Last updated 28 August 2026. Applies to the Watchwords iOS app and the Watchwords Chrome extension, both published by Synton.
Watchwords stores the words you chose to keep, and the small amount of history needed to schedule them. It is not an analytics product and it does not follow you around the web.
Signing in with Apple gives us an email address and a user id. If you use Apple's Hide My Email, we receive the relay address and never see your real one. There is no password, because there is nothing to set one on.
When you click a word in the extension, the following travels with it:
Clicking the same word again bumps a counter and refreshes the sentence. It never resets the schedule.
Every review is appended to a log: which card, which grade you pressed, how long you looked at it, and the interval that came out. This is what the scheduler runs on, and what draws the forecast. Per day, we also keep three counters: words kept, reviews done and seconds of video watched. Those three draw the contribution grid.
Daily limits, reminder time, and whether reminders are on at all.
To connect the extension to your account, the app shows a six-character code that expires in ten minutes. Exchanging it gives the browser an opaque token. That token is stored on the server only as a SHA-256 hash, so it cannot be read back out of the database, and it unlocks exactly one endpoint: the one that receives kept words. Unpairing the browser from the app takes effect on the extension's next sync.
The free tier shows one banner, on the word list and the progress screen. There is no ad slot anywhere in the review screen, by construction.
The banner is served by Google AdMob, which is a separate controller of whatever it collects, typically an advertising identifier and coarse device signals. On iOS, that identifier is only available if you allow it when the system asks. Declining costs you nothing but slightly less relevant ads.
Where consent law requires it, a consent form appears before any ad is requested, and Settings, Ad privacy choices reopens it at any time so you can change the answer. If consent is refused, no ad is requested and no ad strip is drawn.
Buying either plan stops the SDK from being initialised at all, so a paying account is never shown the consent form either.
| Who | What for | Where |
|---|---|---|
| Supabase | Database, authentication and the two endpoints the extension talks to | European Union (Frankfurt) |
| Apple | Sign in with Apple, purchases, push notifications | Per Apple's own policy |
| Google AdMob | The banner, free tier only | Per Google's own policy |
Row-level security is on for every table, and the policies are keyed to your user id, so one account cannot read another's rows even in the event of a client bug.
Words and review history are kept until you delete them, because a spaced-repetition schedule is only as good as its history. Deleting a word in the app marks it deleted immediately and removes it on the next cleanup. Pairing codes expire after ten minutes and are destroyed once used.
Open Settings, Delete account in the app. It removes the account and everything attached to it: your words, the review history, the daily counters, the settings and any paired browser. It happens immediately, in one transaction, on the server and on the phone.
Deletion is permanent. There is no export yet, so email privacy@mywatchwords.com first if you want a copy. If you no longer have the app installed, write to the same address from the account's email and we will do it for you.
If you are in the EEA or the UK, the legal basis for the account and your saved words is performance of the contract, and for the banner it is consent, which you give or withhold through the system prompt. You can ask for access, correction, export, restriction or erasure at the address above, and you can complain to your national supervisory authority.
If you are in California, Watchwords does not sell or share personal information as the CCPA defines those terms, and you are not treated differently for exercising any right.
Watchwords is not directed at children under 13, and accounts are not knowingly created for them. If you believe one has been, write to the address above and it will be removed.
If this policy changes in a way that affects what is collected, the app will say so before the change takes effect. The date at the top always reflects the current version.
Synton, privacy@mywatchwords.com. Watchwords lives at mywatchwords.com.
Watchwords is a product by Synton.