failures.
  • Understand game usage and improve gameplay, reliability, and purchasing flows.
  • Measure and improve advertising campaigns.
  • Send newsletters when requested.
  • Meet legal obligations and handle refunds, disputes, and legal claims.

Where European or UK data-protection law applies, account, access, and requested cloud-save processing is carried out to provide our contractual services. Required legal records and rights requests are processed to meet legal obligations.

Proportionate security, fraud prevention, reliability, and support processing can be based on our legitimate interests, subject to the rights and interests of affected individuals.

Analytics and advertising are subject to their own applicable consent, device-access, and privacy requirements. Reading this policy or continuing to use the app does not itself give consent to advertising tracking.

4. Service providers and other recipients

The following providers receive information for the purposes described in this policy:

  • Google/Firebase: authentication, account and access records, cloud storage, app integrity where enabled, Google Analytics for Firebase, and Crashlytics.
  • Netlify: account/API hosting, progress reporting, and associated service operations.
  • Apple and Google Play: purchases, subscriptions, refunds, verification, content delivery, and platform services.
  • Meta and TikTok: event measurement, advertising attribution, and campaign improvement.
  • Stripe: website payments and related subscription or order processing.
  • Google Workspace and email-service providers: receiving, forwarding, and responding to messages.
  • Google Sheets and MailerLite: related order, contact, and access-delivery records for older website purchase routes, where applicable, and email communications where those services are used.

Authorized WonderLang administrators can access account, purchase, access-rights, and save information when needed to operate the service or handle support. Access to cloud saves is restricted to account and authorized service access.

Providers can act on our instructions or, for some processing, under their own responsibilities and privacy notices.

We may also disclose information when required by law, to protect rights and safety, or in connection with a business transfer subject to applicable legal requirements.

5. Storage and international processing

We are based in France. Our providers operate internationally, and information can be processed outside your country, including in countries with different data-protection laws.

A European storage location for a particular service does not mean that all authentication, analytics, advertising, support, or network processing takes place in Europe.

You can contact contact@wonderlang.app to request information about the providers, processing locations, and transfer arrangements relevant to your information. Provider privacy information is linked at the end of this policy.

6. Your settings and choices

The game’s Options menu includes “Send analytics,” or its localized equivalent. Turning it off stops the game’s own progress telemetry from being sent.

This setting does not disable Firebase Analytics, Crashlytics, Meta, TikTok, essential account or purchase requests, or every diagnostic mechanism.

The current mobile versions do not provide a separate in-app consent control for those SDKs. Device advertising and tracking settings can limit certain identifiers or uses, but do not stop all analytics or network requests.

Any iOS tracking subject to Apple’s App Tracking Transparency rules requires the applicable Apple permission. This policy does not grant that permission.

Signing out preserves local saved games. Uninstalling the app does not delete your cloud account or cancel a subscription.

To make a privacy request or object to processing, email contact@wonderlang.app. Some requests require information sufficient to identify the relevant account or installation.

7. Retention

We retain our own progress-telemetry records, support correspondence and reports, security and administrator logs, and purchase records for up to two years from collection, unless earlier deletion is requested or a longer period is required by law or necessary for a specific unresolved dispute.

Account and cloud-save records are maintained to provide your account and its available features until deletion. Cloud-save recovery includes the current version and up to three prior revisions.

For the mobile Google Analytics property checked on 19 October 2026:

  • Event-data retention is set to two months.
  • User-data retention is set to fourteen months.
  • The user-data retention period resets on new activity.

These Analytics settings do not govern most standard reports based on aggregated data and do not set retention for other providers.

Local saves, preferences, cached access information, queued events, and local reports can remain on your device until removed through the app or operating system. Device backups can retain additional copies under their own settings.

8. Account and data deletion

To request deletion, email contact@wonderlang.app and include the email address associated with your WonderLang account.

Requests are handled personally by Jonathan Bariller. We may need to verify ownership before deleting account information.

We delete your account and associated personal information from the systems we control within 72 hours of receiving a verified deletion request. This includes account-profile information, cloud saves, and associated records that can be identified from your request.

Automatic account deletion is currently disabled; deletion requests are handled manually.

If a legal obligation requires us to retain particular records, or a specific unresolved legal claim prevents their deletion, we retain only the information necessary for that purpose and explain the exception when responding to your request.

Provider-side processing and backup removal can take additional time. Apple, Google, payment providers, and other recipients can retain their own records under their obligations and policies.

Deleting a WonderLang account does not automatically cancel an Apple or Google Play subscription. Cancel subscriptions through the store where you subscribed.

9. Security

We use measures intended to protect information, including encrypted network connections, authenticated access to account and save services, purchase verification, and access restrictions.

Platform security facilities protect certain locally stored account and access information.

No service or transmission method can be guaranteed completely secure. Protect your device and sign-in methods, especially on shared devices.

10. Your rights

Depending on your location and applicable law, you may have rights to:

  • Access, correct, delete, or obtain a portable copy of your personal information.
  • Restrict or object to processing.
  • Withdraw consent where processing is based on consent.
  • Opt out of certain advertising-related uses or disclosures.

Withdrawal does not affect processing already carried out lawfully. Legal exceptions and identity-verification requirements can apply.

Send requests to contact@wonderlang.app.

You can also complain to your local data-protection authority. In France, this is the CNIL.

11. Age policy

WonderLang is intended for people aged 16 and older and is not marketed to children.

If you are under 16, do not create a WonderLang account or provide personal information through our services. This intended-audience policy does not mean the app verifies every user’s age.

If you are a parent or guardian and believe a child under 16 has provided personal information, contact contact@wonderlang.app. We will review the request and delete information we can identify in accordance with the deletion process above, subject to applicable legal requirements.

Store age ratings describe content suitability and may differ from this account and privacy policy.

12. Policy changes and contact

We will update the effective date when this policy changes and provide additional notice or obtain consent where required for a change in processing.

For privacy questions and requests:

Jonathan Bariller, trading as WonderLang
France
contact@wonderlang.app

Provider privacy information

Google: https://policies.google.com/privacy
Firebase service information: https://firebase.google.com/support/privacy
Apple: https://www.apple.com/legal/privacy/
Netlify: https://www.netlify.com/privacy/
Meta: https://www.facebook.com/privacy/policy/
TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/en
Stripe: https://stripe.com/privacy
MailerLite: https://www.mailerlite.com/legal/privacy-policy

The providers' notices supplement this explanation; they do not replace WonderLang's responsibility to describe its own processing and provide required choices.