Privacy Policy

1. Introduction

Nihongo Pass ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding it. By using our service, you agree to the practices described in this policy.

2. Information We Collect

• Email address (for account registration and authentication)
• Learning data (accuracy rates, SRS review schedules, session history, streaks)
• Usage data (access timestamps, features used, device type)
• Payment information (processed by Stripe for web, or by Apple App Store / Google Play via RevenueCat for the mobile app; we never store card numbers on our servers)
• Email address submitted to the mobile app waitlist (optional, used solely to notify you at launch)
• Mobile app only: advertising identifier (Android Advertising ID, or the iOS IDFA if you allow tracking), device information, app usage data, and approximate location, collected by Google AdMob to show and measure ads
• Mobile app only: crash and error reports, sent with personal information removed
• Mobile app only: in-app interactions (for example, finishing a lesson or a mock exam) and an anonymous app-instance identifier, collected by Google Firebase Analytics once you have given consent. Your advertising ID is not used for analytics

Demo quiz (/demo): No personal information is collected during the demo quiz. It runs entirely in your browser without any data being sent to our servers.

3. How We Use Your Information

• Providing and operating the service, including user authentication
• Optimizing your learning through our SRS (spaced repetition) algorithm
• Improving the service and developing new features
• Investigating and preventing misuse or violations of our Terms of Service
• Service emails required to operate your account (sign-up confirmation, password reset, security notices). These are not promotional and are sent to all account holders.
• Study reminder emails that encourage you to keep learning (welcome guidance, streak reminders, exam countdowns, re-engagement messages). We send these on the basis of our legitimate interest in helping you reach your JLPT goal. You can stop these at any time. See “Your Rights” below.
• Displaying ads via Google AdSense on the web (interest-based advertising)
• Measuring how our own ads on Meta (Facebook and Instagram) perform, using the Meta Pixel on our public pages and sign-up page, only if you accept cookies
• Displaying ads in the mobile app via Google AdMob, and measuring how those ads perform
• Understanding how the mobile app is used via Google Firebase Analytics, so we can improve it

4. Third-Party Service Providers

We share data with the following providers solely as required to deliver our service:

We do not sell your personal information to any third party.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to maintain login sessions, save your language preferences, and enable ad personalization. You can disable cookies in your browser settings, though some features may not function correctly as a result.

We use a cookie named NEXT_LOCALE to remember your display language preference (e.g., English, Japanese, Vietnamese). This cookie contains no personal data and expires after one year.

We store your cookie consent preference in your browser's local storage (cookie_consent_status) to remember whether you have accepted or declined non-essential cookies. This data is stored locally on your device and is not transmitted to our servers.

Google AdSense may use cookies to serve interest-based ads. You can opt out via Google's Ad Settings page.

Meta Pixel: if you accept cookies, our public pages and sign-up page load the Meta Pixel, which sets a cookie (for example _fbp) and tells Meta which page you viewed and whether you completed a sign-up. If you decline or have not chosen, the Pixel is not loaded. It is never loaded on logged-in screens, and we turn off its automatic button and form detection. You can withdraw your consent by clearing the saved choice in your browser, and manage Meta's use of the data in your Meta ad settings.

Mobile app: ads are matched using your device's advertising ID rather than browser cookies. Where the law requires your consent (for example in the EEA and UK), the app shows Google's consent form before ads are personalized, and on iOS it asks for your permission through Apple's App Tracking Transparency prompt before the IDFA is used. You can change your choice at any time in your device's tracking or ad settings (for example by resetting or deleting your advertising ID), and, where Google's consent form applies, from “Privacy choices” in the app's Settings.

6. Data Storage and Security

Your data is stored in encrypted form on Supabase (PostgreSQL). We apply appropriate technical and organizational safeguards to prevent unauthorized access or data breaches. However, no method of transmission over the internet is 100% secure.

7. Your Rights

• Access and correction: You can review and update your profile information from the Settings page.
• Data deletion (right to be forgotten): You can permanently delete your account and all associated data from the Settings page, on the web or in the mobile app.
• Ad opt-out: You can disable personalized ads via Google Ad Settings, or via your device's tracking and ad settings in the mobile app.
• Waitlist removal: You may remove your email from the mobile app waitlist at any time by contacting us via our Operator Information page.

If you are located in the European Economic Area (EEA), you may also have additional rights under the General Data Protection Regulation (GDPR). Contact us to exercise these rights.

8. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such data, we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. For significant changes, we will notify you by email or via an in-app notice. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact Us

For questions or requests regarding this policy, please use the contact form in the Settings page or reach us at the email address listed on our Operator Information page.