Privacy Policy

Last updated: 15 September 2026

This Privacy Policy explains how WordWorx B.V. ("WordWorx", "we", "our" or "us") collects, uses, stores, shares and protects your personal data when you use the SecondSoil mobile application, website and related services (collectively, the "Services").

We are committed to processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable privacy laws.

Who we are

SecondSoil is owned and operated by WordWorx B.V.

WordWorx B.V. is the data controller responsible for the processing of the personal data described in this Privacy Policy.

WordWorx B.V. Company details

WordWorx B.V.
The Hague, The Netherlands

Chamber of Commerce (KvK): 42056636

VAT number: NL869508866B01

Email: hello@wordworx.eu

Website: https://www.wordworx.eu

SecondSoil Details

Email: hello@secondsoil.app

Website: https://secondsoil.app/

If you have any questions about this Privacy Policy or wish to exercise your rights under the GDPR, please contact us using the details above.

What personal data we collect

Depending on how you use SecondSoil, we may collect the following personal data.

Information you provide

• Name or preferred display name
• Email address
• Authentication information required to access your account, such as login credentials, where applicable
• Country or region
• Language preferences
• Profile information you choose to provide
• Messages or enquiries sent to us
• Feedback submitted through the app

Information created while using the app

Depending on the features you use, this may include:

• Saved preferences
• Favourite content
• Progress within the app

Technical information

We may automatically collect:

• IP address
• Device type
• Operating system
• App version
• Browser type (where applicable)
• Crash reports
• Diagnostic information
• Log files

Subscription information

If you purchase a premium subscription, payments are processed securely through the Apple App Store or Google Play.

We do not receive or store your credit or debit card details.

How we collect your data

We collect personal data when you:

• Create an account
• Use the app
• Save content
• Contact us
• Subscribe to premium services
• Visit our website
• Participate in surveys or provide feedback

We may also receive limited information from third-party service providers where necessary to operate the Services, such as confirmation of your subscription or purchase from Apple or Google, or account information from an authentication provider.

Why we process your personal data

We use your personal data to:

• Provide and maintain SecondSoil
• Create and manage your account
• Deliver personalised content and recommendations
• Save your progress and preferences
• Respond to support requests
• Improve the app and user experience
• Fix bugs and technical issues
• Manage subscriptions
• Comply with legal obligations
• Prevent fraud and protect the security of our Services
• Send optional marketing communications where you have consented to receive them
• Send push notifications where you have chosen to enable them

Legal basis for processing

Under Article 6 of the GDPR, we process personal data on one or more of the following legal bases.

Where we rely on legitimate interests, those interests include responding to users, protecting SecondSoil and its users, preventing misuse, and maintaining and improving the security and reliability of the Services. We consider these interests against your rights and interests before relying on this legal basis.

Information you are required to provide

Certain information may be required to create an account, manage a subscription or provide particular features of SecondSoil. Where information is required, we will make this clear at the time it is collected.

If you do not provide information that is necessary to create or manage your account or provide a requested service, we may not be able to provide that part of the Services. Other profile information is optional unless we tell you otherwise.

Sharing your personal data

We do not sell your personal data. Where necessary to operate SecondSoil, we may share personal data with service providers that provide services such as:

• website and app hosting;
• cloud storage and database services;
• authentication services;
• analytics and crash reporting;
• email delivery;
• payment and subscription support;
• customer support; and
• technical maintenance.

Where these providers act as processors on our behalf, they may process personal data only for the purposes of providing their services to us and subject to appropriate contractual and data protection safeguards.

Some third parties may process personal data as independent data controllers. For example, Apple and Google may process information relating to app distribution, subscriptions, payments and use of their platforms in accordance with their own privacy policies.

We may also disclose personal data where required by law, where necessary to establish, exercise or defend legal claims, or where necessary to protect the rights, property or security of WordWorx, SecondSoil, our users or others.

International transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where this occurs, we rely on appropriate safeguards, including:

• European Commission Adequacy Decisions;
• Standard Contractual Clauses (SCCs); or
• other lawful transfer mechanisms recognised under the GDPR.

You may contact us at hello@secondsoil.app if you would like more information about the safeguards used for international transfers of your personal data or, where applicable, how to obtain a copy of those safeguards.

Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy.

Typical retention periods include:

• Account information: for as long as your account remains active and for a limited period afterwards where necessary to comply with legal obligations or resolve disputes.
• Support enquiries: up to 24 months.
• Financial records relating to subscriptions: 7 years where required by law.
• Technical logs: retained only for as long as reasonably necessary to maintain the security and reliability of the Services, investigate incidents and diagnose technical issues.
• Analytics data: retained only for as long as necessary to understand use of the Services and improve functionality, subject to the retention settings configured for the relevant analytics provider.

Security

We take appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Access to personal data is restricted to people and service providers who need it for legitimate business purposes and is subject to appropriate security and confidentiality measures.

Although we take reasonable steps to protect personal data, no internet-based service or method of electronic storage can guarantee absolute security.

Location information

SecondSoil does not collect precise device location data.

Your rights

Under the GDPR, you have the right to:

• access your personal data;
• correct inaccurate information;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing activities;
• withdraw consent at any time where processing is based on consent;
• request a copy of your personal data in a portable format where applicable;
• object to direct marketing; and
• lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise your rights, please contact:

hello@secondsoil.app

We will normally respond within one month unless the GDPR permits a longer period.

Cookies and similar technologies

Our website uses cookies and similar technologies to improve functionality and understand how visitors use our website.

We currently use:

• Essential cookies required for the website to function; and
• Analytics cookies, where you have provided consent if required by law.

We do not currently use marketing or advertising cookies.

If this changes in the future, we will update this Privacy Policy and request your consent where required by applicable law.

Please also read our Cookie Policy for more information about how cookies and similar technologies are used.

Push notifications

If you choose to enable push notifications, we may send reminders, updates and other relevant information.

You can disable notifications at any time through your device settings.

Third-party links

Our website or app may contain links to third-party websites or services. If you follow a third-party link, that third party may process personal data in accordance with its own privacy policy. We are not responsible for the privacy practices of third-party websites or services and encourage you to review their privacy information before providing personal data.

Children's privacy

SecondSoil is intended for users aged 16 years and older.

We do not knowingly collect personal data from children under the age of 16.

If you believe that a person under the age of 16 has provided personal data to us, please contact us at hello@secondsoil.app so that we can take appropriate action.

Automated decision-making

We do not use your personal data for solely automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

Deleting your account

If you create a SecondSoil account, you can initiate deletion of your account from within the app.

You can also request deletion of your account and associated personal data outside the app by contacting hello@secondsoil.app.

When your account is deleted, we will delete or anonymise the personal data associated with your account, subject to any information that we are required or permitted to retain for legal, accounting, security or dispute-resolution purposes. Any retained information will be kept only for as long as necessary for those purposes.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, technology or legal requirements.

The latest version will always be available within the app and on our website, together with the date it was last updated. Where changes are material, we may also notify you through the app, by email or by another appropriate method.

Contact us

If you have any questions about this Privacy Policy or our privacy practices, please contact us using the details above.

If you believe we have not handled your personal data appropriately, you also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).