Privacy Policy

The short version

• We collect only what's needed to run the app and sync your progress.
• We don't show ads, use third-party analytics/tracking, or sell your data.
• All data is encrypted in transit (HTTPS).
• You can reset your progress in the app, and request full deletion anytime.

What we collect

Account information (when you create an account or sign in):

• Email address, and your name if your sign-in method provides it (including Google sign-in via our authentication provider).
• A unique account identifier.

Learning data (stored against your account):

• Your current Genki chapter and daily goal.
• Study session history — scores, timing, and item counts.
• Spaced-repetition review state — which kana, vocabulary, and kanji you've studied and when each is next due.

Stored on your device:

• A secure authentication token, so you stay signed in.
• Your theme choice, and (before you sign in) your chapter and daily-goal preferences.

We do not collect location, contacts, photos, health/financial data, or advertising identifiers.

How we use your data

• To provide the app: sign you in, save and sync your progress across devices, and schedule your reviews.
• To operate, maintain, and secure the service.

We do not use your data for advertising and we do not sell it.

Service providers

We rely on a small number of processors that handle data on our behalf, only to provide their service to us:

• Clerk — authentication (stores your account and email).
• Convex — backend database (stores your learning data, keyed to your account ID).
• Our hosting and build providers — serve the web app and build the mobile app.

Data sharing

We don't sell your data or share it for advertising. Data is shared only with the providers above to operate the app, or where required by law.

Data retention & deletion

• You can clear your study history and review queue anytime in Settings → Reset progress.
• To delete your account and all associated personal data, email us at hello.ideonlabs@gmail.com (or use the in-app account-deletion option where available) and we will remove it.

Security

Data is encrypted in transit using HTTPS. Your authentication token is held in your device's secure storage.

Children

Tomo is not directed to children under 13, and we do not knowingly collect data from them.

International users

Your data may be processed on servers operated by our providers in countries other than your own.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.