Privacy Policy

This policy explains what Kakitori (“we”, “us”) collects, why, and the control you have over it. Kakitori is a Japanese-learning app for iOS, Android, and the web, operated by an independent developer. Questions or requests: info@kakitori.com.

The short version

• We collect the minimum needed to run the app: your sign-in identity and your learning progress.
• We do not sell, rent, or share your personal data with anyone for their own purposes, and we use no third-party advertising or tracking SDKs. We don’t track you across other apps or websites.
• You can delete your account and all associated data at any time, from inside the app or by emailing us.

What we collect

• Account identity — your email address (to sign in with a one-time code), or, if you use Sign in with Apple or Google, the identifier they return. If you choose Apple’s “Hide My Email,” we only ever receive the private relay address.
• Profile — a display name, the avatar you pick, and the learning preferences and goals you set.
• Learning data — lessons completed, review history, streaks, and the decks and cards you create or add. This is synced to your account so it follows you across devices.
• Purchase status — whether you bought the one-time lifetime unlock. We store an entitlement record and the Apple/Google transaction identifier so the unlock restores on your other devices. We never see or store your card details — Apple or Google processes payment.
• Usage analytics — in-app events (for example, lessons completed or screens opened) tied to a random device identifier and, when you’re signed in, your account id. We use our own database for this; there are no third-party analytics services.
• Photos on cards — only if you choose to attach a photo to a flashcard, picked from your library with your permission. See “Photos” below for exactly when one stays on your device versus when it is uploaded.

Photos

When you attach a photo to a flashcard, what happens next depends on what you do with the deck:

• If the deck stays private (the default), the photo stays on your device — we never upload it.
• If you choose to publish the deck to the community, the photos on that deck are uploaded to our image storage and become publicly viewable as part of the published deck, so people who import it see them. Don’t publish photos you don’t have the right to share or that you want to keep private.

Deleting the card or the deck, or deleting your account, removes your uploaded photos from our servers.

What we don’t collect

We do not collect your precise location, contacts, health data, microphone audio, or advertising identifiers, and we do not track you for advertising.

How we use your data

• To provide the app and sync your progress across your devices.
• To process and restore your one-time purchase.
• To understand how features are used so we can improve them.
• To keep the service secure and prevent abuse.
• To comply with the law where required.

Who processes your data

We don’t share your data with third parties for their own purposes. We rely on a small set of service providers strictly to operate Kakitori, each handling only what the service needs:

• Supabase — hosts our database, authentication, and image storage (United States).
• Apple and Google — provide sign-in and process in-app purchases.
• Resend — delivers your sign-in code emails.

Community content

Decks you publish to the community — including their text and any photos — are visible to other users, so please don’t include personal information. You can report a deck or block an author from inside the app, and we remove content that violates our Terms of Use.

How long we keep it

We keep your account data for as long as your account exists. Anonymous usage-analytics events are automatically deleted after 90 days.

Deleting your account and data

In the app, open Profile → Delete account to permanently delete your account and everything associated with it — your progress, decks, reviews, streak, profile, purchase records, and any photos you uploaded — from our servers. You can also email info@kakitori.com to request deletion of all your user data. After deletion, no information that identifies you remains; only anonymous usage logs that contain no link back to you may persist briefly and are auto-deleted within 90 days. We do not keep copies of your data anywhere else, and your data is never sold or leaked to other parties.

Security

Data is encrypted in transit (HTTPS). Access is protected by row-level security so each account can only reach its own data, and we never store payment-card information.

Children

Kakitori is not directed to children under 13 (or under 16 in the EEA), and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

International users

Your data is processed in the United States. By using Kakitori you consent to that processing.

Your rights

You can access, correct, export, or delete your data. The fastest path for deletion is in the app; for anything else, email info@kakitori.com.

Changes

If we change this policy we’ll update this page and the “Effective” date above.

Contact: info@kakitori.com · See also our Terms of Use.