Privacy Policy

Operator and current service

JLPT Master operator: To be confirmed. Country: To be confirmed. Contact: [email protected].

This policy describes the current free build. Paid checkout, advertising SDKs and dedicated analytics SDKs are not enabled. Core study features work without signing in.

Records on your device

Saved words, vocabulary/grammar reviews, quiz/writing results, study activity, kanji notes and sets, custom questions, settings and lookup caches are stored on your device. IndexedDB and offline caches hold downloaded dictionaries and app files.

Reader text and imported study documents are processed on your device. Selected terms may be sent to online lookup or translation providers. Avoid putting sensitive information in online searches.

Accounts and cloud sync

Google sign-in supplies a Firebase account identifier, name, email and profile image. Continue as Guest creates an anonymous Firebase account; it is different from studying without signing in. Google/Firebase manages authentication session information.

When cloud sync is available, saved words, vocabulary and grammar review schedules, progress, writing and quiz statistics, kanji notes/ratings/sets and custom questions can be uploaded to Firebase and merged across devices.

Public information

Leaderboard names, avatars and scores are publicly readable. Submitted reviews, ratings and upvote memberships are stored in Firebase; reviews display your chosen name and avatar. Multiplayer room/player names, scores and match state are stored in Firebase and currently publicly readable. Use an alias and avoid private information in public features.

Online services

Google/Firebase provides accounts and cloud storage. Online dictionary, translation and kanji requests can send search terms to Jotoba, Jisho, Google Translate, kanjiapi.dev and GitHub-hosted data. On our Cloudflare website, Jisho requests pass through our dictionary endpoint hosted by Cloudflare. Other deployments without this endpoint may use fallback services including AllOrigins and corsproxy.io.

Hosting services, APIs, Google Fonts and optional library CDNs receive normal request information such as IP address and browser information. Automatic Android update checks are not enabled in the current website.

Pronunciation uses device/browser speech synthesis. We do not record your microphone; your chosen speech engine may use an online service. Optional study reminders use local notifications after permission is granted.

• Google privacy policy
• Firebase privacy information
• Cloudflare privacy policy
• GitHub privacy statement

Purpose, sharing and security

Data provides study features, authentication, cloud sync, public community features and requested lookups. The operator does not sell personal data. Public content can be copied by others. Service providers process requests under their own terms and may process them outside your country.

Account-service connections use HTTPS. Device security and database access controls affect protection; absolute security cannot be guaranteed. New advertising, payment or tracking practices require updated disclosures before activation.

Retention and your choices

Local data remains until you clear site data or native app storage. This permanently erases local progress and downloads; signing out alone does not delete data. Cloud records can return if you clear local storage while sync is still enabled.

Account-linked records remain until removed through a deletion request. Public reviews and scores can remain visible until removed. Request access, correction, export or deletion through Account and data deletion, or email [email protected]. We may ask for proportionate proof of account control; never send passwords or tokens.

Provider-managed logs/backups may outlast live database deletion under provider policies. Their exact expiry has not been confirmed. Any necessary retention and unresolved records will be explained when responding to a request.

Children and changes

The app is not directed at children under 13. Contact us if you believe a child has supplied personal information. The operator must confirm the store target audience before publication.

The date on this page identifies this version. Material changes to data practices will be disclosed before activation. Contact: [email protected].