Legal
Privacy policy
Last updated 3 September 2026
Verbify is a Spanish verb trainer. This policy explains exactly what it collects, why, and how to get rid of it. It is written to be read rather than to be technically unarguable — if anything here is unclear, ask us at hello@verbify.co.uk and we will fix the wording.
The short version. You can use Verbify without an account, and then nothing leaves your device. If you create one, we store your email address and your practice history so it can follow you between devices. We do not sell anything to anybody, and you can delete everything from inside the app.
Who we are
Verbify is operated from the United Kingdom. For anything to do with your data, contact hello@verbify.co.uk. We are the data controller for the information described below.
Using Verbify without an account
Practice works fully offline and without signing in. In that mode your progress — which verbs you have drilled, how quickly, and how well — is stored only on your device. We cannot see it, and it disappears if you delete the app.
Anonymous usage analytics are still collected in this mode. Those are described below and are not tied to a name or an email address.
What we collect if you create an account
| What | Why |
|---|---|
| Email address | To sign you in. Verbify has no passwords — we email you a six-digit code instead. If you use Sign in with Apple and choose to hide your address, we only ever see Apple’s relay address. |
| Practice history | Every answer you submit, including the text you typed, how long you took, and whether it was right. This is what makes the mastery heatmap and adaptive practice work, and it is how we can tell you which forms are getting faster. |
| Mastery and streaks | Scores per verb form, and how many consecutive days you have practised. Derived from your practice history. |
| Preferences | Which Spanish you practise, which tenses, your focus verbs, and accessibility settings such as hiding response times. |
| Time zone | To work out when your day ends, so a streak is not broken by a boundary in another part of the world. |
| Leaderboard name and score | Only if you turn the leaderboard on. Other players see the name you choose, your score and your rank — never your email address, and nothing that links a score back to your account. |
What we deliberately do not collect
No postal address, no phone number, no date of birth, no location, no legal name and no payment details. Verbify has no use for any of them, so it does not ask.
Analytics
We use PostHog, hosted in the EU, to understand how the app is used — which practice modes people choose, where they stop, and whether recall is getting faster over time.
Analytics events describe the shape of what happened, never its content. We record that a preterite yo form was answered correctly in the one-to-two-second band; we do not send what you typed, and we do not send your email address. Response times are grouped into bands rather than sent precisely.
Once you sign in, events are associated with your account identifier so we can see whether people improve across sessions. Signing out breaks that link.
Who processes your data
| Processor | What for, and where |
|---|---|
| Supabase | Database and sign-in. Hosted in London (eu-west-2). |
| Resend | Sending your sign-in codes. Hosted in the EU. |
| PostHog | Product analytics. EU cloud. |
| Vercel | Hosting this website and the web version of the app. |
| Apple | Sign in with Apple, if you choose it. |
These companies process data on our instructions and are not permitted to use it for their own purposes. We do not sell personal data, and we do not share it for advertising.
Why we are allowed to hold it
Under UK data protection law we rely on:
- Performance of a contract — we cannot sync your progress or sign you in without holding your email address and practice history.
- Legitimate interests — understanding how the app is used so we can improve it, balanced against collecting as little as possible and never anything that identifies you within an analytics event.
How long we keep it
Your account data is kept until you delete it. Delete your account and your practice history, mastery, streaks, leaderboard entries and sign-in identity are all removed — not archived, not anonymised and retained, but deleted. You can do this from Settings inside the app, or by emailing us.
Anonymous analytics events are not tied to your account after deletion and are retained in aggregate.
Your rights
Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or object to processing based on legitimate interests. Email hello@verbify.co.uk and we will respond within one month.
If you think we have handled your data badly, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first so we can put it right.
Storage on your device
Verbify stores your progress and your sign-in session on your own device so it works offline and you are not asked to sign in repeatedly. On phones and tablets the session is held in the operating system’s secure storage. This is not advertising tracking, and there are no third-party advertising cookies on this site or in the app.
Children
Verbify is built for adults and older teenagers learning Spanish at an intermediate level or above. It is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us information, email us and we will remove it.
Changes
If we change this policy we will update the date at the top. If a change materially affects what we collect or why, we will tell you in the app before it takes effect.
Questions, requests or complaints: hello@verbify.co.uk