Privacy Policy
Last updated: May 13, 2026
1. Introduction
Nihongo Pass ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding it. By using our service, you agree to the practices described in this policy.
2. Information We Collect
- Email address (for account registration and authentication)
- Learning data (accuracy rates, SRS review schedules, session history, streaks)
- Usage data (access timestamps, features used, device type)
- Payment information (processed by Stripe for web, or by Apple App Store / Google Play via RevenueCat for the mobile app โ we never store card numbers on our servers)
- Email address submitted to the mobile app waitlist (optional, used solely to notify you at launch)
Demo quiz (/demo): No personal information is collected during the demo quiz. It runs entirely in your browser without any data being sent to our servers.
3. How We Use Your Information
- Providing and operating the service, including user authentication
- Optimizing your learning through our SRS (spaced repetition) algorithm
- Improving the service and developing new features
- Investigating and preventing misuse or violations of our Terms of Service
- Service emails required to operate your account (sign-up confirmation, password reset, security notices). These are not promotional and are sent to all account holders.
- Study reminder emails that encourage you to keep learning (welcome guidance, streak reminders, exam countdowns, re-engagement messages). We send these on the basis of our legitimate interest in helping you reach your JLPT goal. You can stop these at any time โ see โYour Rightsโ below.
- Displaying ads via Google AdSense (interest-based advertising)
4. Third-Party Service Providers
We share data with the following providers solely as required to deliver our service:
| Service | Purpose |
|---|---|
| Supabase | Database and authentication infrastructure |
| Stripe | Web Pro plan payment processing |
| RevenueCat / Apple App Store / Google Play | Mobile app in-app purchase processing (coming soon) |
| Google AdSense / Analytics | Ad delivery and usage analytics |
| Cloudflare | CDN, hosting, and security |
| Vercel | Web hosting and edge delivery |
| Sentry | Error monitoring and application performance tracking |
We do not sell your personal information to any third party.
5. Cookies and Tracking Technologies
We use cookies and similar technologies to maintain login sessions, save your language preferences, and enable ad personalization. You can disable cookies in your browser settings, though some features may not function correctly as a result.
We use a cookie named NEXT_LOCALE to remember your display language preference (e.g., English, Japanese, Vietnamese). This cookie contains no personal data and expires after one year.
We store your cookie consent preference in your browser's local storage (cookie_consent_status) to remember whether you have accepted or declined non-essential cookies. This data is stored locally on your device and is not transmitted to our servers.
Google AdSense may use cookies to serve interest-based ads. You can opt out via Google's Ad Settings page.
6. Data Storage and Security
Your data is stored in encrypted form on Supabase (PostgreSQL). We apply appropriate technical and organizational safeguards to prevent unauthorized access or data breaches. However, no method of transmission over the internet is 100% secure.
7. Your Rights
- Access and correction: You can review and update your profile information from the Settings page.
- Data deletion (right to be forgotten): You can permanently delete your account and all associated data from the Settings page.
- Ad opt-out: You can disable personalized ads via Google Ad Settings.
- Waitlist removal: You may remove your email from the mobile app waitlist at any time by contacting us via our Operator Information page.
Your right to stop study reminder emails
You may object to receiving study reminder emails at any time, for any reason, and free of charge. Every reminder email we send contains an unsubscribe link in its footer; clicking it stops all further reminder emails immediately. You can also ask us to stop them by contacting us via our Operator Information page, and we will honour the request.
Opting out does not affect service emails that are necessary to operate your account (such as password resets), and it does not delete your account or learning data.
If you are located in the European Economic Area (EEA), you may also have additional rights under the General Data Protection Regulation (GDPR). Contact us to exercise these rights.
8. Children's Privacy
Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such data, we will delete it promptly.
9. Changes to This Policy
We may update this policy from time to time. For significant changes, we will notify you by email or via an in-app notice. Continued use of the service after changes constitutes acceptance of the updated policy.
10. Contact Us
For questions or requests regarding this policy, please use the contact form in the Settings page or reach us at the email address listed on our Operator Information page.