1. Introduction

Rakutan (the "App") respects your privacy. To meet App Store / Google Play review requirements, this policy clarifies what we collect, why we use it, and with whom it is shared.

2. Information We Collect

• Account Information: Email address and user ID.
• Usage Data: Learning progress, word books, quiz scores, and access logs.
• Device Information: App/OS version and device model (for diagnostics and quality improvement).
• Generated Content: Words and learning materials created via image analysis or AI generation.
• Diagnostic Data: Anonymous performance metrics (e.g., Web Vitals via Vercel Analytics) and server operation logs only.
• Payment Tokens: Payments are processed by Apple/Google/Stripe; the App only retains minimal tokens needed to confirm transactions.

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service.
• Sync and back up your learning data.
• Deliver and improve AI features (image analysis, sentence generation).
• Prevent abuse, ensure security, and troubleshoot issues.
• Provide support and send important notices.

4. Retention and Deletion

When you delete your account, related personal data is removed. Backups and logs may be retained for a limited period for operational or legal reasons and are then deleted automatically.

5. Third-Party Sharing

We share only what is necessary in the following cases:

• Service Providers: Authentication (Supabase), payments (RevenueCat, Stripe), AI processing (OpenRouter/OpenAI), and other essential partners.
• When required by law, or to protect rights and property.

We do not sell personal information.

6. Tracking, Ads, and Analytics

We use Google AdMob to serve rewarded ads. The AdMob SDK may collect and use device identifiers (IDFA/AAID) for ad delivery, personalization, and performance measurement. We also use anonymous performance metrics (e.g., Web Vitals via Vercel Analytics) and server operation logs for quality improvements. To limit ad tracking, please check your device's "personalized advertising" settings.

7. Security

Data in transit is protected by TLS. We rely on Supabase controls (including RLS) and role-based access to prevent unauthorized access, and we audit operational logs.

8. Your Rights and Choices

• You can delete your account in "Account Settings" (data cannot be restored after deletion).
• Requests for access, correction, deletion, or export are accepted via our contact channel.
• You can opt out of notifications where applicable.

9. Children's Use

The App is not intended for children under 13 (or 16 where required by local law). If applicable, please use the App with parental consent and guidance.

10. Contact Us

For questions or requests regarding this Privacy Policy, please reach out via the button below.