WordLedger — Privacy

WordLedger for iPhone, iPad and Android · Updated October 18, 2026

iPhone and iPad privacy

The following sections describe WordLedger iOS 2.1. See the Android section for Android 1.0.

Your vocabulary stays on your device

NextEleven LLC publishes WordLedger, the next version of LexiGlow. Your saved words, definitions, examples, bookmarks, study decks, personal deck notes, discovery history and review schedule are stored locally. The app and its widget share this information through an Apple App Group on your device. WordLedger does not send that vocabulary to a NextEleven server, an AI provider or an advertising service. It includes no advertising or third-party analytics SDK and requires no WordLedger account.

Pronunciation and reference links

Pronunciation uses Apple’s system text-to-speech and installed voices; voice availability depends on your device settings. WordLedger does not record your microphone. Core vocabulary and practice work offline. If you choose to open an external usage reference, website or support link, that destination handles the resulting connection under its own policies.

Apple purchase services

Where available, Apple processes optional Plus purchases. WordLedger uses Apple StoreKit to read and verify purchase entitlements and previous app ownership on your device. NextEleven does not operate a purchase-validation server for this app and does not receive your payment-card details. Apple processes transaction and account information under its privacy policy. Existing eligible LexiGlow ownership can provide Plus after verification. Purchase availability depends on the installed version; purchase records are separate from local vocabulary.

Widgets, sharing and backups

Widgets may show words on your Home or Lock Screen. Recall mode hides the meaning but still displays the word. Use the system’s widget and lock-screen controls to choose what is visible. When you export or share a JSON backup or PDF study kit, you choose the destination. A backup can contain personal entries, review data and deck notes; keep it private. Recipient services handle shared copies separately. Apple device backups may include app data according to your settings. WordLedger does not provide its own cross-device sync.

Retention and deletion

Local vocabulary remains until you change or remove it, erase the app’s data or uninstall the app. Keep a backup before moving devices or removing the app. Exported copies and device backups have separate deletion controls. NextEleven cannot retrieve or remotely erase content stored only on your device. Uninstalling the app does not erase Apple’s purchase records or cancel a subscription purchased in an earlier version.

Diagnostics and voluntary support

Apple may process system diagnostics according to your device’s analytics settings. The app has no separate NextEleven telemetry service. If you email support, your email provider and our email provider process the message. We use information you choose to send to answer your request. Please use fictional examples or redacted screenshots and do not send passwords, purchase tokens, private deck notes or complete backups.

WordLedger for Android

The sections above describe iPhone and iPad. This section describes the native WordLedger Android 1.0 app, including its test builds, and the differences from iOS. Android availability depends on its release status; this policy is not a claim of store approval.

Words, definitions, examples, bookmarks, study decks, personal context, discovery history and review schedules are stored in the app's local database. Its Home Screen widget reads this local library. WordLedger does not send vocabulary or personal context to NextEleven, an AI service or an advertising service. There is no WordLedger account, advertising or NextEleven-operated analytics endpoint.

Pronunciation uses an installed offline English text-to-speech voice selected through Android's system service. WordLedger does not record your microphone. Voice availability and the speech service's own settings depend on your device. Core study and saved content work offline. External help or policy links open in another app, whose provider handles that connection.

Google Play purchases and diagnostics

Google Play processes the optional one-time Plus purchase. WordLedger uses Google Play Billing to query products and previous purchases, verify signed purchase information locally and acknowledge purchases. A signed receipt is kept privately on your device to retain previously verified one-time access offline. A successful purchase-status query can update that access. Receipts and purchase tokens are not included in vocabulary backups or sent to a NextEleven server. NextEleven does not receive your payment-card details through WordLedger.

Google processes purchase, account and payment information under its own terms and privacy policy. The Google Play Billing library also includes network and diagnostic components; Google may process billing-service diagnostics and associated network/device information. This is separate from your local vocabulary. WordLedger has no separate NextEleven crash-reporting or analytics service. Your operating system and Google services may process additional diagnostics according to their settings.

Android backup, visibility and deletion

WordLedger excludes its Android app data from automatic cloud backup and device-transfer backup. Use the free JSON export and import tools to move your library deliberately. A backup may include personal definitions, review history and deck context. PDF kits include deck context only if you opt in. You choose where exported files go; the destination app or service handles shared copies under its policies. Android and iPhone purchases are separate and do not transfer through a backup. WordLedger provides no automatic cross-device sync.

Home Screen widgets may display words and, in Reading mode, their meanings. Choose Recall mode or remove the widget if you do not want meanings visible. Erasing the app's data or uninstalling it removes its local library and receipt cache; keep a private backup first. Exported files and Google purchase records have separate retention/deletion controls. NextEleven cannot recover or remotely erase a library stored only on your device. Contacting support is voluntary; send only a short description and redacted or fictional examples, never passwords, purchase tokens or a complete private backup.

Contact and scope

Privacy questions: nextelevenstudios@gmail.com. This page covers the native WordLedger iOS 2.1 update and Android 1.0 app as described separately. Earlier LexiGlow versions can have different implementations. Android section added October 18, 2026.

Apple Privacy Policy · Google Privacy Policy · Platform-specific help