Privacy Policy

1. Scope and overview

This Privacy Policy explains how VocaMingo handles information when you use the VocaMingo app on Android or iOS. VocaMingo is provided by BPZone (“we,” “us,” or “our”). References to “the app” in this policy include both platform versions unless a platform-specific difference is stated.

This revision reflects VocaMingo's optional passwordless email account protection, cross-device progress restore, Teacher Access requests, and Classroom features on Android and iOS. The app can continue to be used with an anonymous Firebase identity, or you can choose to connect an email address so the same account and progress can be opened on another device.

VocaMingo does not require an email address, password, phone number, or social login to begin using the app. The app automatically creates an anonymous Firebase user identifier to support profile sync, progress sync, and leaderboard features. On Android and iOS, you may optionally enter an email address and use a one-time passwordless sign-in link to protect that profile or sign in to an existing VocaMingo account. A linked and verified email account is required only if you choose to request Teacher Access, create a class, or request to join a class. We do not ask for access to your contacts, photos, camera, precise location, or payment information. On Android and iOS, microphone access is optional and requested only when you choose to record an answer in Speaking Practice. On iOS, speech-recognition authorization is also requested when you use transcription.

The main categories handled by the app and its service providers are gameplay and profile content, product interactions, device or app identifiers, advertising data, approximate location inferred from an IP address, and crash, performance, and other diagnostic information. The sections below explain when and why these categories are processed.

To request deletion of online VocaMingo data without reinstalling the app, see Your rights and data deletion below.

2. Information stored on your device

VocaMingo uses local app storage, including SharedPreferences on Android and UserDefaults on iOS, to remember information such as:

• Completed levels, stars, hints, coins, speed bonuses, unlocked progress, and best completion times;
• Vocabulary words saved to the Leitner review box, review boxes, and due dates;
• Speaking practice parts completed and related daily coin rewards;
• Speaking Practice recordings, speech-recognition transcripts, recording duration, and the related question ID on Android and iOS;
• Real-Life English lesson completion, best practice scores, and aggregate usage counters;
• Your chosen profile name, built-in avatar selection, and profile start date;
• Reminder preferences, reminder time, and notification permission state;
• On iOS, selected system-voice identifiers, the optional second-dialogue-voice setting, and speaking-speed preference;
• Haptic feedback, diagnostics, help-tip, review-prompt, and gameplay preferences;
• Ad reward, frequency, and cooldown counters used to manage ad limits; and
• Unfinished puzzle drafts and other in-progress gameplay state.

This information is used to operate the app, remember your progress, schedule local reminders, manage rewards, and keep advertising frequency reasonable. Some profile and gameplay progress information is also synced online as described below.

Real-Life English search queries and custom mission responses are used to provide the current on-screen experience. VocaMingo does not save the text of those searches or custom responses in your Real-Life English progress, online profile, Firestore learning records, Firebase Analytics, or Crashlytics. If you use a keyboard’s dictation feature to enter a response, that feature is provided and processed by your operating-system or keyboard provider under its own settings and privacy terms.

Real-Life English, Visual Vocabulary, and Speaking Practice use text-to-speech services available on your device to read learning content and sample answers. These features do not record your voice or listen through the microphone. On iOS, you can choose and preview installed U.S. English system voices, optionally use a second installed voice for dialogues, and adjust speaking speed. VocaMingo stores only the selected system-voice identifiers and speech preferences, not the generated speech. The iOS app uses Apple system speech synthesis and does not send text to a BPZone or third-party cloud text-to-speech API. On Android, speech is handled by the text-to-speech service configured on your device. Voice availability, downloads, and any provider processing depend on your operating-system or text-to-speech provider and its settings and privacy terms.

On Android and iOS, Speaking Practice can record an answer after you grant microphone permission. The WAV audio file, transcript, duration, and related question ID are kept in the app’s private local storage so you can review what you said and play the recording again. VocaMingo does not upload the saved audio or transcript to BPZone, Firebase, Analytics, Crashlytics, advertising providers, or the leaderboard. To create a transcript, the recording audio is provided to the speech-recognition service made available by Android, iOS, or the device provider. VocaMingo requests on-device recognition when the platform reports that it is supported, but recognition may be unavailable or may use online processing under the operating-system or recognition provider’s settings and privacy terms. Speaking transcription on Android requires Android 13 or later; recording and playback remain available on supported earlier Android versions. Recording again replaces the previous locally saved answer for that question. Reset Progress or deleting the app removes these private local recordings and transcripts from the device.

VocaMingo disables Android cloud backup and device transfer for its local app data. On iOS, local app data may be included in iCloud or device backups depending on your Apple and device backup settings. You can remove most local progress using Reset Progress, or remove local app information by deleting the app. These actions do not by themselves submit a request to delete data already processed by service providers or stored in VocaMingo’s online profile system.

3. Online profile, progress sync, leaderboard, and app configuration

VocaMingo uses Firebase Authentication and Cloud Firestore to create an anonymous app identifier and sync profile and progress information. This supports your profile, gameplay features, rankings, the global leaderboard, and cross-device restore. The anonymous identifier is created automatically. On Android and iOS, if you choose to protect progress or sign in to an existing account, Firebase Authentication also processes the email address you enter and sends a one-time passwordless sign-in link. The email address is associated with your Firebase Authentication identity; VocaMingo does not intentionally place it in your Firestore progress documents or public leaderboard.

Online account and synced information may include:

• Your Firebase user ID;
• Your email address, only if you choose passwordless account protection on Android or iOS;
• Your chosen profile name and built-in avatar selection;
• Your operating system, recorded as Android or iOS;
• Coins, lifetime coins earned, stars, score, speed bonus, and completed levels;
• Highest level reached, completion totals, and timing statistics for each of the nine game modes, including Mingo Grid;
• Overall average completion time and gameplay statistics used for ranking;
• Leitner review state, Speaking Practice completion, and Real-Life English progress;
• When Share Diagnostics is enabled, aggregate Real-Life English topic progress, practice totals, and feature-use counters used to improve future versions; and
• Profile creation, update, and last-seen timestamps.

Your profile name, built-in avatar, score, total completed levels, total stars, average time, and rank may be visible to other VocaMingo users through leaderboard features. Your coin balance, detailed per-game statistics, anonymous Firebase user ID, and last-seen timestamp are not intentionally displayed to other users.

A profile name remains optional for the app's general learning and game features and should not include sensitive personal information. If you choose Teacher Access or Classroom features, you must provide a non-generic name that your students or teacher can recognize. VocaMingo offers only built-in avatars and does not ask you to upload a profile photo. The anonymous user ID is linked to the profile and gameplay information stored in Firebase so those features can operate.

The nine synced game modes are Hidden Trails, Wonder Words, Knot Logic, Word Guess, Word Bomb, Mingo Match, Mingo Grid, Mingo Fix, and Picture Pairs. For Mingo Grid, the app syncs the same aggregate progress and timing fields used by the other games. It does not intentionally sync your typed guesses, individual tile results, hint text, definitions, examples, or hidden puzzle answers to your Firebase profile or the public leaderboard.

VocaMingo uses Firebase App Check with Play Integrity on Android and Apple App Attest on iOS production builds to help verify app requests and protect backend services from abuse. These services may process app, device, and integrity signals.

The app also retrieves general and platform-specific configuration documents from Cloud Firestore. These documents control items such as feature availability, ad formats, reward amounts, frequency limits, and cooldowns. They do not contain your lesson answers, search text, profile name, or other user-created content. App Check and normal network-service information may be processed when the app requests these documents.

4. Teacher Access and Classroom features

Teacher Access and Classroom features are optional and may be enabled or disabled through VocaMingo's remote app configuration. To use them, you must connect and verify an email address and choose a non-generic display name that the other classroom participant can recognize. A user may belong to more than one class, and an approved teacher may manage more than one class, subject to limits retrieved from app configuration.

When you request Teacher Access, VocaMingo stores your Firebase user ID, verified email address, name, teacher type or a custom teacher type, optional organization, country, description of your teaching activity, optional website, app platform, acceptance of the current Teacher Access terms, application status, review information, attempt number, and related timestamps. We use this information to review the request, prevent abuse, communicate about it, and provision, decline, or suspend Teacher Access. A server-side email notification containing the application details is sent to the VocaMingo administrator through the configured email service. Applicants cannot approve their own request.

An approved teacher can create classes and share a class code. When a learner enters a valid code, VocaMingo first shows the class name and teacher name. Submitting the join request stores the class and teacher identifiers and names, the learner's Firebase user ID and recognizable name, membership status, and related timestamps. The teacher sees the pending request and must approve it before the learner becomes an active class member. Class codes are resolved by protected backend functions and are not available as a public, enumerable directory.

While the membership and class are active, the approved teacher can view a limited student progress report. It can include the student's display name, built-in avatar, platform, score, completed levels, stars, average completion time, per-game highest level, completion count and average time, completed Real-Life English lesson IDs and totals, practiced Speaking part IDs and totals, and Leitner word and due-word counts. The report does not include the learner's email address, saved Speaking audio or transcripts, typed guesses, vocabulary searches, or custom Real-Life English answers.

Learners can cancel a pending request or leave an active class. Teachers can decline a request, remove an active learner, rotate a class code, or archive an empty class. Membership records may retain an inactive status and related timestamps after one of these actions for operational integrity, as described under Data retention. Deleting a VocaMingo account removes the account's Teacher Access, class, membership, and related classroom records through the account-deletion process, subject to the limited exceptions described below.

5. Usage analytics and crash diagnostics

VocaMingo uses Google Analytics for Firebase to understand app usage and Firebase Crashlytics to diagnose crashes and stability problems. Share Diagnostics is enabled by default and can be changed in Settings. While it is enabled, these services may process:

• App launches, screen views, time spent, and general feature interactions;
• Vocabulary category opens, search-result counts, and selected word IDs;
• Leitner additions and review outcomes;
• Speaking-practice engagement, completion, and reward events;
• Real-Life English topic, situation, lesson, section, audio, exercise, mission, completion, exit, search-result count, and time-spent events;
• Game mode, including Mingo Grid, level, difficulty, completion time, stars, coins, and hints used;
• Ad prompts, format, placement, impressions, estimated ad revenue and currency, ad-unit identifier, rewards earned, and unavailable ads;
• Rating-prompt eligibility and request events, but not the rating or review text you submit to a store;
• Crash reports, stack traces, app version, device state, and diagnostic logs;
• Firebase installation, app instance, and device information; and
• General performance and diagnostic information.

We do not intentionally send spoken answers, typed vocabulary search text, puzzle board contents, selected letters, Mingo Grid guesses or hidden answers, Real-Life English search text or learner responses, discussion-prompt answers, your support or account email address, precise location, profile name, or anonymous Firebase Authentication user ID to Firebase Analytics or Crashlytics. When Share Diagnostics is enabled, Cloud Firestore receives aggregate Real-Life English progress, practice totals, topic-open counts, and feature-use counters linked to the anonymous Firebase user ID on Android and iOS. It does not receive search text, custom responses, selected answer text, lesson dialogue, spoken content, or raw event history. Profile and leaderboard information is processed separately through Firebase Authentication and Cloud Firestore as described above.

You can turn future Analytics, Crashlytics, and Real-Life English aggregate diagnostics sync from the app on that device on or off at any time using Share Diagnostics in Settings. Google may retain information sent before the setting was turned off according to its retention policies.

Learn more in Firebase Privacy and Security .

6. Advertising

VocaMingo may display banner, interstitial, and rewarded ads provided by Google AdMob. Rewarded ads are optional and are shown only when you choose to watch one for an in-app benefit, such as coins or help when you do not have enough coins for a hint.

Google Mobile Ads may automatically process and share an IP address, which can be used to estimate coarse or approximate location; product interactions such as app launches, taps, and video views; diagnostic and performance information; consent choices; and device or app identifiers for advertising, analytics, measurement, frequency capping, security, and fraud prevention. On Android, this may include the Android advertising ID and app set ID when available. Advertising IDs can be reset or deleted through supported Android device settings. Depending on your consent choices, region, and platform settings, Google may associate advertising and usage information with device or app identifiers.

Both apps configure Google Mobile Ads with a general-audience maximum ad content rating and use the consent choices available through Google’s consent platform when determining whether ads can be requested. The iOS app does not request App Tracking Transparency permission and disables Google Mobile Ads publisher first-party identification and publisher personalization signals where supported.

Learn more about how Google processes information in its Privacy Policy and its explanation of information from apps that use Google services . Google also publishes a Google Mobile Ads SDK data-disclosure guide describing information automatically collected and shared by the Android SDK.

7. Consent and advertising choices

Where required, VocaMingo uses Google’s User Messaging Platform to request and manage advertising consent before requesting ads. If a privacy-options form is required in your region, you can reopen it from Settings under Ad Privacy Choices. You may also manage advertising choices through applicable Android, Apple, Google, or device privacy settings. Choices available to you depend on your platform, region, and device settings.

8. Notifications

On both platforms, VocaMingo can schedule local Leitner reminders when saved words are due for review. Reminder preferences and reminder time are stored locally. Notifications are optional and can be controlled from the app and device settings.

The Android app also uses Firebase Cloud Messaging to receive general VocaMingo game updates, challenges, or reward reminders. It may obtain a Firebase Cloud Messaging registration token and subscribe the installation to broad Android and game-reminder topics. Google processes the token and related device or app information to deliver these messages. VocaMingo does not intentionally save the raw token in its Firestore profile records. Android notification permission and device settings control whether messages can be displayed.

The iOS app currently uses local Leitner reminders and does not register for remote push notifications.

9. Contact Us and store reviews

The Contact Us or Send feedback option opens your device’s email app with VocaMingo’s support address. The draft includes app-support details such as your platform, app version and build, a masked form of the anonymous Firebase user ID when available, device model, and operating-system version. You can review or remove this information before sending. If you choose to send the message, we receive your email address, message, attachments, the support details left in the draft, and other information you voluntarily include. Your email provider processes the message under its own terms. Please do not include sensitive personal information unless it is necessary for your request.

VocaMingo may show an operating-system rating prompt or open its Google Play or Apple App Store page. Google or Apple processes ratings, reviews, store identifiers, and related interactions under its own policies. VocaMingo records only general prompt events in analytics when diagnostics are enabled; it does not receive your private store account credentials or the review text through the app.

10. How information is disclosed

We do not sell personal information or disclose it to third parties for BPZone’s own direct marketing. Profile and leaderboard information you choose to use, such as a profile name and built-in avatar, may be visible to other VocaMingo users as part of app functionality. If you use Classroom features, the names and limited classroom information described above are disclosed between the learner and the applicable approved teacher; the teacher receives the limited progress report only for an active membership. Teacher Access application details are available to authorized VocaMingo administrators and are transmitted through the configured email provider for review notifications. Information may be processed by Google and Firebase for anonymous or optional email-link authentication, Firestore sync, app integrity, cloud messaging, advertising, analytics, crash diagnostics, and consent services described above. Apple, Google, or another operating-system or device speech provider may process recording audio when its speech-recognition service is used to create a transcript. Apple may also process iOS backups, notification permissions, and App Store interactions, while Google may process Google Play interactions. We may also disclose information if required by law, legal process, or to protect users, the app, or our rights.

11. Data retention

Local information remains on your device until it is reset, removed by the operating system, or the app is deleted. Some preferences, including haptics, diagnostics, and reminders, may remain after Reset Progress so the app can preserve your choices. Online account, profile, progress, and leaderboard information may remain in Firebase until we delete it or fulfill a verified deletion request. If you connected an email address, the Firebase Authentication account and associated email may also remain until deletion. Teacher applications, teacher-role records, class records, class codes, membership records, application-notification receipts, and related status and timestamp information may remain in Firebase while the applicable account or feature records are retained. A declined, cancelled, left, removed, or archived record may remain with that inactive status for operational integrity until it is deleted under our retention process or an applicable account-deletion request. Deleting the app alone does not automatically delete those online records.

Google retains analytics, crash, advertising, cloud messaging, app integrity, and consent information according to its service settings and policies. A speech provider may retain or otherwise process audio submitted for transcription according to its settings and privacy terms. Support messages are retained only as reasonably necessary to respond, maintain support records, protect against abuse, and meet legal obligations. iOS backup retention depends on your Apple and device backup settings; VocaMingo’s Android local data is excluded from Android backup and device transfer.

12. Children’s privacy

VocaMingo is a general-audience vocabulary and word-game app and is not directed specifically to children under 13. Optional passwordless account protection asks for an email address only when a user chooses that feature; a linked email address and a recognizable name are required to use Teacher Access or Classroom features. We do not knowingly collect personal information from children under 13 without appropriate parental consent. Teachers, schools, parents, and guardians should not direct a child to use Classroom features or submit the child's information unless they have the authorization or consent required by applicable law. Parents and guardians should supervise children’s use and review the account, classroom, privacy, advertising, notification, and store controls available on the device and in their region.

If you believe a child has provided personal information in connection with the app, contact us so we can review and, where appropriate, delete it.

13. International processing

BPZone is based in Canada. Google, Firebase, Apple, email providers, and their service providers may process information in Canada, the United States, and other countries where they operate. Those countries may have data-protection laws different from the laws where you live.

14. Security

We use reasonable administrative and technical measures to protect information handled by the app, including encrypted network connections to supported backend services and app-integrity checks. No storage or transmission method can be guaranteed completely secure.

15. Your rights and data deletion

Depending on where you live, you may have rights relating to access, correction, deletion, restriction, objection, or withdrawal of consent. You can remove most local progress using Reset Progress, cancel a pending class request, leave an active class, or delete local app information by deleting the app. A teacher can decline or remove a learner and archive an eligible class. These steps do not automatically delete all related online profile, application, or inactive classroom records.

You can request deletion of your anonymous or email-linked VocaMingo profile, Firebase Authentication identity, connected email address, and associated online progress, leaderboard, Teacher Access, and classroom records at any time. On Android or iOS, open Settings > Delete Account & Data. An anonymous account is submitted for deletion immediately after the final in-app confirmation. An email-linked account first requires confirmation through a secure email link. Opening that link does not itself delete the account; VocaMingo asks for one final confirmation inside the app. After the backend confirms deletion, the app removes the account's local learning data from that device and prepares a new anonymous profile. If you no longer have the app or cannot access the in-app control, use the email process below.

If you no longer have the app, email vocamingo@gmail.com with the subject VocaMingo Data Deletion. If the account is connected to an email address, send the request from that address when possible. Include your platform (Android or iOS), profile name, approximate date you last used the app, and any other non-sensitive details visible in the app that can help us locate the correct record. If the app is still installed, using its feedback email draft can also provide a masked user identifier and app-support details that may help identify the record. We may ask for additional information when reasonably necessary to verify and identify the correct record. Once verified, we will delete the applicable Firebase Authentication identity and associated private profile, public leaderboard profile, online learning-progress, Teacher Access, and classroom records within a reasonable period, unless retention is required for security, fraud prevention, dispute resolution, or legal compliance. We retain a minimal server-only deleted-account identifier to prevent still-valid tokens on another device from recreating deleted data. We may also retain the deletion request and related correspondence as reasonably necessary to document and complete the request.

Requests concerning data controlled directly by Google, Apple, an email provider, or another independent service can be submitted through that provider’s privacy controls.

16. External services and links

The app may open external services such as this policy, BPZone Support, Google Play, the Apple App Store, a developer website, or your email app. Their privacy practices are governed by their own policies.

17. Changes to this policy

We may update this Privacy Policy when VocaMingo, its services, or legal requirements change. The updated policy will be published at this location with a revised effective date.

18. Contact

For questions, feedback, or privacy requests, visit BPZone Support or email vocamingo@gmail.com. Use the subject VocaMingo Privacy for privacy questions or VocaMingo Data Deletion for deletion requests.