Privacy policy

Who we are

Naraio ("we", "us") provides the Japanese learning service at naraio.app and is responsible for the personal data described in this policy. For anything about your data, write to [email protected].

What we collect, and why

Your account. Your name, your email address and a protected form of your password, which we never see as typed. If you sign in with a third-party account such as Google, we receive the name, email address and account identifier that provider shares, and no password at all. We use this to create and secure your account, to sign you in and to write to you about it.

Your setup answers. When you create an account we ask what to call you, why you are learning, your level, how much time you have, what you want to focus on and how you heard about us. Every answer shapes your learning path; every one but the name can be skipped. The name you give is also written in katakana for you.

Your learning data. As lessons launch, the app keeps what you have completed, the characters you draw and how each stroke was graded, your pronunciation scores, the text of your conversations with the tutor and the credits you use. This is your progress; the home screen and your reviews are built from it. When speaking features go live, audio is processed to score it; we will update this policy before any recording is stored.

Payments. If you pay for a plan, the payment is handled by our payment provider, which acts as the merchant of record. It processes your card, issues the receipt and collects any tax. We receive your email address, the plan, its status and the amounts, never your card details.

Support. What you write to us, so we can answer and keep the thread.

Technical data. Like every online service, our systems record the address your connection comes from, the type of browser and device, the pages requested and the country the connection appears to come from. We keep these records briefly, for security and to keep the service running.

How we measure visits

We count visits ourselves, in our own systems, to understand what works. No analytics company, no advertising network and no tracking script from anyone else runs on the site.

• A random identifier in your browser's storage tells visits apart, and another marks a single visit. Neither is linked to your name until you create an account, when the first one is kept on your profile so we can see which visits led to accounts.
• What we record: the pages you open, the setup screens you see, the campaign tags and the referring site on your first page, the country the connection appears to come from, the kind of device (phone, tablet, computer) and the language.
• These records are kept for about thirteen months, then deleted automatically.
• If your browser sends the Global Privacy Control signal, none of this is sent. Automated visitors are dropped on arrival.

Cookies and local storage

We use a few, all set by us, none for advertising.

• A session cookie that keeps you signed in. Set when you sign in, valid for 30 days, refreshed as you use the app.
• A cookie with the two-letter country code of your connection, so the site can pick a language before anything loads. 30 days.
• Browser storage for your language, your theme, the measurement identifiers above, where your first visit came from, and a few small interface states (for example that the introduction has already played).

You can clear all of them in your browser's settings. Clearing the session cookie signs you out.

Who we share data with

Service providers that run part of Naraio for us. Each one is bound by contract, receives only what its job needs, and may not use the data for anything else.

• Hosting, content delivery and security providers, which operate the site and the service and see the traffic any host sees.
• Database and storage providers, which hold the data described above on our behalf.
• AI model providers, which receive the name you want to be called in order to write it in katakana, and, when the tutor launches, the messages you send it. This policy will say so before that happens.
• Speech synthesis providers, which turn text into the audio of the lessons and, in the plans that include them, of your custom dialogues.
• Identity providers, only if you choose to sign in with a third-party account.
• Our payment provider, only if you pay for a plan, as described above.
• Email delivery providers, for the messages we send you: verification, password reset and the reminders you turn on. Reminders stay off until you choose them.

We do not sell personal data and we do not share it with advertisers. If the law requires us to disclose something, we disclose only what it requires. If Naraio is ever sold, merged or reorganised, your data may be transferred as part of that, under this policy.

Where data is stored

Our providers run secure data centres that may be in a country other than yours. Where the law where you live requires it, transfers of your data are covered by the standard safeguards those providers offer, such as approved contractual clauses.

How long we keep it

• Your account and your learning data: for as long as you have an account. When you delete it, everything is removed within 30 days, and from backups within 30 more.
• Visit measurements: about thirteen months, deleted automatically.
• Katakana spellings are cached by name, not by person, so they are not tied to your account.
• Payment records: for as long as tax and accounting law requires, held by the payment provider.
• Support correspondence: as long as the conversation is useful, then deleted.
• Technical records: briefly, for security.

Your rights

You can ask to see the personal data we hold about you, to correct it, to receive a copy, to have it deleted, to restrict or object to a use, and to withdraw a consent you gave. Write to [email protected] from the email address of your account and we will answer within 30 days. The law where you live may name these rights differently; we give them to everyone, wherever you are.

If you believe we handled your data badly, tell us first; you may also complain to the data protection authority where you live.

Children

Naraio is for people aged 13 and over. We do not knowingly collect data about anyone younger. If you believe a child under 13 has an account, write to us and we will delete it.

Security

Everything travels encrypted. Passwords are stored in a protected form, never as typed. Access to personal data is limited to the people who need it to run the service. No system is perfectly secure; if you think something is wrong with your account, write to us at once.

Changes to this policy

When the product changes in a way that affects your data, this page changes with it and the date at the top moves. For anything significant we tell you by email or in the app before it applies.