Privacy Policy

1. Information We Collect

Depending on how you use the Service, we collect the following information.

• As a guest: your progress, study streaks, weekly goal, and the name shown on certificates. These are stored in your browser (localStorage) and are not sent to our servers while you use the Service as a guest. If you choose to transfer them when signing in, your progress and stats are saved to your account.
• Unfinished lessons: so that you can pick up where you left off, the questions you were given and your answers are kept temporarily in your browser (localStorage). They are removed when your results are saved or after 14 days, and are not sent to our servers.
• When you sign in: your Google display name and email address (held by Firebase Authentication). Our database also stores your display language, weekly goal, reminder settings (on/off, local hour, time zone offset), per-lesson progress (latest and best score, number of completions, last studied time, next review date), and learning stats (study streak, number of days studied, and number of lessons completed that week). We do not store your individual answers.
• If you turn on review reminders: device identifiers (push notification tokens) used to deliver notifications, and the display language you were using on that device.
• Analytics (only with your consent): pages viewed, lesson starts, resumes and completions, per-question correctness, score and time taken, Dining Guide views, badge and certificate views, changes to your language and reminder settings, sign-in events, and errors. Google Analytics may collect identifiers such as cookies, device and browser information, and IP address. The event fields we send do not include your name, email address, or Firebase user ID.
• When you contact us: your message, the email address you enter if you want a reply, the page and question ID shown when you sent it, and, if you are signed in, your user ID (so we can look into your learning status when responding).
• When an error occurs: technical information needed to investigate, such as the error type, page, and browser type. The monitoring service may receive your IP address and similar information when your device connects to it. Error details may contain information you entered, so we limit what is sent and take reasonable steps to remove identifiers and personal information.

2. How We Use Information

We use this information to:

• handle sign-in and save and sync your progress and settings across devices
• provide learning features such as review scheduling, badges, streaks, and certificates
• send review reminders
• analyze how clear our lessons are and how difficult our questions are, and improve the Service
• investigate and fix bugs
• respond to inquiries and reports of mistakes
• respond to violations of our Terms and misuse of the Service

3. External Services and Storage Outside Japan

The Service uses the external services below. Their providers handle information on our behalf or in accordance with their own privacy policies.

Our Google Cloud Firestore database is located in the United States (us-east1 region). Other services may also store or process information outside Japan. Storage locations, retention, and transfer safeguards depend on service settings, contracts, and each provider's published information. We will provide information about overseas handling that we can confirm in response to an inquiry.

• Google Firebase / Google Cloud (Google LLC): hosting, sign-in (Firebase Authentication), database (Cloud Firestore), push notifications (Firebase Cloud Messaging), server processing (Cloud Functions), and operational logs (Cloud Logging)
• Google Analytics 4 (Google LLC): usage analytics, used only with your consent. Analytics data is exported to Google BigQuery to analyze learning quality.
• Sentry (Functional Software, Inc.): error monitoring and bug investigation

4. Disclosure to Third Parties

We do not provide your personal information to third parties except:

• with your consent
• where required by law
• where necessary to protect a person's life, physical safety, or property and it is difficult to obtain your consent
• where we entrust handling to service providers, such as those listed above, to the extent needed for the purposes described in this Policy

5. Retention

We keep information only as long as needed for the purposes above and delete it afterward.

• Account and learning data (settings, progress, learning stats): until you delete your account
• Push notification tokens: until you turn off reminders on that device, delete your account, or we find that the token is no longer valid. If you keep reminders on but do not study for more than 30 days, we stop sending them
• Google Analytics data: the user-level retention setting in Google Analytics is 14 months. Data exported to BigQuery is managed separately and deleted according to the retention settings for its dataset and tables.
• Server operational logs: according to Cloud Logging settings. Logs contain processing status and error information.
• Inquiries: 2 years after we finish responding (inquiries we have not resolved are also deleted automatically 2 years after we receive them). When you delete your account, we erase the user ID recorded with your inquiries
• Error reports: as long as needed to investigate bugs (deleted automatically according to the monitoring service's settings)
• Guest data: stored in your browser and removed with "Clear Data on This Device" in Settings or when you clear your browser data
• Unfinished lessons: removed when your results are saved or after 14 days
• Backups: to recover from outages and mistakes, we keep database backups for up to 14 days. Deleted data may remain in these backups during that period

6. Your Choices

You can control how your information is handled as follows.

Depending on where you live, laws such as the EU General Data Protection Regulation may give you rights to access, correct, or delete your information, or to restrict or object to its use. You can make such requests through the contact below, and we will respond in accordance with applicable law.

• Analytics: you can choose whether to consent in the banner shown on your first visit. You can change or withdraw your consent at any time in Settings.
• Review reminders: you can turn them off at any time in Settings or in your browser settings.
• Signing out: you can sign out at any time. Signing out does not delete the learning data saved to your account.
• Downloading your data: use "Download My Data" in Settings to download your settings, progress, and learning stats as a JSON file.
• Deleting your data: use "Delete My Account" in Settings to delete your account and learning data (we ask you to sign in with Google again to confirm it is you). We may retain inquiry records for their stated retention period after account deletion where needed to meet legal obligations, handle disputes, or prevent misuse. If you cannot delete your account in Settings, email us at qumitate@gmail.com. We will ask only for the minimum information needed to verify your identity.
• Guest data: you can delete it with "Clear Data on This Device" in Settings or by clearing the site data in your browser.

7. Security

We take reasonable security measures based on the nature and risks of the information, including encrypted connections, access controls, limited administrator access, and checks on the selection and configuration of external services. We access contact messages only as needed to respond.

8. Minors

If you are a minor, please use the Service with the consent of a parent or guardian. Parents and guardians may also contact us to request access to or deletion of information.

9. Changes to This Policy

We may revise this Policy in response to changes in law or in the Service. We will announce significant changes in the Service. The revised Policy takes effect when it is posted in the Service.

10. Contact

For questions about this Policy or how we handle your information, please contact:

• Operator: QUMITATE
• Email: qumitate@gmail.com
• Address and, for a company, its representative: we will disclose these without delay in response to a request from the person concerned, as required by law.