Effective: June 2025 · Updated: 13 September 2026
Glym ("the app", "we", "our") is a vocabulary learning app. This policy explains what data we collect, how we use it, and your choices.
When you sign in (via Google Sign-In, Sign in with Apple, or anonymously), we receive your basic profile information from Firebase Authentication — such as your display name, email address (if you sign in with Google or Apple; Apple may give us a private relay address instead), and a unique user identifier. Anonymous users are assigned a random guest name such as "Guest 4821".
We store your vocabulary progress, quiz results, mastery scores, and learning journey events to provide the core vocabulary learning experience and track your progress across sessions.
When you play multiplayer challenges, we store your challenge results, ELO ratings, completion times, and leaderboard opt-in status. Opponents see your display name and challenge performance within the game; they do not see your email, full name, or individual word history.
If you use referrals, we collect and store referral-related data such as your referral code record, package ID, referral status, timestamps, masked progress summaries, and whether a referred friend completed the referral requirement. We do not show your email, full name, profile photo, answer history, or individual word list to the friend who referred you.
We do not upload your contacts. If you share a referral code, you choose where and how to share it using your device's normal sharing options.
When a referred user completes eligible quizzes online, we may use server-verified quiz confirmation data to determine whether the referral requirement has been met. Client-written journey events and offline practice are not used as the sole basis for granting referral rewards.
When you purchase or restore GRE Premium, the app sends purchase verification data to our backend so the purchase can be checked with the relevant app store. We store entitlement status and purchase audit records needed to provide access, restore purchases, handle refunds, and prevent abuse.
We use analytics and abuse-prevention signals to understand feature use, diagnose purchase and referral issues, protect paid features, and review suspicious referral activity. We avoid logging raw referral codes, purchase tokens, contact lists, or friend identity in analytics.
We may use Firebase App Check and similar app-attestation tools to help confirm that requests come from genuine app builds and to reduce automated abuse. App Check is not used as a public user identity.
We use service providers such as Firebase (Google), Apple App Store, Google Play, and analytics services to operate the app, verify purchases, store progress, and protect the service. We do not sell referral contact lists because we do not collect contact lists.
If you delete your account, we delete or anonymize account-linked learning data according to our deletion process. We may retain limited referral or purchase audit records where needed to prevent abuse, resolve disputes, comply with store requirements, or explain already-granted rewards.
If a school, college or coaching institute gives you Glym access, it gives us a name or label for you, the email address it has for you, and may tell us that you are under 18. When you sign in with that address, we link your account to the institution and record when that happened. If your institution tells us you are under 18, access starts only after a parent or guardian agrees through a link the institution sends them; we record that agreement, when it was given and what was shown. We cannot verify who opened that link.
The institution's staff can see your name or label, whether your access is active, whether you are under 18, how many words you have started, mastered and have due for review. For a group of four or more students, they can also see which words the group as a whole finds hard, based on what students marked as not known; this never shows which student marked which word. The institution, not Glym, sends you and your parent the links. The institution can end the access it gave you; your own learning data stays in your account. Institution data is stored with Google Firebase in the United States.
The institution's record of you (your name or label, the email address it gave us, when you joined and the age group you chose) stays in its records after your access ends or you delete your Glym account. To ask for it to be removed, write to us at the address below.
Glym is not directed to children under 13. We do not knowingly collect personal information from children under 13.
We may update this policy from time to time. Material changes will be communicated through the app or our website.
For questions about this policy, your data, or to request account deletion,
contact us at:
glym@jijil.net