Privacy Policy

1. Introduction

TORAIZ Inc. ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use udoon, including our website (udoon.ai) and our Android application available on Google Play (collectively, the "Service").

2. Information We Collect

2.1 Personal Information

• Email address (required for account creation)
• Name (optional, collected via Google sign-in)
• Payment information (processed securely by Stripe for web purchases and by Google Play Billing for Android app purchases — we do not store your credit card details)
• JLPT target level and learning preferences

2.2 Learning Data

• Progress and completion records
• Test scores and assessment results
• Study time and usage patterns
• Your word lists: the words you save from our learning materials, the names of your lists, and the words you add yourself, with their readings, meanings, and notes

2.3 Voice and Conversation Data

• Voice recordings when using the voice input feature in AI conversation practice (processed in real-time and not stored on our servers)
• Text messages sent during AI conversation practice

2.4 Technical Data

• Device information (browser type, OS, device model)
• IP address and approximate location
• Cookies and similar tracking technologies

2.5 Inquiries

• When you contact us through the in-app inquiry form or by email at support@udoon.ai: your email address, the content of your messages, any attachments you send (such as screenshots), and our replies

2.6 Survey Responses

• When you answer a survey we send you (for example, by pressing an answer button in an email), we collect your answers, any comments you write, and the time you answered, together with your account.

2.7 Reports About Shared Word Lists

• When you report a shared word list, we collect which list you reported, the reason you chose, and the time you reported it, together with your account.

2.8 Public Profile

• If you make your profile public, we keep the link to your profile. If you like a post on a public profile, we record which post you liked and when, together with your account.

3. How We Use Your Information

• Provide and personalize the learning experience
• Process payments and manage subscriptions
• Generate AI-powered responses for conversation practice and learning coaching
• Convert voice input to text for conversation practice
• Send service-related communications
• Respond to your inquiries and keep a record of our correspondence with you
• Ask for your opinion through occasional surveys, and use your answers to understand how the Service is used and to improve it. Answering is optional.
• Suggest the reading and meaning of a word you add to your word lists
• When you choose to share a word list, check it automatically before it is shared and show it to people who open your link
• Review reports about shared word lists, and stop sharing lists that we believe break our Terms
• When you make your profile public, show your profile to people who open its link, and count the likes on your posts
• Show learners who are studying the same part of the course to each other
• Use your learning records, such as the days you studied and your correct answers, to award you stamps
• Send messages that support your learning, such as study reminders and progress updates, by email and push notification. You can stop them at any time from the link in each email, or by turning off notifications in the app or on your device.
• Send promotional emails, such as offers and announcements, only if you have agreed to receive them. You can withdraw your agreement at any time from the link in each email.
• Improve our products and services through analytics
• Prevent fraud and ensure security

4. Cookies and Tracking

We use cookies and similar technologies for:

• Essential: Authentication and security (required)
• Analytics: Understanding how you use the Service (optional)
• Advertising: Measuring the effectiveness of our advertising campaigns (optional)

You can manage cookie preferences through our cookie consent banner. Analytics and advertising cookies are only activated with your consent (Consent Mode v2).

5. Data Sharing

We do not sell your personal information. We share data with the following third-party service providers to operate the Service:

• Stripe: Payment processing for web subscriptions
• Google Play Billing: Payment processing for Android app subscriptions
• Google Firebase: Authentication, data storage, file hosting, and push notification delivery
• Amazon Web Services (Amazon SES and Amazon S3): Sending email, and receiving email sent to our support address (your email address, the content of each message, and any attachments are processed to deliver or receive it)
• Google Analytics: Usage analysis (subject to your cookie consent)
• Google Ads: Measuring the effectiveness of our advertising and building remarketing audiences (subject to your cookie consent)
• TikTok: Measuring the effectiveness of advertising we run on TikTok (subject to your cookie consent)
• Google Gemini API: AI conversation generation and learning coaching (your messages and aggregated learning data are sent to generate responses), suggesting the reading and meaning of a word you add to your word lists (only the word you type is sent), and checking a word list before it is shared (the list's name and words are sent)
• Microsoft Azure: Voice-to-text conversion (voice data is processed in real-time and not stored) and text-to-speech audio generation
• Sentry: Error and performance monitoring so we can find and fix faults (technical data such as the error message, browser type, and the page where it occurred)
• Netlify: Website and API hosting

We do not send your email address, phone number, or other directly identifying information to advertising platforms. Advertising measurement uses pseudonymous identifiers only.

If you share a word list, anyone with the link can see the list's name and its words, including the spelling, reading, and meaning of the words you added yourself. Your notes and your email address are not shown, and your display name is shown only while your profile is public. People who are not signed in see only the first few words. Before a list is shared, we check it automatically, and if it does not pass, it is not shared. You can stop sharing at any time, and sharing also stops when you delete the list or your account.

People who are signed in when they open a shared list can report it to us. We do not tell the list's owner who reported it. When a list is reported, we keep a copy of its name and words so we can review it. If we decide that a list breaks our Terms, we stop sharing it and show this on the list's page, and the owner can no longer share that list.

Your profile is private unless you make it public. If you make it public, anyone with the link can see your display name, your profile icon, the word lists you are sharing, and a timeline of your activity: how many course steps you did at each level on each day, the word lists you published, the days you took a mock test, and the stamps you collected on each day. While your profile is public, your shared word lists also show your display name and icon and link to your profile. Your email address, the times of day you study, your test scores, and your other learning records are not shown. Public profiles are not listed in search engines. You can make your profile private at any time. The link then stops working, and if you make it public again, you get a new link. Your profile also stops being public when you delete your account. While your profile is public, learners near you on the course map can also see your display name and open your profile.

Posts on a public profile show how many likes they have. If you like a post, we record that you liked it. The owner of the profile and other people see only the number of likes, not who liked it.

When you paste your profile link into a chat app or social network, that service may read your display name and a short line about your recent activity to show a preview.

If you finished a course step in the last 7 days, learners at the same level who are on the same step as you, or behind you, can see your profile icon among the learners near them on the course map. They do not see your display name, your step number, or when you studied. If your profile is public, they also see your display name and can open your profile.

6. Data Retention

We retain your data while your account is active. When you delete your account, we delete your account information and your learning data. After account deletion, we may retain certain other data for up to 90 days for legal and operational purposes. Shared content (such as feedback submissions) may be anonymized and retained.

We keep inquiries, including emails, attachments, and our replies, for about two years after they are received or sent, and then delete them automatically. Original copies of received emails, kept only for processing, are deleted after 30 days. If you delete your account, we also delete your inquiries, including emails sent from your account's email address.

Survey responses are kept for up to two years and then deleted. They are deleted when you delete your account.

When you stop sharing a word list, its link no longer works. We keep the version you shared as a record until you delete your account. Records of the automatic check before sharing, including lists that did not pass, are deleted after 90 days, or when you delete your account if that comes first.

Reports about shared word lists, and the copies of reported lists that we keep to review them, are deleted one year after the last report or our decision. They are deleted sooner if the person who reported or the list's owner deletes their account.

We keep the link to your public profile while it is public, and delete it when you make your profile private or delete your account. We keep your likes until you remove them or delete your account. The number of likes on your posts is kept while your account exists.

Before deleting your learning data, we may create an anonymized copy of your learning records and keep it to improve the Service. The copy cannot identify you and is not linked to you or your account. It contains only:

• Your study level and goal, the correctness of your answers and the option numbers you chose, your scores, XP, and study progress
• The dates you studied (day only)
• Your country and app language, how you found the Service (such as an advertising campaign), whether you purchased a plan and which type, and your notification settings

The copy does not contain your name, email address, anything you wrote or said, or device, payment, or advertising identifiers. We do not attempt to re-identify anyone from these records. Because the copy cannot be linked to you, we cannot delete it on request after your account is deleted.

We do not create this copy for users in the European Economic Area, the United Kingdom, or Switzerland.

7. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to access, correct, delete, restrict, or port your personal data, and to withdraw consent.

8. Your Rights (CCPA)

California residents have the right to know what personal information is collected, request deletion, and opt-out of the sale of personal information. We do not sell your personal information.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

10. Security

We implement industry-standard security measures including encryption in transit (TLS/HTTPS), access controls, and regular security audits to protect your data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date.

12. Contact Us

For privacy-related inquiries: support@udoon.ai

TORAIZ Inc. — Tokyo, Japan