Privacy Policy

Last updated: April 13, 2026

1. Who we are

p8nda is operated by Volverix sp. z o.o., the data controller for personal data processed through the p8nda mobile app and website.

  • Registered office: ul. Grunwaldzka 9C, 34-600 Limanowa, Poland
  • KRS: 0001228922
  • NIP: 7372257673
  • REGON: 544253033

Contact: [email protected]

2. What we collect

When you use p8nda, we may collect:

On both platforms

  • Account information: Email address when you create an account. No account is required.
  • Device identifier: A randomly generated ID for rate limiting and anonymous usage tracking.
  • Usage data: Dictionary searches and feature usage for analytics.

Mobile app only

  • Translation data: Text submitted for AI translation is processed by Google's Gemini API. Translations are cached in your account for reuse across devices.
  • AI Q&A data: Questions you ask about words are processed by Google's Gemini API.
  • Flashcard data: Custom decks, session history, and per-word study statistics, stored locally and optionally synced.
  • Word view history: The words you've recently viewed are kept on your device and optionally synced.
  • Stroke practice data: Per-character stroke practice scores and streaks, stored locally and optionally synced.
  • Settings: Your preferences (font size, display options, etc.), stored locally and optionally synced.
  • Audio and stroke cache: Pronunciation audio and stroke data downloaded on demand, stored on your device only.
  • Device info: Platform, OS version, and app version for compatibility and debugging.

Website only

  • OCR images: Images pasted for text extraction are sent to Google's Gemini API. Images are not stored permanently — they are deleted from our servers within seconds after processing.
  • Cookie: A device ID cookie is stored in your browser for rate limiting. No tracking cookies are used.
  • Analytics: We use Umami, a privacy-focused, cookie-free, open-source analytics tool self-hosted on our servers. It collects anonymous page views (page URL, referrer, browser, country) and feature usage (searches, audio plays, stroke order practice) without using cookies or tracking individuals. No personal data is collected or shared with third parties.
  • Search history: Recent dictionary searches are stored in your browser's local storage. This data never leaves your device and can be cleared at any time.

3. How we use your data

  • To provide and improve the dictionary, translation, OCR, AI Q&A, and flashcard services
  • To sync your decks, word history, translations, stroke practice, and settings across devices (when signed in, mobile app)
  • To enforce rate limits and prevent abuse
  • To cache translation and OCR results so repeated queries are instant

4. Data storage

Mobile app: Your data (account info, flashcard decks, word history, stroke practice stats, translation cache, settings) is stored locally on your device. If you create an account, it is also stored on our servers for cross-device sync.

Website: Only a device ID cookie is stored in your browser. OCR images are processed and immediately deleted.

Server data is hosted in the European Union (Hetzner, Helsinki).

5. Third-party services

  • Google Gemini API: Used for AI translations and AI Q&A about words (mobile app), and image OCR (website). See Google's Privacy Policy.
  • Google / Apple Sign-In: We receive your email and profile information from the provider. Mobile app only.
  • ElevenLabs: Used to generate word pronunciation audio. No user data is sent to ElevenLabs. Audio files are pre-generated and served from our servers.
  • Umami Analytics: Self-hosted, open-source, cookie-free web analytics. No data is shared with third parties. See umami.is.
  • Cloudflare R2: Hosts audio and stroke data on our CDN. No personal data is stored there.

6. Your rights (GDPR)

You can access, correct, or delete your data at any time. Use Delete Account in the app or contact [email protected].

You also have the right to lodge a complaint with the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych, UODO).

7. Data retention

Account deletion anonymizes all personal data immediately. Anonymous usage statistics may be retained. OCR images are never retained beyond processing.

8. Children

p8nda is not directed at children under 13.

9. Contact

Questions? [email protected] or join our Discord.