Privacy Policy: Android App

Last updated: April 27, 2026

This page describes the Android-specific aspects of Sematos's privacy practices.

For our full privacy policy (covering account data, sub-processors, GDPR rights, and account deletion), see the main Privacy Policy.

Data Stored on Your Device

The Sematos Android app stores the following data locally:

• Cached API responses, for faster browsing and lower data usage.
• Your favorites and custom lists, when you use the app without signing in. This data lives only on your device and is removed if you uninstall the app.
• When you sign in, authentication tokens are stored in Android's encrypted local storage so you stay signed in across launches. Tokens are removed when you sign out or uninstall the app.

Data Stored on Our Servers (Signed-In Users Only)

If you sign in, your favorites and custom lists are synchronized with our servers so they are available across devices. The full list of account data we hold (email address, password hash or passkey credential, favorites, lists, access logs) is described in the main Privacy Policy. Signing out preserves your local favorites; deleting your account from Settings removes everything from our servers.

Passkeys

Passkeys use WebAuthn cryptography via Android's Credential Manager API. Your private key never leaves your device. Only your public key and a signed challenge are sent to our servers when you register or sign in. Your device may sync your passkey across other Android devices via Google Password Manager; this is handled by Android, not by us.

App Links

When you tap a link in our email-verification or password-reset emails, Android opens the Sematos app directly. The link contains a one-time token that the app exchanges for a sign-in session, and we do not receive any additional data from this redirection.

Google Play In-App Reviews

The app may display Google Play's in-app review prompt. This is managed entirely by Google Play. Sematos does not receive, access, or store your review or any personal information related to it.

Analytics and Tracking

The Sematos Android app uses no analytics SDKs, no tracking technologies, and no advertising frameworks. We do not track your usage of the app.

Third-Party SDKs

The Android app uses Google Play services only for the in-app review prompt and for the Credential Manager API that handles passkeys. The sub-processors that handle account data on the server side are listed in the main Privacy Policy.

Google Play Data Safety

Google Play requires us to declare what data the app collects. The Sematos Android app declares: Email Address, User ID, and Other User Content (favorites and custom list names). All three are linked to your account; none are used for tracking.

Children

The Sematos dictionary can be used freely without an account at any age. Creating a Sematos account is not directed at children below the age of digital consent in their country. We do not knowingly collect personal information from such children. If you believe such a child has created an account, please contact us so we can delete it.

Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision.

Contact

If you have any questions about this privacy policy, please contact us at contact@sematos.eu.