Quenari — Privacy Policy
Last updated: September 14, 2026
This Privacy Policy describes how Quenari (“the app”, “we”, “us”) collects, uses, and protects the information you provide when installing and using the
application. By installing or using Quenari, you agree to the terms described in this document.
Quenari is committed to the security of your data. We collect only what is necessary to operate the app and never sell your personal information to third
parties.
1. Information we collect
Quenari is a vocabulary-learning app. Depending on how you use it, we may collect the following categories of information:
1.1 Information collected automatically (always, when the app is in use)
Advertising ID — a Google-provided identifier used by Google AdMob to serve personalized ads inside the app. You can reset this ID or opt out of
personalized ads from your device’s Google Settings.
App interaction data — which screens you open, which vocabulary tests you take, your results, and your learning streak. This data is stored
locally on your device (in a local Room database) and is not transmitted to any server unless you explicitly sign in.
Device and OS information — model, Android version, language. Used for crash diagnostics and to adapt the UI to your locale.
1.2 Information collected only if you sign in with Google
If you choose to sign in via Google (from the Settings screen), we collect and store:
Your email address — used as your account identifier.
Your Google display name (if available) — used as your public username in the community features.
Your Google user ID — used internally to associate your activity with your account.
This information is sent to and stored in our backend (Supabase). We do not collect your Google password, contacts, calendar, or any other Google
account data beyond what is listed above.
1.3 Information collected only if you make a purchase
If you choose to buy the optional “Quenari sin anuncios” in-app product:
A purchase receipt token is sent to and stored by Google Play Billing. Google retains the purchase record on its servers. We receive a
confirmation that the purchase is valid; we do not receive your credit card, payment method, or billing address.
1.4 Information collected only if you publish content to the community
If you choose to publish a LevelSet to the community (after purchasing the in-app product), we collect:
The LevelSet name, description, language code, and the words/translations you authored.
The publisher name you choose to display (which can be a pseudonym).
Votes and download counts associated with items you publish.
1.5 What we do NOT collect
Your name, phone number, address, or government ID.
Your contacts, calendar, photos, microphone, or camera (the app does not request these permissions).
Your precise or coarse location.
Your files, except the JSON/CSV LevelSets you explicitly choose to import or export.
2. How we use the information
The information described in §1 is used only for the following purposes:
To operate the app: load your language preferences, theme, progress, and streak; show the correct vocabulary; sync your community
publications and votes.
To serve advertisements: Google AdMob uses your Advertising ID to select ads. AdMob may use cookies and similar technologies for this
purpose on devices that support them.
To process purchases: validate the “Quenari sin anuncios” purchase and enable the corresponding features (ad removal + unlimited communitypublishing).
To moderate community content: when you publish a LevelSet, it is reviewed by human moderators and (if approved) shown to other users.
To improve the app: aggregated, non-identifying usage data helps us understand which features are used and where users get stuck. We do not
sell this data.
We do not use your information for:
Advertising outside of the app.
Credit checks, insurance underwriting, or any financial decision.
Profiling that produces legal or similarly significant effects on you.
Selling to data brokers or third-party marketers.
3. Local storage and cookies
Quenari is not a website and does not use browser cookies. Instead, the app uses two types of local storage on your device:
Android Room database (quenari.db) — stores your LevelSets, progress, test history, settings, and (if you signed in) authentication tokens.
This database never leaves your device unless you choose to sign in (in which case the authentication tokens and community content sync
through our backend).
DataStore preferences (user_prefs and auth_prefs) — stores your language preference, theme choice, vibration/sound settings, and (if
signed in) your session tokens and user ID.
You can clear this data at any time by uninstalling the app. We do not place cookies or trackers on the device.
If you choose to restore a purchase or sign in on a new device, Google Play Billing and Supabase respectively retain the minimum information needed to
do so.
4. Third-party services
Quenari relies on the following third-party services. Each has its own privacy policy governing its handling of your data.
4.1 Google Mobile Ads (AdMob)
Purpose: serve banner and interstitial advertisements inside the app.
Data shared: Advertising ID, device info, coarse location (if granted by the device).
Privacy policy: https://policies.google.com/privacy
Opt-out: You can opt out of personalized ads from your device’s Google Settings → Ads → Opt out of Ads Personalization. You can also reset
your Advertising ID at any time.
4.2 Google Sign-In
Purpose: authenticate you to the app’s backend when you choose to sign in.
Data shared: your Google email, display name, and user ID (only if you actively sign in; we never see your Google password).
Privacy policy: https://policies.google.com/privacy
4.3 Google Play Billing
Purpose: process the optional “Quenari sin anuncios” in-app purchase.
Data shared: purchase receipts and purchase tokens. Google retains your payment information on its servers; we do not see your credit card or
billing address.
Privacy policy: https://policies.google.com/privacy
Refund policy: refunds are handled by Google Play according to its policies. Contact Google Play support for refund requests.
4.4 Supabase (backend infrastructure)
Purpose: host our backend database, authentication, and server-side logic for the community and moderation features.
Data shared: if you sign in, your email, display name, user ID, published LevelSets, votes, and moderation actions. If you do not sign in, no data
is sent to Supabase.
Privacy policy: https://supabase.com/privacy
4.5 OpenAI (auto-moderation, optional)
Purpose: when a LevelSet is published, an automated check runs against OpenAI’s Moderation API to detect policy-violating content (hate
speech, harassment, illegal content).Data shared: the LevelSet’s name and description are sent to OpenAI for analysis. OpenAI does not retain the data per its API data usage policy.
Privacy policy: https://openai.com/policies/privacy-policy/
Opt-out: the OPENAI_API_KEY is optional. If it is not configured by the app operator, this check is skipped and only the local heuristics (Tolkien
claim check + duplicate detection) run.
4.6 Third-party links
The community screen shows LevelSets created by other users. The app itself does not contain external links, but LevelSet descriptions may include
web URLs. If you tap such a link, you leave the app and are subject to the destination site’s privacy policy.
5. Children
Quenari is intended for a general audience. The app does not target children under 13, and we do not knowingly collect personal information from children
under 13.
The Google AdMob SDK is configured with tagForUnderAgeOfConsent(false), which means ads are not specifically filtered for children. Parents
who wish to limit ad tracking on their child’s device can do so through the device’s Google Settings.
If you believe we have collected information from a child under 13 in error, please contact us at the address in §8 so we can delete the data.
6. Your rights and controls
You can control your data at any time:
6.1 From inside the app
Sign out: Settings → “Cerrar sesión”. This clears your authentication tokens from the device and ends your session.
Delete your published content: edit or delete any LevelSet you have published to the community, from its edit screen.
Reset your progress: uninstall and reinstall the app. This clears the local Room database.
Restore a purchase: Settings → “Restaurar compra”. This re-validates the “Quenari sin anuncios” purchase with Google Play.
6.2 Requesting data deletion
To request deletion of all data we hold about you (email, display name, published content, votes, moderation actions), contact us at the email address in
§8 with the subject “Data deletion request”. We will delete the data within 30 days of receiving your request and confirm by email.
When you delete your account:
Your row in public.users is removed.
All LevelSets you authored are removed from the community.
Your votes are removed.
Your authentication tokens become invalid.
Note: Google retains its own records of your in-app purchases (handled by Google Play Billing). To delete that, follow Google’s instructions.
6.3 Right of access and portability
You can request a copy of all data we hold about you by emailing us at the address in §8. We will provide a JSON export within 30 days.
7. Data retention
Local data (Room database, DataStore): retained on your device until you uninstall the app or clear the app’s data from Android Settings.
Backend data (Supabase, if you signed in): retained while your account is active. If you do not sign in for 24 consecutive months, we will treat
your account as abandoned and delete the associated rows. You will be notified by email at least 30 days before any deletion.
Moderation logs: retained for 36 months after the last moderation action, for legal and audit purposes.
Purchase records: retained by Google Play per its policies. We retain a flag (“remove_ads_owned = true”) on your user row so we can grant the
corresponding features across reinstalls.
8. Changes to this policy
We may update this Privacy Policy from time to time. When we do:We will update the “Last updated” date at the top of this page.
For material changes (e.g., a new category of data collected, a new third-party service), we will notify you through an in-app banner the next time
you open the app.
Your continued use of Quenari after a change indicates that you accept the updated policy.
9. Jurisdiction
This Privacy Policy is governed by the laws of the country in which the app operator resides. If you are a resident of the European Economic Area (EEA),
the United Kingdom, California (USA), or any other jurisdiction with specific data-protection laws, you have additional rights under those laws (including
the right to lodge a complaint with your local data-protection authority).
This document is provided as a starting template and should be reviewed by a qualified legal professional before publication. It is not legal advice