Privacy policy

Last updated: 24 September 2026.

WordShot works fully without an account and without a connection: nearly everything stays on your phone. Here's what leaves it and what doesn't, with no fine print. We don't sell anyone's data and we don't share it with advertisers.

This page says the same thing as the privacy screen inside the app, in the same order. If the two were ever to disagree, whatever the app's code does wins, and we'll fix this page.

1. Data controller

• Owner: Joan Cama Ribot
• Trade name: Somia Digital
• NIF: 41531670H
• Address: Carrer de Sant Joan, 16, 17200 Palafrugell (Girona), Espanya
• Email: hola@somiadigital.com

2. On your phone

This is where everything lives by default, inside the app and never leaving it. Delete the app and it goes with it. Your phone stores:

• which words you've read, what you said about them ("I knew it" or "new to me") and on what day;
• the words you've saved, the review box each one is in, and your streak;
• your preferences: the name you set, the families you have on, your new words per day, the theme, and your reminder times.

If you sign in with Apple, the session is stored in the iOS keychain, where iOS keeps passwords.

Archive search runs on the phone, and your recent searches are stored there. "Listen" uses the system voice: no audio is ever sent or stored anywhere.

3. In your account, if you open one

An account is for one thing: so your progress survives a new phone. It's optional, it can only be opened with Sign in with Apple, and you can delete it from inside the app. The app works fully without one.

If you open one, a copy of your progress goes up: the words you've seen, the ones you've saved, your review boxes, your streak, and three preferences (your name, your families, and your new words per day). Nothing you ask the AI, and no text you type, goes up, other than your name.

With Apple you can hide your email; in that case all we see is the relay address Apple gives us.

4. The Somia account, across apps

Somia Digital makes more than one app, and a Somia account links them so that what you buy in one counts in the others. It only exists if you sign in with Apple.

The link is made by our server using the session you've just opened: the app never sends your data there on its own. What travels is an identifier and, if shared progress ever arrives, the state of items; never the content of what you read or write. Delete your account and the link goes too, and a Somia account with no apps left linked is deleted entirely.

5. Playing online

This is the first thing in WordShot that knows who you're doing something with. To pair you with someone, remember who holds each card and tell you it's your turn, the play service has to know that you and the other person are in a match.

To play, there's your Somia account identifier, your display name — required to play with someone, because it's what they'll see in their list — who you play each match with, the challenges and invitations waiting for an answer, the score, which word is up, and when you last played.

Never your email, never your address book or contacts, never anything you've read or saved in the app, and never the content of the cards: the word bank is already on your phone.

Analytics knows none of it: it only sends "you started a match" and "how it ended", without who with, when, or any identifier. It runs on our own service, hosted on Cloudflare, kept separate from the Somia account. Delete your account and your matches go with it.

6. Blocking and reporting

These are the only two things the app sends about one person from another: who you blocked and who did the blocking, the app, and the date. Reports also hold the reason picked from a closed list of four and the display name that person was showing at that moment, so that changing it doesn't erase the complaint.

There's no free-text field, so we store no free text. The person you block gets no alert and cannot find out. Analytics knows none of it either.

We read reports ourselves, within 24 hours. You can unblock anyone from Profile ▸ Blocked players. The details of how it works are in the community guidelines.

7. If you use Game Center

WordShot's leaderboards and achievements live in Game Center, Apple's service. If you're signed in to it on your phone, the app sends a few numbers with your Game Center account; if not, it sends nothing.

What goes: your best streak, how many words you've seen, how many definition quiz answers you've got right, how many words are in box five, how many games of "The full deck" you've won against people, and whether you've won a challenge, as scores and achievements. Apple stores them with your account, and your Game Center friends can see them.

Never which words you've seen or what you asked about them, never who you've played with, and nothing else about your activity in the app. WordShot never opens Game Center on its own, only when you tap the row in Profile. To leave it: Settings ▸ Game Center.

8. The AI: "Ask about it" and the example sentences

If your iPhone has Apple's model and speaks your language, the answer is generated on the phone itself and nothing leaves it. When it can't be, the question goes to our server and from there to Gemini, from Google.

When it goes to the cloud, what travels is the dictionary entry — word, part of speech, definition, example, etymology, family and source — and the text you wrote. Never your name, and never any identifier of a person.

No question and no answer is stored, not a summary and not a fragment, and not which word you asked about either. The only thing stored is a counter for the daily limit: this installation's anonymous identifier — or your account's, if you opened one — the day, and a number. It is purged after seven days.

Nothing the AI answers ever enters the word bank or your Archive. Generated example sentences live on the screen and vanish when you leave it.

Entries come with a dictionary source; what the AI writes doesn't, and it isn't stored anywhere.

9. Analytics

It tells us whether the app makes sense. It is off until you turn it on in your Profile, and the list of events that may be sent is closed.

These are the events: that you started or finished a deck, that you read a word, that you answered a question, that a word became mastered, that you shared or listened to one, that you saw the Premium screen, that you started a purchase, that you used the AI, and that you started an online match and how it ended.

Eight pieces of data travel with them, and no more: whether you said you already knew it, whether the question went well, which box it came from, whether you shared text or an image, whether the AI answered from the phone or the cloud, whether it was a question to the AI or the example sentences, who you started a match against (a friend, a random player or the practice opponent, never who), and whether you won, lost or drew.

Never the word, never the definition, never the text of an AI question, never anything about a challenge or a duel, never who you play with or any match identifier, never your name, your email, or anything you type.

The provider is PostHog, with its server in the European Union. Turn the switch off and nothing leaves, immediately.

10. If you go Premium

Payment always goes through Apple. We never see your card or any banking detail, and we store none of it.

RevenueCat tells us whether your plan is active by talking to Apple: all we learn is yes or no, and when it expires. If you haven't opened an account, to RevenueCat you're just an anonymous identifier from the phone. You cancel the subscription in your Apple account settings, like any other.

11. Reminders and announcements

There are two different things:

• Daily reminders are scheduled by your phone alone: they never touch a server and we know nothing about them. They may carry a word from the bank, which is public content and the same for everyone, but never anything about you: no streak, no name, no counts.
• Announcements are sent by us. For them we store an anonymous install identifier, the platform, the language, and the app version, and nothing else. Turn them off in your Profile and the token is disabled on the server, not just on the phone.

12. How to delete everything

You don't have to write to anyone: it's done from inside the app.

• Your account: Profile ▸ Account ▸ "Delete account". It removes the account, the cloud copy, and the Somia account link. It doesn't touch the progress on your phone.
• Everything on the phone: delete the app.
• Analytics and announcements are switched off in your Profile.

We explain it step by step on the delete account page.

13. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing, and portability by writing to hola@somiadigital.com. You can also file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es).

14. Data processors, and where the servers are

The account database is in the European Union, in Supabase's Ireland region.

International transfers. Some of the companies that provide services to us are based, or keep their servers, outside the European Economic Area — mainly in the United States. When data reaches them, the transfer relies on the safeguards set out in the General Data Protection Regulation: the standard contractual clauses approved by the European Commission and, where the company is certified under it, the EU–US Data Privacy Framework. We do not transfer data to any provider without a data processing agreement in place. You can ask us for a copy of these safeguards at hola@somiadigital.com.

15. Minors

You must be at least 14 years old to use WordShot. If you live in a country where the minimum age to consent to the processing of your data is higher, you must be that age. The terms of use say the same.

WordShot's App Store rating is 4+, and that is about the content: the words are suitable for everyone. Both things are true at once — the content is for everyone, but a contract has to be one its signer can accept — and the reason for the second is that online play carries a display name another person sees, there is blocking and reporting, there is AI, and there is a paid subscription.

16. Retention

What's on your phone stays there until you delete the app. What's in your account stays there until you delete the account, and your matches go with it. The AI counter is purged after seven days. AI questions and answers aren't retained, because they're never stored.

17. Security

Traffic is encrypted. Access to our systems is limited, and online-play data is kept separate from account data.

18. WordShot is not a health product

WordShot is not a health product. WordShot does not promise to improve your memory or your health: it brings words with a standard dictionary source and asks you about them again. It makes no assessment of anyone.

19. This website

This site is static HTML, with no JavaScript at all. No cookies, no analytics, no third-party fonts or scripts: everything comes from wordshot.somia.digital. That's also why there's no cookie notice: there's nothing to consent to. The page looks light or dark depending on your system setting, and it stores nothing in your browser.

When you open a match invitation or a challenge link, the page doesn't ask any server who invited you: it only shows what the link already carries.

Our hosting provider — Netlify — logs the IP address and user agent of every request, on the grounds of the legitimate interest of security, and for a short period.

The support form. This site has a form for writing to us, one per language. It is delivered by Netlify (Netlify, Inc., United States), which acts as our data processor and receives the data under the standard contractual clauses approved by the European Commission. What reaches us is what you type — your name, if you give one, your email address and your message — and nothing else. We use it to answer you, and we keep it for as long as the conversation is of any use. It goes on no mailing list, we build no profile from it, and it is never matched against anything in your account. If you would rather not go through it, write straight to hola@somiadigital.com, which is the same inbox. It's all on the support page.

20. Changes

If we change anything, we'll change the date at the top. If the change matters, we'll say so inside the app.