Last updated 26 October 2026. Applies to the Watchwords iOS app and the Watchwords Chrome extension, both published by Synton.
Watchwords stores the words you chose to keep, and the small amount of history needed to schedule them. It is not an analytics product and it does not follow you around the web.
Signing in with Apple gives us an email address and a user id. If you use Apple's Hide My Email, we receive the relay address and never see your real one. There is no password, because there is nothing to set one on.
When you click a word in the extension, the following travels with it:
Clicking the same word again bumps a counter and refreshes the sentence. It never resets the schedule.
Every review is appended to a log: which card, which grade you pressed, how long you looked at it, and the interval that came out. This is what the scheduler runs on, and what draws the forecast. Per day, we also keep three counters: words kept, reviews done and seconds of video watched. Those three draw the contribution grid.
Daily limits, reminder time, and whether reminders are on at all.
To connect the extension to your account, the app shows a six-character code that expires in ten minutes. Exchanging it gives the browser an opaque token. That token is stored on the server only as a SHA-256 hash, so it cannot be read back out of the database, and it unlocks exactly one endpoint: the one that receives kept words. Unpairing the browser from the app takes effect on the extension's next sync.
Watchwords shows no ads. It is a paid app with no free version, and the Google Mobile Ads SDK that is linked into it has no ad unit configured, so it never starts: no ad is requested, no consent form or tracking prompt appears, and no advertising identifier is read. If that ever changes, this section changes first, before any ad is shown.
For completeness, if ads were turned on they would be served by Google AdMob, which is a separate controller of whatever it collects, typically an advertising identifier and coarse device signals. On iOS, that identifier is only available if you allow it when the system asks. Declining costs you nothing but slightly less relevant ads.
Where consent law requires it, a consent form would appear before any ad is requested, and Settings, Ad privacy choices reopens it at any time so you can change the answer. If consent is refused, no ad is requested and no ad strip is drawn.
| Who | What for | Where |
|---|---|---|
| Supabase | Database, authentication and the two endpoints the extension talks to | European Union (Frankfurt) |
| Apple | Sign in with Apple, purchases, push notifications | Per Apple's own policy |
| Google AdMob | Not active: linked but not configured, no ad is served | Per Google's own policy |
Row-level security is on for every table, and the policies are keyed to your user id, so one account cannot read another's rows even in the event of a client bug.
Words and review history are kept until you delete them, because a spaced-repetition schedule is only as good as its history. Deleting a word in the app marks it deleted immediately and removes it on the next cleanup. Pairing codes expire after ten minutes and are destroyed once used.
Open Settings, Delete account in the app. It removes the account and everything attached to it: your words, the review history, the daily counters, the settings and any paired browser. It happens immediately, in one transaction, on the server and on the phone.
Deletion is permanent. There is no export yet, so email privacy@mywatchwords.com first if you want a copy. If you no longer have the app installed, write to the same address from the account's email and we will do it for you.
If you are in the EEA or the UK, the legal basis for the account and your saved words is performance of the contract, and no processing relies on advertising consent, because no ad is served. You can ask for access, correction, export, restriction or erasure at the address above, and you can complain to your national supervisory authority.
If you are in California, Watchwords does not sell or share personal information as the CCPA defines those terms, and you are not treated differently for exercising any right.
Watchwords is not directed at children under 13, and accounts are not knowingly created for them. If you believe one has been, write to the address above and it will be removed.
If this policy changes in a way that affects what is collected, the app will say so before the change takes effect. The date at the top always reflects the current version.
Synton, privacy@mywatchwords.com. Watchwords lives at mywatchwords.com.
Watchwords is a product by Synton.