Privacy Policy

Effective date: April 24, 2026

This Privacy Policy describes how KanjiCards ("we", "our", or "the app") collects, uses, and shares your information when you use the KanjiCards mobile application.

1. Information We Collect

We collect the following information to provide and operate the service:

• Account information: email address and, if provided via Apple Sign In, your name. These are used to create and authenticate your account.
• Learning progress: your study history, XP, streaks, custom dictionaries, saved kanji, AI-generated lessons, and tips you create or save. This data is linked to your account so you can access it across sessions and devices.
• Subscription information: if you purchase a subscription, we receive a transaction identifier from Apple confirming your active subscription tier. We do not receive your payment card or full billing details.
• Technical data: a server-issued session token stored on your device to keep you signed in. We do not use third-party analytics or advertising SDKs.

2. How We Use Your Information

We use your information solely to:

• Provide the app's core functionality (authentication, syncing progress, unlocking subscription features).
• Generate personalized AI content (example sentences, mnemonic tips) using the OpenAI API. Your kanji selections are sent to OpenAI to generate content and are subject to OpenAI's Privacy Policy.
• Send account-related emails such as verification codes and password resets. Emails are delivered via Yandex SMTP.
• Validate and activate in-app subscription purchases via Apple's App Store Server API.

3. Information We Do Not Collect

• We do not track you across other apps or websites.
• We do not sell your personal data.
• We do not use advertising networks or behavioral advertising.
• We do not collect your precise location, contacts, photos, health data, or device identifiers for advertising.

4. How We Share Information

We share limited information only with the service providers required to operate the app:

• OpenAI — processes kanji data you submit in order to generate AI lessons and tips.
• Apple — handles authentication (Sign in with Apple) and in-app purchase validation.
• Yandex Cloud / SMTP — hosts our backend servers and delivers transactional emails.
• Cloudflare — forwards API requests to OpenAI on our behalf.

We do not share your data with any third parties for marketing or advertising purposes.

5. Data Retention

We keep your account data for as long as your account exists. If you delete your account, we delete your personal data (email, name, progress, custom dictionaries, saved tips) from our active systems within 30 days, except where retention is required by law (for example, transaction records required for tax or consumer-protection reasons).

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of your account and associated data.
• Export your learning data.

To exercise these rights, email us at support@kanjicardsbot.ru.

7. Security

We use HTTPS for all network communication, hash passwords with industry-standard algorithms, and restrict access to production systems. No system is perfectly secure, but we take reasonable steps to protect your data.

8. Children's Privacy

KanjiCards is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. International Users

Our servers are located in Russia. If you use the app from outside Russia, your data will be transferred to and processed on our servers. By using the app, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Effective date" above and, where appropriate, notify you in the app.

11. Contact

If you have questions about this Privacy Policy or your data, contact us at support@kanjicardsbot.ru.