Privacy policy
Tres Palabras Ltd · Registered in England & Wales, company no. 17356000 · 167-169 Great Portland Street, 5th Floor, London, W1W 5PF · hola@trespalabras.app
Effective date: 6 August 2026
This policy covers the Tres Palabras website and the Tres Palabras app. The short version: we collect the minimum the product needs to work, we don't show ads, we don't sell data, and we don't track you for advertising. The rest of this page is the detail.
The website
If you join the waitlist or newsletter, we collect your email address to send you the newsletter and news about the app. The signup form is provided by Beehiiv, who store the list on our behalf; Beehiiv is based in the US, and transfers are covered by safeguards recognised under UK law. Beyond that form, this website sets no cookies and runs no tracking or analytics. Unsubscribe at any time using the link in any email, and your address is deleted from the list.
The app
An account, if you create one. You can try your first session without an account. If you subscribe, you create an account — with your email address and a password, or by signing in with Apple or Google. Sign-in with Apple or Google shares only your email address with us (Apple lets you use a private relay address instead); we get nothing else from those accounts. Accounts are managed by Supabase, our backend provider, hosted in France, in the EU. Until you create an account, your progress is stored on your device, tied to a device identifier that never leaves it.
Your learning progress. Which words you've been introduced to, how your reviews went and when — the record that lets the app schedule your reviews and keep your progress if you change phones. This is stored on your device and synced to your account.
Your subscription status. Payments are taken by Apple's App Store or Google Play — we never see your card details. To know whether your subscription is active, we receive subscription status and anonymised transaction identifiers, processed by RevenueCat on our behalf.
Crash reports and basic usage data. If the app crashes, we receive a technical report (device model, operating system version, what went wrong) through Firebase Crashlytics so we can fix it. We also collect basic, aggregated usage data — which features are used, roughly how sessions go — through Firebase Analytics, configured without advertising identifiers and with Google's data-sharing options switched off. This tells us how the app is doing; it is not used to profile you.
Emails you send us. If you write to hola@trespalabras.app, we'll have your email address and whatever you tell us, and we use it to reply.
What we don't do
No advertising, and no advertising networks or identifiers in the app. No selling or renting data, to anyone, ever. No location tracking, no access to your contacts, no data brokers, and no marketing lists you didn't ask to join.
Why we're allowed to process this (UK GDPR)
Providing the service you signed up for — your account, progress and subscription — is processing necessary for our contract with you. Crash reporting, aggregated usage data and keeping the service secure rest on our legitimate interest in running a working product. The newsletter, and reminder notifications (which are scheduled on your device and controlled entirely through your phone's notification settings), happen only with your consent.
Where your data goes
Some of our providers are outside the UK: Supabase hosts our database in France, in the EU, and Beehiiv, RevenueCat and Google (Firebase) process data in the US and elsewhere. All transfers are covered by safeguards recognised under UK law, including the UK's International Data Transfer Agreement and adequacy arrangements.
How long we keep things
Your account and progress: for as long as you have an account. Crash and usage data: kept briefly for diagnostics, then deleted or aggregated. Newsletter addresses: until you unsubscribe. If your subscription lapses, your account and progress are kept so everything is there if you return — unless you delete your account.
Deleting your account
You can delete your account and learning progress at any time in the app, under Profile. You can also request deletion at trespalabras.app/delete-account.html or by emailing hola@trespalabras.app — deletion requests are honoured whether or not you still have the app installed. Deletion is permanent.
Your rights
Under UK data protection law you can ask for a copy of your data, ask us to correct or delete it, object to processing, and withdraw consent at any time. Write to hola@trespalabras.app and we'll sort it. If you're not happy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Age
Tres Palabras is designed for adults and is not directed at children under 18.
Changes
If this policy changes in a way that matters, we'll say so in the app or by email, and the effective date above will move. We won't quietly change what we do with your data.