Yuzu Dojo Privacy Policy

1. Who we are

Yuzu Dojo ("the app") is operated by the operator of Yuzu Dojo ("we", "us"). You can contact us at [email protected]. The operator's legal name and postal address are available on legitimate request via that address.

2. What we collect and why

We collect only what the app needs to work:

• Account and sign-in. We create an internal user ID when you continue without registering. Adding an email address is optional and lets you sign in on another device. If you add one, we use it to send one-time passcodes and manage your account. We also keep consent timestamps.
• Learning data. Flashcard states, review history, course progress, bookmarks, achievements, and a per-device identifier — used to provide the study features and to sync your progress securely. A copy is also stored locally on your device so the app works offline. Without an email sign-in, access to the same progress on another device is not guaranteed.
• Learning settings. Your daily goal, script preferences and reminder settings — stored with your account and on your device.
• Subscription status. The store platform, product ID, original transaction ID, subscription status and expiry date — used to manage your subscription and prevent fraud. We do not receive or store your payment card details; payments are processed entirely by Apple or Google.
• Feedback. If you choose to send feedback: your message, an optional screenshot, and app version details — used for quality improvement and support. Sending feedback is always optional.
• Analytics. Pseudonymous product analytics: event names, a pseudonymous user ID, country-level location, and basic device and app information (such as device model, operating system version, app version and screen size). No message content and no precise location are collected, and IP addresses are discarded.
• Website analytics. When you visit yuzudojo.com, we measure aggregate traffic and page performance: page views, the page path, the referring link, country, device type, browser, operating system, and page-performance timings. This uses no cookies and no browser storage, does not identify you, and does not follow you across other websites. It applies to this website only, not to the app.
• Content delivery logs. Our content delivery network temporarily processes your IP address to deliver audio and content securely.

We do not collect your name, address, phone number, payment card details, or advertising identifiers. We do not sell or share your personal data. We do not track you across other apps or websites.

3. Legal bases (GDPR / UK GDPR)

• Performance of a contract — account, learning features, sync, and subscriptions.
• Legitimate interests — analytics and security.
• Consent — where required by law.

4. Analytics choices

Analytics are pseudonymous, hosted in the EU, and exclude message content. You can turn them off anytime in the app under Settings → "Share anonymous analytics."

Website analytics on yuzudojo.com are separate and work without cookies or browser storage: nothing is stored on your device, and the results are aggregate only — so there is nothing to switch off.

5. Where your data lives & international transfers

Your account and learning data are hosted in the EU (Frankfurt, Germany). We use the following processors to run the service: Supabase (database and authentication), Cloudflare (content delivery, storage, and website analytics), PostHog (app analytics, EU region), Apple and Google (app distribution and payment processing), and ZeptoMail (sign-in email delivery). Where data is transferred internationally, transfers are safeguarded by Standard Contractual Clauses.

6. How long we keep data

Active account: for as long as you use Yuzu Dojo, including when you use the app without adding an email address. Deletion: account data is permanently deleted 30 days after your request (in-app: Settings → Delete guest data or Delete account). Review history is irreversibly anonymized. Transaction records are retained without your identity as required for financial compliance. Analytics data is retained for up to 12 months.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection, the right to withdraw consent, and the right to lodge a complaint with your supervisory authority. To exercise these rights, use the in-app deletion flow or contact [email protected] — we respond within 30 days.

8. Children

Yuzu Dojo is a general-audience Japanese-vocabulary study app. It is not directed at children, and we do not market it to children. We do not knowingly collect personal data from children under 13. Where local law requires a parent or guardian to consent before a child uses a service like ours, the app must only be used with that consent. If you believe a child has provided us personal data without the required consent, contact [email protected] and we will delete it.

9. Security

All data is encrypted in transit. Server-side data is isolated per user with row-level security and accessed under least-privilege rules. Feedback attachments are stored in private storage. Payment card data never touches our servers.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced in the app, and the "Last updated" date above will always reflect the current version.

11. Contact

Questions or requests: [email protected].