Privacy Policy

Last Updated: September 2026

1. Introduction

Welcome to 20words.

20words is a global online English vocabulary learning service operated by Ibtikary. This Privacy Policy explains how we collect, use, store, and protect information when you use the 20words website and services.

By using 20words, you acknowledge the practices described in this Privacy Policy.

2. Information We Collect

We collect and process information that is necessary to provide, maintain, and improve the 20words service.

2.1 Account Information

When you create or use a 20words account, we may process:

• Your email address
• Authentication information associated with your account
• Your selected English learning level
• Your display name, if you choose to provide one

Your password is used for authentication through our authentication provider. We do not store your password as readable text in the 20words application.

2.2 Learning Information

When you use the learning features of 20words, we may process information about your learning activity and progress, including:

• The English words you study
• Your learning status for words
• Learning and review activity
• The date and time of your last review
• Information used to schedule future reviews
• Information used to maintain your learning progress

We use this information to provide the learning experience, maintain your progress, and support personalized learning features.

2.3 Subscription Information

If you use a free trial or paid subscription, we may process information such as:

• Trial or subscription status
• Selected subscription plan
• Subscription start date
• Subscription end date
• Information required to determine whether your account has access to subscription features

2.4 Payment Information

Paid subscriptions are processed through PayPal.

20words may receive and store payment-related information associated with a transaction, such as:

• PayPal order identifier
• PayPal transaction identifier, when available
• Selected subscription plan
• Payment amount
• Currency
• Payment status
• Information linking the payment to your 20words subscription

20words does not collect or store your full payment card details. Payment information entered during checkout is handled by PayPal in accordance with PayPal's applicable privacy practices.

2.5 Contact Information

If you contact us through the 20words contact form, we may process:

• Your name, if provided
• Your email address
• The subject of your message
• The content of your message
• The date and time of your submission

We use this information to respond to your request and provide support.

3. How We Collect Information

We collect information through:

• Information you provide when creating or managing your account
• Information generated when you use the learning and subscription features
• Information associated with your transactions
• Information you provide when contacting us
• Information received from service providers when necessary to provide or verify a service, such as payment-related information from PayPal

4. How We Use Information

We may use information we process to:

• Create and manage your account
• Authenticate your identity and maintain your signed-in session
• Provide the 20words learning service
• Save and display your learning progress
• Provide learning features based on your English level and progress
• Manage free trials
• Manage subscriptions
• Process and verify payments
• Provide customer support
• Maintain the security and integrity of the service
• Detect and prevent misuse or unauthorized access
• Comply with applicable legal obligations

We do not currently use third-party analytics or advertising services to track your activity across websites.

5. Cookies and Similar Technologies

20words does not currently use third-party advertising or analytics cookies.

Our website uses technologies necessary for authentication and core functionality. For example, our authentication provider, Supabase, may store authentication session information in browser storage to keep you signed in and maintain your authenticated session.

You can clear or control browser storage through your browser settings. Doing so may cause you to be signed out or may affect features that require an active account session.

6. Service Providers

Supabase

Supabase provides infrastructure used by 20words for services including authentication, database functionality, backend services, and related infrastructure.

Your account and learning-related information may therefore be processed through Supabase infrastructure.

PayPal

PayPal provides payment processing for paid subscriptions.

When you make a payment through PayPal, PayPal may process personal and financial information according to its own privacy policies and applicable requirements. PayPal's processing is governed by PayPal's applicable privacy documentation.

7. Data Storage and Processing

Information associated with your 20words account and use of the service is stored and processed using our service infrastructure and third-party providers such as Supabase.

20words uses Supabase Storage for learning-related images used by the service. We do not currently provide a feature for users to upload personal files or personal photographs for storage in their accounts.

8. International Data Processing

20words is a global online service.

Because we use third-party service providers, your information may be processed or stored in locations determined by those providers' infrastructure and applicable service arrangements.

Where required by applicable law, we will take appropriate measures concerning international processing and applicable data protection requirements.

9. Data Retention

We retain information for as long as reasonably necessary to:

• Provide and maintain your account and the 20words service
• Maintain your learning progress
• Manage subscriptions and payment records
• Respond to support requests
• Meet applicable legal, accounting, security, or dispute-resolution requirements

When information is no longer reasonably necessary for these purposes, it may be deleted or otherwise handled in accordance with applicable requirements.

10. Data Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include authentication controls, access controls, secure communications, and database security provided through our service infrastructure.

However, no online service can guarantee absolute security.

11. Your Privacy Rights

Depending on where you live and the laws applicable to you, you may have rights regarding your personal information.

These may include the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Request information about how your information is processed
• Withdraw consent where processing is based on consent
• Exercise other rights provided by applicable privacy laws

To make a privacy-related request, contact us at:

We may need to verify your identity before completing certain requests.

12. Children and Younger Users

20words is designed to support English learners of different ages.

We do not currently impose a fixed minimum age in this Privacy Policy. Where applicable law requires parental or guardian involvement or consent for the collection or processing of information from younger users, those requirements apply.

Parents or guardians who have questions about information relating to a younger user may contact us at:

13. Third-Party Services and Links

20words may rely on third-party services to provide certain functionality, including authentication, infrastructure, and payment processing.

Third-party services operate under their own terms and privacy policies. We encourage you to review the applicable privacy information provided by those services.

20words is not responsible for the privacy practices of third-party services outside our control.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the 20words service, our practices, technology, or applicable requirements.

When we make changes, we will update the Last Updated date at the top of this Privacy Policy.

Your continued use of 20words after an updated Privacy Policy becomes effective means that the updated policy applies to your use of the service, to the extent permitted by applicable law.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the way 20words handles information, please contact us: