Privacy policy

Controller

Desarrollo Creativo is the controller of Wengu's data. For any privacy question you can write to privacidad@wengu.es.

What data we process

• Account: when you sign in with Google we receive your name, email, profile picture and an identifier of your Google account. We never receive your password.
• Preferences: language, time zone, daily goal and, if you enable them, reminders.
• Your content: the decks and cards you create or import, with their images and audio, tags and settings.
• Your study: every answer (rating, mode, time spent and, in Type mode, what you typed if it was not exact, up to 60 characters), each card’s progress and your daily statistics.
• Technical data: the servers temporarily log data such as your IP address and browser so the service works and to protect it from abuse.

Why we use it

To provide the service you ask for: signing in, saving your decks, scheduling reviews and showing your statistics. The legal basis is the performance of the service you accept when creating your account. Technical data is processed on the basis of legitimate interest, to keep the service secure.

We make no automated decisions about you and build no profiles for commercial purposes.

Who it is shared with

Only with the providers that run Wengu, acting as processors:

• Cloudflare: hosting of the website and API, database and storage of images and audio.
• Google: sign-in with your Google account.
• Cloudflare Workers AI: if you use “Generate with AI”, the text or image you send is processed to suggest cards. It is not stored in Wengu, except the cards you choose to keep.

Some of these providers may process data outside the European Economic Area, with the safeguards required by the GDPR (such as standard contractual clauses or the EU-US Data Privacy Framework).

What you choose to share: a deck shared by link can be seen by anyone with the link. Community decks are published without your name. In a deck edited as a group, its members see the content, who invited them and the name and email of the other members. Wengu administrators see account data and activity figures, and the content of decks you submit to the library so they can review them; never the rest of your cards.

When importing a Noji file, if images are missing, your browser downloads them directly from Noji’s servers.

Cookies and local storage

We only use technical cookies, needed for the service to work, so they do not require consent:

• memo_session: keeps you signed in (30 days).
• memo_locale and memo_tz: your language and time zone.
• google_oauth_state, google_code_verifier and memo_next: protect Google sign-in and take you back to the page you were on (they last a few minutes).

Your browser also keeps, in its local storage, the light or dark theme, collapsed folders and answers waiting to be sent when you study offline.

Android app

The app uses the same data and account as the website. On the phone it keeps your session, a copy of your decks to study offline (including the ones you download, with their images and audio) and answers waiting to be sent. All of it is deleted when you sign out or uninstall the app.

Sign-in uses Android’s Google account system. Reading aloud uses the speech engine installed on your phone. The app does not use the advertising ID, your location or your contacts.

How long we keep it

As long as you have an account. You can delete it at any time from “My account”, on the website or in the app: your data, decks, cards, history, images and audio are deleted. Automatic database backups are replaced within 30 days at most, and technical logs are kept according to Cloudflare’s policies.

Deleting your account or your data

To delete your Wengu account and all its data:

• On the web: sign in at wengu.es, tap your picture (top right) to open “My account”, go to “Delete my account”, type your email to confirm and tap “Delete permanently”.
• In the Android app: open the “Account” tab, tap “Delete my account”, type your email to confirm and tap “Delete permanently”.
• If you cannot sign in, write to privacidad@wengu.es from your account’s email and we will delete it within 30 days at most.

Immediately and permanently deleted: your account (name, email, picture and Google identifier), your preferences, your decks and cards, their images and audio, your review history and your statistics. Decks other people copied (by link, from the community or as a group) remain theirs, without any of your data. Only the automatic database backups, renewed within 30 days at most, and Cloudflare’s technical logs, under its policies, are kept.

To delete only part of your data without deleting your account: on the web you can delete any deck (with the bin icon, “Delete deck”, in the deck view) or card, with its images and audio, and signing out of the app deletes everything it kept on the phone. You can also ask us to delete specific data by writing to privacidad@wengu.es.

Your rights

You can access, rectify or erase your data, object to or restrict its processing and request its portability by writing to privacidad@wengu.es. If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).

Minors

Wengu is not aimed at children under 14. If you are under that age, you need the consent of your parents or guardians to use it.

Changes

If we change this policy, we will publish the new version here with its date. If the change is important, we will let you know in the app.