Last Updated: September 19, 2026

Welcome to Vach ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our mobile application, Vach (the "App").

By downloading, installing, or using Vach from the Apple App Store, you agree to the practices described in this Privacy Policy.

1. Offline & Local-First Commitment

Vach is architected as a privacy-first, local-first mobile application. This means:

• Local Storage: Your app preferences, region selections, and bookmarked vocabulary words are stored locally on your device on-device storage.
• No Server Accounts: We do not require you to create an account, provide an email address, or log in to use the core features of the App.
• No Voice or Audio Recording: All text-to-speech pronunciations are generated on-device using iOS's native speech synthesis engine (AVSpeechSynthesizer). We never access your microphone, record your voice, or transmit audio to external servers.

This data remains strictly on your local Apple device and is never uploaded, synced, or sold to our servers. Deleting the application from your device will permanently erase this locally stored data.

2. Information We Collect

Because Vach operates primarily on your local device, our data collection is strictly minimal:

• Information We Do NOT Collect • Personal Identity: We do not collect your name, email address, physical address, phone number, or contacts.

We do not collect biometric data, location coordinates (GPS), photos, or device microphones. We do not collect, process, or store credit card numbers or banking information.

• Information Automatically Processed When you use Vach, certain non-personally identifiable diagnostic and technical information is automatically generated through standard iOS operating system APIs and analytics.

Device Information: Device model (e.g., iPhone or iPad), operating system version (iOS), and device language/region settings. • Usage Metrics: Pseudonymous interaction events such as app launches, screen views, feature interactions, and session durations to help us identify bugs and improve performance.

• Third-Party Services & Monetization
• Vach provides optional local notifications for daily vocabulary curations and streak maintenance. • All notifications are scheduled and delivered locally by your iOS device. • We do not collect, generate, or transmit external push notification tokens to remote servers. You can disable notifications at any time in your iOS Settings.

3. Third-Party Services & Monetization

To maintain application performance, validate subscriptions, and measure marketing campaigns, Vach integrates a minimal set of trusted third-party services:

• In-App Purchases & Subscriptions (RevenueCat & Apple StoreKit) • All financial transactions for Vach Premium subscriptions are processed directly and securely by Apple through your Apple ID account.

We use RevenueCat to validate purchase receipts and activate subscription entitlements. RevenueCat receives an anonymous, randomly generated app user identifier and transaction receipt tokens. RevenueCat does not receive personal financial information. Review RevenueCat's Privacy Policy at https://www.revenuecat.com/privacy.

• Google Analytics for Firebase We use Google Analytics for Firebase to analyze aggregated, non-personally identifiable usage statistics and application stability. Google processes this information in accordance with Google's Privacy Policy (https://policies.google.com/privacy).
• Advertising Attribution (Apple SKAdNetwork & Google Ads) If you install Vach through an ad campaign, we use Apple's privacy-safe SKAdNetwork framework to attribute marketing performance (such as app installs or subscription conversions).

This attribution is measured in an aggregated manner without accessing the Identifier for Advertisers (IDFA) and without tracking you across third-party apps or websites.