Privacy

This policy explains how Munzico Limited uses personal data when you use the Munzi app and this website. It is written for the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you are in the European Economic Area, the EU General Data Protection Regulation may also apply to you.

Who we are

The controller is Munzico Limited, company number 17471841, registered in England and Wales. The registered office is 526a, Probiz Accountants Liverpool Road, Manchester, United Kingdom, M30 7JA.

Munzi is the name of our app. Munzico Limited is the legal entity responsible for personal data described in this policy.

We have not appointed a data protection officer. For privacy questions or to use the rights below, email support@munzi.app or write to the registered office. Please put “Privacy request” in the subject if you can.

What this policy covers

It covers:

• the Munzi app on iPhone and Android;
• messages you send to support@munzi.app or feedback@munzi.app;
• the email address you give us if you opt in to the Munzi waitlist or update newsletters;
• visits to this website.

Apple, Google, and the email or messaging app you use to contact us have their own privacy policies for their services. This policy does not replace those.

Data that stays on your device

Munzi does not ask you to create an account. The dictionary and pronunciation audio are included with the app. They are used on your device. We do not receive a copy of your learning data, and we do not operate a server that stores it.

The app stores the following on your device, so it can work the way you set it:

• an optional display name;
• an age bracket, if you choose one, including “prefer not to say”;
• how you heard about Munzi, if you tell the app;
• study settings, such as Mandarin or Cantonese, simplified or traditional characters, HSK level, daily word goal, topics you are interested in, pronunciation pace, reminder times, and themes;
• favourites, learning lists, streak, and recent search history;
• whether reminders are turned on.

The age bracket is used on the device to hide explicit dictionary entries for younger learners and for anyone who prefers not to give an age. It is not sent to us.

If you turn reminders on, Munzi asks the operating system for permission and schedules local notifications on the phone. We do not use a remote push service, and we do not receive the contents of those reminders.

Home-screen and Lock Screen widgets read the same on-device information so they can show a word or your streak. That stays on the device.

You can export a backup file and import one, using the system share sheet or file picker. If you send that file to someone, you choose the app or person who receives it. We do not receive the backup unless you attach it to a message you send us.

You can share a word card as an image through the system share sheet. We do not receive that image unless you send it to us.

You can delete this saved data in the app, replace it by importing a backup, or remove it by uninstalling Munzi. Because we do not hold a copy, those are the ways to erase it.

When you contact us

If you email support or feedback, we receive your email address, the message, and anything you choose to include, such as a backup file or a description of a problem.

A message started from inside the app opens your email app with a draft that can include diagnostics: the Munzi version and build, the operating system, whether the build is a store or development build, your language and script settings, HSK level, daily word goal, the dictionary file name, and the Expo SDK version. You can delete that block before you send it. We only receive it if you send the email.

We use correspondence to reply, investigate faults, and keep a record of support. A support or feedback email is not an opt-in to the waitlist or newsletters, and we do not add you to that list because you wrote to us.

Waitlist and update newsletters

You can choose to give us your email address so we can tell you when Munzi is available, and send occasional updates about the app. We add you, only if you opt in, for example by ticking an unticked box or submitting a form that asks you to join. We do not add you because you visited this site, downloaded the app, or emailed support.

We keep that email address so we can send those messages. We do not ask for anything else for the list. The legal basis is your consent (UK GDPR Article 6(1)(a)). Consent is also what the Privacy and Electronic Communications Regulations require before we send this kind of email.

You can withdraw consent at any time. Each message will include an unsubscribe link, and you can email support@munzi.app and ask to be removed. Withdrawing consent does not affect support messages you have already sent us. After you unsubscribe, we delete your address from the list. We may keep a minimal record that you opted out, so we do not add you again, for as long as we run the list.

This website

This website is static. It does not have accounts. We do not use analytics or advertising cookies, and we do not set cookies to recognise you across visits.

The site is hosted by Cloudflare. To deliver and protect the site, Cloudflare processes technical data about each request, such as your IP address, the date and time, the page you request, and your browser type. A security feature may set a short-lived cookie used only to tell genuine visitors from automated traffic. That cookie is not used for advertising.

Cloudflare’s own privacy notice describes its processing: cloudflare.com/privacypolicy.

What we do not do

• We do not sell personal data.
• We do not buy contact lists or show third-party advertising in Munzi.
• We do not use analytics, crash-reporting, or advertising SDKs in the app.
• We do not record your voice. Pronunciation is played from audio included with the app.
• We do not ask for your precise location.
• We do not make solely automated decisions about you that have a legal effect, or a similarly significant effect, on you. An HSK placement in the app only chooses a study level on your device.

Why we use personal data

Where UK GDPR requires a legal basis, we rely on the following.

Providing the app

Settings and learning progress stored on your device are used so Munzi can do what you asked it to do: show words, keep lists, schedule reminders, and apply the options you chose. To the extent that this on-device processing is our responsibility, the legal basis is that it is necessary to provide the app you have chosen to use (UK GDPR Article 6(1)(b)). We cannot access that data from our systems.

Support and feedback

We use the email you send us because it is in our legitimate interests to answer you, fix problems, and keep a short record of what was asked (Article 6(1)(f)). You can object to this, as described under your rights. If you are asking us to do something specific before or during your use of Munzi, we may also rely on Article 6(1)(b).

Running this website

Technical logs and any security cookies are processed because it is in our legitimate interests, and Cloudflare’s, to deliver the site, keep it available, and resist abuse (Article 6(1)(f)). The logs are not used to advertise to you.

Waitlist and newsletters

If you opt in, we use your email address to send you waitlist and update messages because you have consented (Article 6(1)(a)). You can withdraw that consent at any time, as described above. Withdrawing it does not affect the lawfulness of messages we sent before you withdrew.

We do not use consent as the basis for the app, for support emails, or for running this website. Where a screen asks you to allow notifications, that is a permission from your operating system, separate from GDPR consent.

Who receives personal data

We do not pass on-device learning data to anyone, because we do not receive it.

For the personal data we do receive, recipients are:

• Cloudflare, Inc., which hosts this website and processes connection data as our processor.
• The provider that hosts the support@munzi.app and feedback@munzi.app mailboxes, which stores messages as our processor.
• Any service we use to store the waitlist and send newsletters, which keeps your email address as our processor. We only share the address you used to opt in.
• People at Munzico Limited who need to message you to reply, to fix a problem, or to send the updates you have opted in to.

We may also disclose personal data if the law requires it, or to establish, exercise, or defend legal claims. We would share only what is needed for that purpose.

If you download Munzi from the App Store or Google Play, Apple or Google processes your store account under its own policy. We do not receive your store login. If you share a word card or a backup, the operating system and the app you pick handle that transfer.

Transfers outside the UK

Learning data on your device is not transferred to us, in the UK or elsewhere.

Cloudflare operates an international network and may process website connection data outside the UK. Where personal data leaves the UK, the transfer is protected by UK adequacy regulations or by the International Data Transfer Agreement, or the EU standard contractual clauses plus the UK addendum, as set out in Cloudflare’s data processing terms.

Emails, including the waitlist, are stored by our mailbox or newsletter provider. If that storage is outside the UK, we use the same kinds of safeguard: an adequacy regulation, or an approved transfer contract. You can ask us which applies to your address.

How long we keep personal data

• On your device. Until you delete it in the Munzi app, overwrite it with an imported backup, or uninstall the app. We have no separate copy to delete.
• Support and feedback emails. Until the matter is finished, and for up to 24 months after the last message in that thread. We then delete it, unless we have to keep it longer to meet a legal duty or to deal with a claim.
• Waitlist and newsletters. Until you withdraw consent or unsubscribe. We then delete the address from the list. A note that you opted out may be kept so we do not sign you up again.
• Website logs. Cloudflare keeps them for the period set out in its customer terms and security logs, which is typically a short operational period rather than a marketing archive. We do not build a visitor profile from them.

Your rights

Under UK GDPR you have the right to:

• ask whether we hold personal data about you, and for a copy of it;
• ask us to correct it;
• ask us to delete it;
• ask us to restrict how we use it;
• ask for data you provided to us, in a portable format, where the basis is contract or consent and processing is automated;
• object to processing based on legitimate interests;
• withdraw consent, where we rely on consent;
• complain to a supervisory authority.

For learning data that never leaves your device, we cannot retrieve, correct, or export it for you. Use the controls in Munzi, or uninstall the app. If you have sent us a copy, for example in a support email, contact us and we will handle that copy.

To use these rights for data we actually hold, email support@munzi.app. We may ask for enough information to find the correspondence and to check we are writing to the right person. We will respond within one month, unless the request is complex, in which case the law allows us up to two further months and we will tell you.

If you object to our legitimate interests, we will stop unless we can show compelling grounds that override your interests, rights, and freedoms, or we need the data for legal claims. If you withdraw consent for the waitlist or newsletters, we will stop sending those messages. You can do that by emailing support@munzi.app.

These rights do not force us to keep data we do not have, and they do not cover information that is not about you.

Children

Munzi can be used by learners of different ages. There is no account, no behavioural advertising, and no social network. An age bracket, if entered, stays on the device and is used to hide explicit dictionary entries when the bracket is under 18 or “prefer not to say”.

We do not knowingly collect personal data from children on our servers, and the waitlist is not aimed at children. If a child emails us, we use the message only to reply and we delete it on the timetable above. If we learn that a waitlist address belongs to a child, we will delete it. A parent or guardian can email support@munzi.app about a message a child has sent us.

Security

On-device data is protected by your phone’s lock and by the operating system’s app storage. Keep the device locked and be careful who you send a backup file to.

Emails we receive are available to the people who handle support for Munzico Limited and are stored in our mailbox provider’s systems. No method of storage or transmission is perfectly secure.

Changes to this policy

If this policy changes, we will update this page and the date at the top. If we start receiving learning data on a server, add an account, or use analytics, we will update this policy before that change and, where the law requires it, ask you before we rely on a new basis.

This version was published on 27 September 2026.

How to complain

We would like to hear from you first, at support@munzi.app. You can also complain to the Information Commissioner’s Office, the UK supervisory authority for Munzico Limited:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
ico.org.uk/make-a-complaint

If you are in the European Economic Area, you may complain to the supervisory authority in the country where you live or work.

Controller: Munzico Limited, company number 17471841, 526a, Probiz Accountants Liverpool Road, Manchester, United Kingdom, M30 7JA. Email: support@munzi.app.