YiWords 🌙

Privacy Policy

Last revised on 28 June 2026

Overview

This Privacy Policy explains how IOIGAME LTD (a company incorporated under the laws of England and Wales, hereinafter referred to as "IOIGAME", "we", "us" or "our") collects, uses, shares, and protects your personal information when you use the YiWords mobile application and the yiwords.com website (collectively, "the Service"). For the purposes of UK and European data protection law, IOIGAME is the "controller" of your personal information. We adhere to the principles of lawfulness, fairness, data minimisation, and transparency, and do not collect information unless necessary. Please read this policy before using the Service; if you have any questions, please contact us as set out in Section 12.

1. How We Collect and Use Personal Information

We only process the following information on a strictly necessary basis when you use the relevant features:

• Registration and Login: You may log in using email verification, Google account, Apple account, or by scanning a QR code on the desktop web version. We will obtain the relevant account identifier and email address (when logging in with Apple, you may choose to hide your real email). You may choose to complete your profile: nickname, avatar (you may use a preset avatar, or voluntarily upload one by taking a photo or selecting from your gallery), gender, date of birth or age, city, native language, and learning language.
• Learning and Gamification: Learning progress, words learned/favourited/frequently mistaken, check-in records, gamification data such as energy/coins/items/experience, quiz and guessing results, and preference settings, are used to provide learning, cross-device synchronisation, rankings, and gamified experiences.
• AI-Assisted Content: Some word definitions and images in the Service are generated by AI technology, solely based on the word entries themselves and not on your personal input; the Service does not provide AI chat functionality and does not collect your conversation content.
• Purchases and Membership: When you purchase a membership, we verify the transaction via the Apple App Store Server API and record the transaction identifier and subscription status. We do not collect or store your bank card or other payment credentials; payments are processed by Apple.
• Learning Reminders: To encourage consistent learning, we may send local or recall notifications to your device based on your learning data (such as consecutive days of activity, current progress). You may disable these notifications at any time in the App or system settings.
• Customer Service and Feedback: When you contact us via the in-app "Feedback" feature or by email, we process your email address and communication records to verify your identity and resolve your queries.
• Operations and Security: Device information (device manufacturer identifier identifierForVendor, device model, operating system and app version, language, IP address and approximate country/region inferred from IP), log information (activity records, error and crash logs, including system MetricKit diagnostics), and device integrity verification (App Attest) are used to ensure security, metering (such as energy/daily limits), troubleshooting, and abuse prevention. App Attest involves device-generated key identifiers and verification data, which are not used to identify you personally.
• Advertising: Only if you have authorised via the system "App Tracking Transparency (ATT)" will third-party advertising providers (Google AdMob) be able to access your device advertising identifier for ad measurement or personalisation; if you decline, you may continue to use the learning features as normal.

The Service does not record audio, does not access the microphone, does not collect precise location data, and does not access your contacts (pronunciation is audio playback only).

2. Device Permissions

We only request the following permissions when you use the relevant features. You may disable these permissions at any time in your device settings; disabling them will only affect the corresponding feature and will not impact other features:

• Camera: Used to scan QR codes for logging in on the desktop web version, and (optionally) to take and set an avatar photo.
• Gallery/Photos: Used when you choose to upload an avatar from your photo gallery.
• Notifications: Used to send learning reminders and recall notifications.
• App Tracking (ATT): Used solely for advertising identifiers; you may decline.

3. Cookies and Similar Technologies

On the yiwords.com website, we use cookies or local storage (LocalStorage) to store a small amount of identifiers and preferences to ensure proper functionality and to analyse visits; you may clear these at any time in your browser. The app uses local storage to save learning progress and settings. We do not use these technologies for any purposes other than those described in this policy.

4. Information Storage and Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, and determine retention periods based on legal obligations and reasonable backup/security needs. After you delete your account, we will delete or anonymise personal information associated with your account within a reasonable period, except where retention is required to comply with law, resolve disputes, or prevent abuse; logs and diagnostic data are generally retained only for a short period.

5. International Transfers of Information

We and the above-mentioned service providers may process and store data (including via global CDN) in countries or regions outside the UK/European Economic Area. When transferring data in this way, we will implement appropriate safeguards in accordance with applicable law (such as standard contractual clauses or equivalent mechanisms).

6. Information Security

We implement technical and organisational measures appropriate to the risk to protect personal information, such as transmission encryption (HTTPS/TLS), password hashing, access controls, rate limiting, and device integrity verification, and maintain dedicated policies and procedures to ensure information security. However, no system can guarantee absolute security.

7. Entrusted Processing, Sharing, Transfer, and Public Disclosure

We do not sell your personal information. We only share or entrust processing to the following parties when necessary, and require them to process your information in accordance with this policy and applicable law, and to implement security measures consistent with our own:

• Entrusted Processors: Cloudflare (server hosting, database, object storage, and content delivery CDN), Resend (sending transactional emails such as login verification codes).
• Sharing Partners: Apple (for in-app purchase/subscription verification, Apple login, push notifications via APNs, and App Attest device verification), Google (for Google login and advertising via Google AdMob, both within the scope of your ATT authorisation).

We may also disclose information as required by law, in response to court or government agency requests, or to protect the legitimate rights and interests of IOIGAME or users. In the event of a merger, acquisition, or asset transfer, your personal information may be transferred accordingly; we will require the successor to continue to protect your information to a standard no less than that set out in this policy. Except as described above, we will not publicly disclose your personal information; if public disclosure is required, we will inform you and obtain your separate consent as required by law.

8. Your Rights

Under applicable law (including the UK General Data Protection Regulation, UK GDPR), you have the right to access, rectify, supplement, delete, restrict processing, port, object to processing, and withdraw consent in relation to your personal information. You may edit your profile in the App, or delete your account via [Settings → Delete Account] (which will delete all your account data). You may also disable notifications or withdraw ATT and other permissions at any time in the App or system settings (withdrawal does not affect processing already carried out). You may exercise these rights by contacting support@ioigame.com, and we will respond within a reasonable period (generally no more than 15 working days). If you are located in the UK, you also have the right to complain to the Information Commissioner's Office (ICO, ico.org.uk).

9. Protection of Minors

The Service is intended for a general audience and does not knowingly collect personal information from children. If you are a minor, you should use the Service only with the consent and supervision of a parent or guardian. If we become aware that we have collected personal information from a minor without prior guardian consent, we will endeavour to delete it as soon as possible.

10. Changes to this Policy

We may update this policy from time to time. Material changes will be notified within the Service or on this page, and the revision date at the top of this page will be updated; if there are material changes to the purposes, methods, or categories of personal information processed, we will seek your renewed consent where necessary.

11. Contact Us

Operating entity: IOIGAME LTD (registered in England and Wales).
Contact email: support@ioigame.com