Privacy Policy
Tanuki Sensei is a Japanese learning app operated by NG Development Studio. Contact: support@tanukisensei.app. This policy explains what data we hold and why. We collect as little as we can.
1. What we collect
| Data | When | Why |
|---|---|---|
| Email address + password (stored only as a secure hash) | You create an account | Sign-in; subscription linking; account notices |
| Learning progress (chapters completed, scores, review history, streaks, settings) | You use the Service | So your learning continues across sessions and devices |
| Subscription status (active/expired, expiry date) | You subscribe | To unlock paid content. Payment details (card, billing address) are handled entirely by Lemon Squeezy, our merchant of record — we never receive them. |
| Support messages and in-app bug reports | You contact us / file a report | To help you and fix problems |
| [[ANALYTICS — placeholder: vendor not yet chosen. If/when analytics are added, this row will state exactly what is measured; the intent is aggregate, privacy-respecting usage statistics, not tracking individuals.]] | — | — |
We do not collect your real name, location, contacts, microphone, or anything from your device beyond the above. Guest play stores progress only on your own device/browser.
2. What we do with it
We use your data only to run the Service: sign you in, save your progress, know whether your subscription is active, and answer you when you write to us. We do not sell or share your data with anyone for advertising. The only third parties who touch data are the processors we need to operate: Lemon Squeezy (payments) and our hosting provider (where the servers run).
3. Retention — how long we keep it
- Active accounts: kept while the account exists.
- After your last payment (or last activity, for accounts that never paid): 3 years. After that, the account and its data may be permanently deleted.
- Deleting your account (§4) removes your data promptly, except minimal records we must keep for legal/accounting reasons (e.g. the payment ledger held by the merchant of record).
4. Your rights — deletion and export
From the account page you can, at any time, self-serve:
- Export your data — download a copy of your account and progress data in a machine-readable format.
- Delete your account — permanently removes your account and learning data.
You can also request either by email (support@tanukisensei.app). If you are in a jurisdiction with statutory data rights (e.g. GDPR), these are the mechanisms that honor access, portability, erasure, and rectification; you also have the right to complain to your supervisory authority.
5. Cookies & local storage
The web app uses strictly necessary cookies only: secure, HttpOnly session cookies that keep you signed in. We do not use advertising or cross-site tracking cookies. The app also stores your progress and settings in your browser's local storage so it can work smoothly (and, when signed in, syncs progress to your account so clearing the browser doesn't lose it). [[ANALYTICS: if a cookie-less analytics tool is chosen, this section stays as-is; otherwise it must be updated and consent handled.]]
6. Security
Passwords are stored only as salted hashes. All traffic is encrypted (HTTPS). Access to production data is limited to the operator. No system is perfectly secure; if a breach affecting your data ever occurs, we will notify affected users without undue delay.
7. Children
The Service is intended for users aged 13+ (younger with a parent or guardian's consent). We do not knowingly collect data from children below that age; if you believe a child has created an account, contact us and we will delete it.
8. Where data lives
Our servers are operated with [[HOSTING PROVIDER — deferred decision; fill at deploy time, including region]]. Lemon Squeezy processes payments under its own privacy policy.
9. Changes
We'll announce material changes to this policy in the Service or by email with reasonable notice.