Sentari
Privacy policy
Version of October 26, 2026
Sentari is an English vocabulary app published by Pengram. It works without an account or ads, and most of your data stays on your iPhone. This policy describes exactly what leaves it, why, and how to exercise your rights.
Data controller
PENGRAM, a French simplified joint-stock company with a sole shareholder (SASU) and a share capital of 500 euros, registered with the Paris Trade and Companies Register under number 106 852 981, with its registered office at 16 rue Tiquetonne, 75002 Paris, France. Contact: contact@pengram.app.
In short
- No ads, no advertising or cross-app tracking, no Sentari account.
- Your progress stays on your iPhone and, if you use iCloud, in your private iCloud database, which Pengram cannot access.
- Usage statistics and diagnostics are optional, off by default and set separately.
- Feedback is sent only when you decide to send it. A screenshot is attached only if you tick the box.
- The free plan checks an authorization once a day, without ever sending your words or answers.
- We do not sell your data.
What stays on your iPhone
Your progress for each word, your review history, sessions, streak, personal decks (name, sources and chosen words), your preferences and the Safe mode code, kept as a fingerprint, are stored on the device. The word catalog, its translations and examples are built into the app and work offline.
Texts, photos and scanned pages you import are analyzed on the iPhone to find words. Sentari keeps the chosen words and the name of the source, never the text or the image.
Voice review uses the microphone and Apple’s speech recognition, running on the device, only during a session. Neither audio nor transcriptions are recorded or sent to Pengram. iOS may download the voices and language models it needs. Reminders are notifications scheduled on the iPhone; the widget reads a summary of your progress stored on the device.
iCloud sync
If iCloud is turned on for your iPhone, your progress syncs between your devices through CloudKit, in your private iCloud database, and your preferences (level and calibration, languages, goals, Safe mode and its code’s fingerprint) through iCloud key-value storage, so a new iPhone picks up your profile. Reminders stay specific to each device. Apple hosts this data and processes it under its own terms; Pengram cannot access it. You can turn this sync off in the iPhone’s iCloud settings.
Usage statistics (optional)
If you agree in the app, Sentari sends Amplitude, in its European Union data center, a limited list of actions and their outcome: the end of the first run with its choices (voice exercise tried or not, goal in cards or minutes, reminder, calibration done or skipped, level announced), opening the app and from where (a widget, a Shortcut or control, a Live Activity, Spotlight, a shared text or a reminder), the review mode used and whether it is a first practice, activity volumes in ranges, reaching the daily goal with your streak as a range, the end of a voice review session, importing and creating a deck with the number of words found as a range, completing a vocabulary test with its number of answers as a range, seeing the Premium offer, the offer chosen and the result of a purchase or a restoration, a change between the free plan and Premium, reaching a free limit, a review that could not continue and reaching a new level. Each event also says whether the app comes from the App Store or TestFlight, and the language of your translations. These events carry a random identifier created when you agree, specific to this installation.
Never sent: the words you study, deck names, imported texts, audio or transcriptions, the advertising identifier, payment details or transaction identifiers.
Purpose: understand how Sentari is used and improve it. Legal basis: your consent. Retention: three months at Amplitude.
Diagnostics (optional)
If you agree, Sentari sends Sentry, with reception in the European Union (Germany), crash and hang reports with the state of the app at that moment (memory use, foreground or background, device temperature), technical errors, the app’s sessions (start, length and how they ended) under a random identifier specific to this installation, and the duration of a sample of operations, with the app version, its distribution channel, device model and iOS version. Learning content, texts, audio, the device name and screenshots are excluded.
Purpose: detect and fix technical problems. Legal basis: your consent. Retention: at most 90 days at Sentry.
You can accept or refuse each of these two options, then change your mind at any time in Settings › Privacy choices. Withdrawing consent stops the uploads, cancels pending ones and deletes their local queue; data already received is not erased automatically, but you can ask us to delete it. Refusing removes no feature.
Feedback and reports you send
When you shake your iPhone or use Settings › Send feedback, your message is sent to Pengram through Sentry, with reception in the European Union. It contains your text and its category, the screen concerned, the word shown if any, the app version, device model, iOS version, language and your plan, free or Premium. A content report contains the word, its definition, translation, sentence and their catalog identifiers. A screenshot is attached only if you tick the box.
No name or email is requested, and sending is independent of statistics and diagnostics. The message stays on the iPhone until the service acknowledges it. Avoid including personal or sensitive information.
Purpose: handle your feedback and fix the app and its content. Legal basis: your request and Pengram’s legitimate interest in improving Sentari. Retention: at most 90 days in Sentry. Feedback we follow up on may be copied to our task tracker and stay there as long as the topic is useful for maintaining the app; you can ask for its deletion at any time. To sort and analyze feedback, Pengram may use software development tools, including AI-based tools.
Free plan daily authorization
To apply the free plan’s limits, Sentari requests an authorization from a Pengram service hosted by Cloudflare, once a day per device, or after a restart or a clock change. The app sends the installation proof signed by the App Store, which is verified and then discarded without being stored, a random identifier kept in the iPhone’s keychain, the time zone and a technical flag.
In the European Union, under a pseudonymous identifier derived from the app’s App Store identity, the service keeps only the first day of use, the account’s time zone (it follows the device’s at most once a week) and the initial eligibility. No words, answers or history are sent. Premium does not depend on this service.
Purpose: provide the free plan under its conditions, and prevent a reinstallation from renewing the first-day allowance. Legal basis: performance of the contract and Pengram’s legitimate interest in preventing abuse. Retention: as long as this information is needed to apply the free plan; you can ask for its deletion.
Purchases
Subscriptions, the lifetime purchase, restorations and refunds are handled by Apple in the App Store. Pengram never receives your payment details. Apple provides Pengram with sales and diagnostic reports under its own rules.
Emails
If you write to contact@pengram.app, we receive your address, your message and its attachments, only to answer you. Legal basis: Pengram’s legitimate interest in handling the requests it receives. Retention: while the request is handled, then at most three years after the last exchange.
Recipients and providers
Your data is intended for Pengram. The following providers process it on Pengram’s behalf, within the limits described above:
- Sentry (Functional Software, Inc.): feedback and diagnostics, received in the European Union;
- Amplitude, Inc.: optional usage statistics, European Union data center;
- Cloudflare, Inc.: the free plan’s daily authorization, storage in the European Union;
- a task tracker and software development tools, for the feedback we follow up on.
Apple provides the App Store, iCloud, speech recognition and the iPhone’s voices as the controller of its own processing. No data is shared for advertising purposes.
Transfers outside the European Union
We prefer hosting located in the European Union. Some providers are nevertheless based in the United States and may access data from there, for example for technical support. These transfers rely on the safeguards provided by the GDPR: the adequacy decision for the EU-U.S. Data Privacy Framework for certified companies, or the European Commission’s standard contractual clauses.
Security
Exchanges with our providers are encrypted. On the iPhone, Sentari’s data benefits from iOS data protection; the most sensitive free plan items are kept in the keychain. We limit the data sent to what is strictly necessary.
Your rights
You can ask to access your data, rectify or erase it, restrict its processing or receive it in a portable format, and object to processing based on legitimate interest. You can withdraw your consents at any time in the app, without affecting processing already carried out.
Write to contact@pengram.app. As Sentari does not ask who you are, help us find your data: the approximate date and content of a feedback message, or, for statistics, the reference shown in Settings › Privacy choices. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr), or with the authority of your country.
Children
Sentari is not specifically directed to children and asks them for no information. Safe mode, which can be locked with a code, hides adult vocabulary. A child should send feedback only with a parent’s help.
This site
These pages are hosted by GitHub Pages (GitHub, Inc.). They set no cookies and use no audience measurement tool or external resource. Like any host, GitHub may log technical connection data, including IP addresses, to keep the service secure.
Changes
We will update this policy if the app changes. The version date is shown at the top of the page; an important change will be announced in the app.
This page translates the French version, which prevails in case of difference.