This policy explains what Magna Carta English (the “App”) collects when you use it to learn English, why, and the choices you have. The App is built around lessons, vocabulary tiers, and a small in-app economy of coins and jesters, and optional games with friends — this policy covers exactly what that requires and nothing more.
01Overview
Magna Carta English is developed by Luis Felipe Pazmino Hernandez (“we,” “us”). We built the App to run with as little data collection as the features allow: an account to save your progress, Firestore to sync it across your devices, an optional friends list for comparing progress and playing Jousts, and Apple's own purchase system for coins, jesters, and Premium. We don't run advertising or analytics SDKs in the App today.
02Information we collect
| Category | What it includes | Source |
|---|---|---|
| Account information | Email address, display name, and a unique account ID | Firebase Authentication, optionally via Sign in with Apple or Google Sign-In |
| Player profile | Your chosen username, the name shown to friends, your avatar choice, total points, and emblem count | Provided by you when you set up friends; stored in Cloud Firestore |
| Friends & Jousts | Your friend requests and friends list, Joust challenges and their results (score, correct answers, time, and streak), and players you've blocked | Generated as you use the social features; stored in Cloud Firestore |
| Reports | When you report a player: your account ID, theirs, their username, and the reason you picked | Provided by you; stored in Cloud Firestore |
| Learning progress | Lesson and quiz results, vocabulary-tier progress, streaks, and saved coin / jester balances | Generated as you use the App; stored in Cloud Firestore |
| Purchase status | Product ID and entitlement state for coin packs, jester packs, and the Premium subscription | Apple StoreKit |
| Reminder settings | Whether practice reminders are on, and their scheduled times | Stored locally on your device only |
| App integrity check | A short-lived token proving requests come from a genuine copy of the App on a real Apple device; it does not identify you | Apple App Attest via Firebase App Check |
Camera and microphone
The App asks for these permissions only when you use a feature that needs them, and works without them if you say no. Neither is ever used in the background.
- Camera — used only when you scan a friend's code to add them. The App reads the username in the code and nothing else; no photos or video are saved or uploaded.
- Microphone and speech recognition — used only during Word Slayer rounds, where you say words out loud. Your speech is turned into text to check which words you said, then discarded; we never record, store, or receive your audio or transcripts. On most devices this happens entirely on your device. On devices that don't support on-device recognition, your audio is processed by Apple's speech recognition service under the Apple Privacy Policy.
You can change these permissions at any time in your device's Settings > Magna Carta English.
What we don't collect
The App does not access your location, photo library, contacts, or health data, and it does not read data from other apps.
Payment details
We never see or store your card number, billing address, or other payment details. Purchases are processed entirely by Apple; we only receive confirmation of what was bought and whether it's still active.
04How we use it
- To create and maintain your account, and keep your progress in sync across your devices
- To show your profile and scores to your friends, run Jousts, and enforce blocks
- To review reports and keep the social features safe
- To confirm requests come from the genuine App, which helps prevent cheating and abuse
- To unlock the coins, jesters, or Premium features you've purchased
- To respond to support requests you send us
- To diagnose and fix problems when you report them
We do not sell your information, and we do not use it to build advertising profiles.
05Third-party services
The App relies on a small set of external services to work. Each only receives what its function requires:
| Service | Purpose | Provider |
|---|---|---|
| Firebase Authentication | Creating your account and signing you in | Google LLC |
| Sign in with Apple | Optional sign-in with your Apple ID | Apple Inc. |
| Google Sign-In | Optional sign-in with your Google account | Google LLC |
| Cloud Firestore | Storing and syncing your account, progress, and social data | Google LLC |
| Firebase App Check / App Attest | Confirming requests come from a genuine copy of the App | Google LLC and Apple Inc. |
| Speech recognition | Turning what you say in Word Slayer into text, on devices that can't do it on-device | Apple Inc. |
| App Store / StoreKit | Processing purchases and subscriptions | Apple Inc. |
These providers handle data under their own privacy policies: Google Privacy Policy and Apple Privacy Policy.
06Purchases & subscriptions
Coin packs and jester packs are one-time consumable purchases; Premium is an auto-renewing monthly subscription. All purchases are billed by Apple to the payment method on your Apple ID.
You can manage or cancel Premium any time in Settings > [your name] > Subscriptions on your device. Coin and jester purchases are final once delivered, consistent with Apple's App Store terms.
07Retention & deletion
We keep your account and progress data for as long as your account is active, so you don't lose your place in the App. You can permanently delete your account and its data from within the App under Account > Delete Account and Data, or by contacting us at the address below. For your security, the App asks you to sign in again first.
Deletion removes your account, saved progress, username, leaderboard entry, friendships, Joust history, and block list from our systems. If you signed in with Apple, we also revoke the App's access to your Apple ID. Deletion does not reverse purchases already made through Apple.
Finished and expired Jousts stay in your history until you remove them or delete your account. Reports you submit about other players are kept only as long as needed to review them and keep players safe.
08Your rights
Depending on where you live, you may have the right to:
- Access a copy of the data we hold about you
- Correct inaccurate account information
- Delete your account and associated data
- Object to or restrict certain uses of your data
To exercise any of these, contact us using the details in Section 12. We'll respond within a reasonable time and may need to verify it's really you asking.
09Children's privacy
Magna Carta English is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account or provided us information, contact us and we'll delete it.
10Security
Your data is stored with Firebase's infrastructure, which encrypts data in transit and at rest. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard practices.
11Changes to this policy
If we change this policy in a way that materially affects how your data is handled, we'll update the “Last updated” date above and, where required, notify you in the App.
12Contact
Questions about this policy or your data? Reach us at:
Luis Felipe Pazmino Hernandez lfpazmino92@gmail.com
03Friends, Jousts & leaderboards
The social features are optional. Nothing about you is visible to other players until you choose a username. After that:
Your email address, sign-in method, and detailed lesson history are never shown to other players. Usernames and names are checked against a filter for offensive words.
Blocking and reporting
You can remove a friend or block any player at any time. Blocking hides you from each other, ends your friendship, and removes any Jousts between you, and stops them from sending you new requests or Jousts. You can also report a player for an offensive name, cheating, harassment, or another reason; reporting also blocks them. We review reports and may remove offending usernames or accounts. The reported player is not told who reported them.