Privacy Policy

1. Who this covers

This policy describes the Digital Goldlist mobile app for iOS and Android, and this website. In it, “we” means the app’s developer and “you” means the person using the app.

2. Personal data we collect

None. The app has no sign-up, no login and no user account. We operate no server that the app talks to, so no information about you or your use of the app ever reaches us. We have added no analytics, no advertising, no attribution or marketing identifiers, and no crash or performance reporting.

That covers everything we wrote. It does not cover Google’s ML Kit, which the Android version uses for on-device translation and which collects data of its own the moment you first translate something. Section 5 sets that out in full. We never see any of it, but it is collection that happens inside the app, so we would rather name it here than let the word “none” do more work than it should.

3. What is stored on your device

Everything you create lives in a database held privately by the app on your own device:

• your books, and the languages you chose for them;
• the words and phrases you enter, and their translations;
• your lists, their state and their resting dates, and your answers;
• your settings, including the app language and theme.

None of this is transmitted anywhere. Uninstalling the app deletes it. If you have your device’s own backup turned on, this data may be included in that backup — that is a service of Apple or Google under their terms, not of ours, and we have no access to it.

4. Optional AI translation

AI translation is off by default. It does nothing until you turn it on, choose a provider, and enter your own API key for it. You can choose one of:

• Google Gemini — requests go to generativelanguage.googleapis.com, governed by Google’s Privacy Policy.
• OpenAI — requests go to api.openai.com, governed by OpenAI’s Privacy Policy. The app asks OpenAI not to store the request (store: false).
• DeepL — requests go to api.deepl.com, or api-free.deepl.com for a free key, governed by DeepL’s Privacy Policy.

While it is on, each time you ask for a translation the app sends the single word or phrase being translated, together with the source and target language, to the provider you chose and no other, authenticated with your key. Nothing else from your lists is sent, and requests are capped at 100 translations per day across all providers.

Because each request is made with your own key, it is governed by that provider’s privacy policy and by the terms of the account you obtained the key from. We are not a party to it and never see the request.

Your API keys are stored in the platform’s secure hardware-backed store — the Keychain on iOS, the Android Keystore on Android — each kept separately per provider, and a key is never sent anywhere except to its own provider as authentication for your requests. You can delete any of them at any time in Settings.

5. On-device translation

When AI translation is off, the Translate button uses the translation built into your device.

• On iOS this is Apple’s Translation framework, which runs on the device.
• On Android this is Google ML Kit. The first time you use a language pair, ML Kit downloads that language model from Google; the translation itself then runs on the device.

ML Kit also collects data of its own, and because that is the one place where something leaves the app without you choosing a cloud service, here is what we measured in the shipping build rather than a paraphrase of the documentation.

Nothing happens until you translate for the first time. Up to that moment no part of Google’s machinery is running and nothing has been created. On that first translation, ML Kit creates a per-installation identifier and begins queueing diagnostic events addressed to Google’s logging service. Each event carries a description of the device: model, manufacturer, hardware and build, the ML Kit and app version, your language, country and time-zone offset, the network type, and your mobile carrier codes. For translation specifically, Google’s documentation adds the source and target languages you chose.

The identifier is tied to the installation rather than to you, and Google states this data is not used to track you across apps. It is not sent to us and we have no access to it. Google offers no way to switch it off, so the app asks before starting ML Kit the first time; declining leaves it untouched, and you can still translate with the optional AI translation or type translations yourself. All of it is governed by Google’s Privacy Policy.

None of this applies on iOS, where translation is Apple’s and no ML Kit is present.

6. Speech

The Speak button uses the text-to-speech voices built into your device. What is spoken is handled by your operating system under its own terms.

7. Notifications

If you allow notifications, the app schedules a single local reminder on your device for when a list has finished resting. It is generated on the device. There is no push service, and no notification is ever sent from a server.

8. Permissions

• Internet — used for the optional AI translation and, on Android, the ML Kit model download and the diagnostics described in section 5.
• Notifications — optional, only for the reminder described above.

9. Children

The app is suitable for general audiences and collects no personal data from anyone, including children.

10. Your rights

Because we hold no data about you, there is nothing for us to disclose, correct, export or erase. You are in full control of everything the app stores: you can delete individual items in the app, or remove all of it by uninstalling.

11. Changes to this policy

If this policy changes, the revised version will be posted on this page with a new effective date. Material changes will also be noted in the app’s release notes.

12. Contact

Questions about this policy can be sent to privacy@digitalgoldlist.com.

← Back to Digital Goldlist