Privacy Policy
WiRBL app · Updated 26 October 2026
1. Contact and scope
For privacy questions about WiRBL, email admin@wirbl.com. This notice describes the WiRBL learning app. It does not replace the separate notices for forms or other services embedded on the WiRBL website.
2. The short version
- Guest learning profiles are saved on your device.
- If you sign in with Apple, your account and learning profile are also saved using Cloudflare’s hosted services.
- Apple handles purchases. WiRBL does not receive your payment-card details.
- WiRBL does not display ads or include advertising-tracking tools.
- The app does not currently provide an AI Note helper or send learning-tip emails.
3. Information used by the app
| Information | Purpose and storage |
|---|---|
| Learning progress and preferences | Lessons, learned and saved words, practice results, notes, rewards, reminders and settings are stored on your device to run the app. Your learning profile is synced to Cloudflare when you are signed in. |
| Anonymous progress overview | To improve lessons, the WiRBL owner can see an anonymous overview of signed-in learners’ progress: edition, country of work, XP, lessons and practice rounds done today with their topic names, the days learned in the last four weeks, streak, flowers in bloom and open weeds. It shows no name, username, email, country of origin or account identifier, and entries are reshuffled each time, so the overview is not used to identify you. It is not shared, sold or used for advertising. |
| Anonymous usage counts | If enabled in Me → Settings → Privacy, the app sends simple counters such as “a lesson was finished”, without your name, account, device ID or location. You can switch this off at any time. |
| Apple sign-in information | Apple’s account identifier, your email address (which may be an Apple private-relay address), and your name if supplied are used to create your account. Cloudflare stores these details and sign-in session records. Your Apple password is not sent to WiRBL. |
| Optional profile details | Your display name, username, selected profile photo, short biography, work position and country of origin are saved if you enter them. They are part of the profile that can sync when signed in. Choosing one photo does not give WiRBL access to your entire photo library. |
| Purchases | The app uses Apple’s verified purchase information to unlock or restore bouquets. It sends Apple a pseudonymous account reference derived from your Apple sign-in identifier; this links a purchase to an account and is not anonymous. |
| Feedback | A suggestion is saved in your profile and can therefore sync. Sending feedback opens your email app with the message and relevant app context; it is sent only when you choose to send the email. Email correspondence includes your sender address and message. |
| Connection and security information | Online services receive technical information such as IP addresses and request details to deliver and protect the service. Cloudflare uses the connecting IP address to limit excessive requests. |
The app does not request access to your contacts, precise device location or microphone. Read-aloud uses your device’s speech facilities. Do not put patient names, identifiable medical information or other sensitive information into practice notes, profile fields or feedback.
4. Who receives information
- Cloudflare: hosts the account service at app.wirbl.com using Workers and stores account and synced-profile information in D1. You do not need a personal server to use WiRBL.
- Apple: provides Sign in with Apple, App Store purchases and device services under Apple’s privacy policy.
- Fonts: the app’s font is included in the app, so no font request is sent to Google.
- Email services: your email provider and the receiving mailbox service process messages you choose to send to WiRBL.
The Friends and leaderboard features currently use profiles on the same device. The checked account service does not publish a cross-device friends directory or leaderboard. Profile information may be visible to someone using those local features on the same device.
5. Storage location and protection
The account database currently runs in Cloudflare’s Eastern Europe region. This is its current placement, not a guarantee that every provider operation stays in the EU. Connections to the account service use HTTPS. The service verifies Apple sign-in and checks a session token before allowing account access.
Cloudflare, Apple, Google and email providers may process information in other countries, including the United States. Cloudflare describes its processing terms and international-transfer safeguards in its Data Processing Addendum. Other providers explain their arrangements in their own privacy notices.
6. Keeping and deleting information
Your local profile remains on the device until it is removed. An online account and synced profile remain in the account database while the account exists.
Use Me → Account → Delete account to request deletion. Deleting an online account requires an internet connection and a valid sign-in. When the server successfully processes the request, it removes the active account record, synced profile and sign-in sessions. If deletion does not complete, sign in again and retry, or contact admin@wirbl.com for help.
Older database copies can remain in Cloudflare’s rolling recovery history for up to 30 days after active records are removed, depending on the hosting plan. This recovery period is separate from active account storage. See Cloudflare’s recovery documentation.
Deleting the app alone does not delete an online account. Copies on other devices, personal backups and files you export are separate and may need to be removed by you. Account deletion does not erase Apple’s purchase records or emails already sent; those are handled separately by the relevant service. WiRBL retains correspondence only as needed to handle the request and any applicable record-keeping obligations.
7. Why information is processed
Under the GDPR, information needed to provide your account, learning features and purchase access is processed to perform the service contract (Article 6(1)(b)). Necessary service-security measures rely on the legitimate interest in protecting accounts and preventing abuse (Article 6(1)(f)). Applicable legal record-keeping obligations rely on Article 6(1)(c). Optional information is used for the feature you choose to use, not for advertising.
8. Your choices and rights
You can edit your profile, change app preferences and turn off device reminders. Depending on the applicable law, you may request access, correction, deletion or a copy of your personal data, restriction of processing, or object to processing based on legitimate interests. Where processing depends on consent, you can withdraw it. Contact admin@wirbl.com. You may also complain to your local data-protection authority.
9. Intended audience and updates
WiRBL is intended for adults learning German for healthcare work. It is not directed at children under 16. The date above will be updated when this notice changes.