Privacy Policy

Last updated: 31 August 2026

GoMando ("the app") is built to work entirely on your device. This policy explains what that means in practice.

Data we collect

None in the app. GoMando has no user accounts, no analytics, no advertising SDKs, and no tracking of any kind. The app does not run a server, and it does not send your vocabulary progress, settings, or any other app data anywhere. This website keeps privacy-friendly, cookieless visitor statistics — see Website analytics.

Where your data lives

Your practice history, streaks, and settings are stored locally on your device only (using on-device storage). Nothing leaves your device unless you explicitly choose to export or share it yourself — for example, by emailing us feedback. Uninstalling the app or clearing its data deletes this information for good; we have no copy of it and cannot recover it for you.

Notifications

If you enable daily practice reminders, they are scheduled locally on your device by the operating system. No push token or notification data is sent to us or to any third party.

In-app purchases

GoMando offers a one-time in-app purchase to unlock the full vocabulary. Purchases are processed entirely by the Apple App Store or Google Play. We never see or store your payment details — Apple's and Google's own privacy policies govern that data.

Feedback and support

If you use the "Send Feedback" option, it opens your device's email app with a message addressed to us. Anything you choose to write and send is handled like any other email you send us, and is used only to answer your question or fix the issue you reported.

Hosting and website analytics

This website (not the app) is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Delivering a page technically requires processing your IP address, the page requested, the time of the request, and your browser type. Cloudflare processes these on our behalf to serve the site and to protect it from attacks. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in providing a working and secure website.

We also use Cloudflare Web Analytics (Real User Measurements) to measure how the site is used and how quickly it loads. It sets no cookies and stores or reads nothing on your device, so no consent is required under § 25 TDDDG (formerly § 25 TTDSG), and it does not track you across sites or build a profile of you. What is recorded is aggregated: the page visited, the referring page, browser and device type, page-load timings, and the country the request came from. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in basic statistics about how the site is used and how well it performs. This data is available to us for up to six months and is then deleted.

A data processing agreement under Art. 28 GDPR is in place with Cloudflare. Cloudflare, Inc. is certified under the EU–U.S. Data Privacy Framework, so the transfer to the USA rests on the European Commission’s adequacy decision of 10 July 2023; the EU Standard Contractual Clauses are additionally agreed as a fallback.

Fonts, styles, images, and every other asset on this site are served from our own domain. Nothing is loaded from Google Fonts or any other third-party CDN, so simply visiting this site sends no data to such providers.

Children's privacy

GoMando does not knowingly collect personal data from anyone, including children, because it does not collect personal data at all.

Your rights

The app stores nothing outside your device, so there is no app data on our servers to access, correct, or delete — you control it entirely through your device’s settings or by uninstalling the app. For the limited data processed when you visit this website (see Hosting and website analytics) and for any email you send us, you have the rights under Art. 15 to 20 GDPR: access, rectification, erasure, restriction of processing, and data portability.

Right to object: because the website processing described above rests on our legitimate interest, you may object to it at any time under Art. 21 GDPR, with effect for the future. Write to the address below and we will stop it. Please note that the analytics data contains no identifier that would let us link it back to you, so for that data we may be unable to act on an access or erasure request (Art. 11 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority under Art. 77 GDPR.

Changes to this policy

If this policy changes, we'll update this page and revise the date above.

Contact

Questions about this policy? Email [email protected]. See also our Impressum for our legal contact details.