Find My Words Privacy Policy
Last updated: May 6, 2026
Find My Words is a vocabulary practice app for people with aphasia. This policy explains what information the app handles, who receives it, and what choices you have.
Find My Words is designed for use alongside professional speech-language therapy. It is not a substitute for professional medical advice or treatment.
1. About this app
Find My Words is operated by Lantern Digital LLC. For any questions about this policy or your data, contact us at [email protected].
2. What stays on your device
The following information is stored only on your device. It is not transmitted to us or anyone else:
- Practice session history — which packs you practiced, when, how long each session took, and per-card timing such as time to reveal. Capped at 200 sessions.
- Saved cards — cards you bookmark for extra practice.
- Audio preferences — whether auto-play audio is muted.
- Pack download state — which content packs have been downloaded.
- A device identifier — a random value generated the first time you open the app, used to keep the services described in Section 3 consistent with each other. It is not your name, email, account ID, or any advertising identifier. See Section 3.6.
All locally stored data is deleted when you uninstall the app.
3. What leaves your device
The app transmits data to a small number of services that help it work. For each service, we describe what it receives, why, and the legal basis under which we process your data.
3.1 Purchases (RevenueCat)
When you make or restore an in-app purchase, our payment service provider RevenueCat receives:
- The product purchased, the date, and the price
- An anonymous identifier that RevenueCat generates to tie purchases to your device
RevenueCat does not receive your practice history, saved cards, or any other usage data. RevenueCat's handling of this data is governed by RevenueCat's Privacy Policy.
Separately, when you make a purchase through the Apple App Store or Google Play, the store itself processes your payment and receives purchase metadata (the Apple ID or Google account used, the amount charged, applicable tax information) under its own privacy policy. Those stores — not Find My Words — control that data.
Legal basis (EU/UK): Contract (GDPR Art 6(1)(b)). This data is necessary to provide purchases and verify your access to unlocked content.
3.2 Product analytics (PostHog)
We use PostHog to understand how people use the app, so we can improve it. PostHog receives:
- Anonymous events describing app interactions (for example: pack started, card revealed, purchase completed), along with counts and durations
- Device and app metadata (device class — phone or tablet — operating system, OS version, app version, app build)
- The anonymous device identifier described in Section 2
PostHog does not receive any directly identifying information such as your name or email address. PostHog data is hosted on PostHog's US cloud. More information is available in PostHog's Privacy Policy.
Legal basis (EU/UK): Legitimate interest (GDPR Art 6(1)(f)) in understanding product usage and improving the app. You can object to this processing at any time by turning off Share anonymous usage data in Settings (default: on). When turned off, PostHog stops collecting events. Your preference persists across app launches.
3.3 Crash and error reporting (Sentry)
We use Sentry to detect and diagnose crashes and errors so we can fix them. Sentry receives:
- Stack traces of errors and crashes
- Breadcrumbs — a short trail of navigation steps, network request metadata, and console output leading up to an error, with API keys and other secrets automatically removed
- Device and app version information
- The same anonymous device identifier described in Section 2
Sentry does not receive any directly identifying information such as your name or email address. More information is available in Sentry's Privacy Policy.
Legal basis (EU/UK): Legitimate interest (GDPR Art 6(1)(f)) in keeping the app stable and correct. We have weighed this interest against your privacy: crash data contains no directly identifying information, is narrowly scoped to specific error sites we instrument, and is not combined with other datasets for advertising or profiling. There is no in-app opt-out for crash reporting in the current version because the data is essential to diagnosing failures that affect the app's core functionality. If this changes in a future version, this policy will be updated.
3.4 Paid content downloads (Cloudflare R2)
When you download a paid content pack, the app requests the files from our content-delivery network at cdn.findmywords.app, hosted by Cloudflare R2. Cloudflare may log standard request metadata (IP address, user agent, requested URL) at the network edge under its own privacy policy. We do not access, aggregate, store, or forward these logs to our own systems. Because these edge logs are held by Cloudflare and not by us, requests to exercise rights over that data should be directed to Cloudflare.
Legal basis (EU/UK): Contract (GDPR Art 6(1)(b)). The request is necessary to deliver content you have purchased.
3.5 Approximate location (from IP address)
PostHog and Sentry both add an approximate (city-level) location to each event based on the IP address of the network request. This happens on their servers during ingestion. The app itself does not ask for your location and does not use your device's location services. Approximate location is not linked to your identity and is not shared with advertisers.
3.6 About the anonymous device identifier
The identifier shared with PostHog and Sentry is a random value generated on your device the first time you open the app. It is not your Apple IDFA, Apple IDFV, Android Advertising ID, email, or any other identifier controlled by another party. We use it only to correlate events inside PostHog and Sentry so we can diagnose issues. It is cleared when you uninstall the app.
3.7 No advertising and no cross-app tracking
Find My Words does not contain advertising. We do not use advertising SDKs, we do not use Apple's IDFA, and we do not share your data with any company for advertising or for tracking you across other apps or websites. Because the app does not engage in tracking as Apple defines it, the App Tracking Transparency prompt does not appear.
4. Your choices
- Turn off analytics. In the app, go to Settings → Share anonymous usage data and turn the switch off. PostHog stops collecting events.
- Uninstall. When you uninstall the app, all locally stored data is deleted.
- Request deletion of data held by our service providers. Email us at [email protected]. To help us locate your data, please include whatever context you can — approximate first-use date, device type, and the email used for the purchase if relevant. If we cannot identify your data because we don't hold information tied to your identity, we will respond in line with GDPR Art 11(2) and confirm that no personal data tied to an account is held.
- Passive deletion. Data held by our service providers expires automatically over time: Sentry retains error data for 90 days per its default retention; PostHog retains analytics event data according to its standard retention policy at the time of collection; RevenueCat retains purchase records per the terms in its privacy policy. Your ability to restore previous purchases is not affected by deletion requests — the store receipt on your device is authoritative.
5. Your rights
European Economic Area, United Kingdom, and Switzerland. If one of these regions applies to you, you have the right to access, correct, delete, or restrict processing of your personal data; to object to processing based on legitimate interest; and to receive a copy of your data. You also have the right to lodge a complaint with your national data protection authority. To exercise these rights, contact us at [email protected].
California. If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and to request its deletion. We do not sell or share your personal information as those terms are defined under California law. To exercise your rights, contact us at the address above.
6. International data transfers
PostHog is hosted in the United States, and Sentry's default storage region is the United States. If you are located in the European Economic Area or the United Kingdom, your data may be transferred to and processed in the United States under Standard Contractual Clauses incorporated into our agreements with these providers.
7. Children's privacy
Find My Words is designed for adults with aphasia. It is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from such users.
8. Changes to this policy
If we update this policy, the revised version will be posted at this URL with an updated date. Material changes will also be reflected in the app stores' Data Safety and App Privacy declarations.
9. Contact
For any questions about this policy or your data, contact us at [email protected].