Privacy Policy

This Privacy Policy explains what personal data the JLPT Master app (the "App") collects, how we use it, and the choices and rights you have. The App is operated by an individual developer based in Japan under the Nihongo Club Sakura brand. We act as the data controller for the personal data described here. You can contact us about privacy at any time at nihongoclubsakura@gmail.com.

This Policy is a notice about our data practices. Where applicable law requires consent, including for personalized advertising or tracking, we ask for that consent separately.

1. Who this applies to

The App is intended only for users aged 18 and older. After sign-in and before using the App, we ask users to confirm that they are at least 18. We store that confirmation with the versions of the Terms and Privacy Policy accepted and the server-recorded time; we do not ask for or store a date of birth.

We do not knowingly collect personal data from anyone under 18. If we learn that an account belongs to a person under 18, we will disable the account and delete their personal data, subject to any records we must retain by law. If you believe a person under 18 has provided us data, contact us at the address above.

2. What we collect

Information you provide:

• Account details — your email address, display name, sign-in provider (Apple, Google, or email/password), account identifiers, preferred JLPT level, locale, and timezone.
• Support and feedback — the content of question reports, abuse reports, or emails you send us.

Information created as you use the App:

• Study activity — your practice and mock-exam attempts, answers, skipped questions, timing, scores, JLPT-style scaled score estimates, level estimates, pass estimates, progress, streaks, XP, badges, mock-exam credits, and other in-app rewards.
• Purchase data — your subscription and entitlement status, product IDs, transaction identifiers, and receipt or transaction verification data. Payment card details are handled by Apple, not by us; we receive only confirmation of your purchase and its status.
• Advertising choices and events — ad consent choices, privacy-options status, advertising identifiers when permitted, ad interactions, and rewarded-ad completion events needed to grant in-app rewards.

Information collected automatically:

• Device, network, and diagnostics — including IP address, request metadata, app version, operating system, device identifiers, advertising identifiers when permitted, and error or diagnostic information used for advertising, security, fraud prevention, and keeping the service working. On iOS, access to the advertising identifier is requested through Apple's App Tracking Transparency prompt.

3. How we use your data

We use personal data to:

• create and operate your account and sign you in;
• provide the study features, grade attempts, and show your progress and analytics;
• process and manage subscriptions and entitlements;
• show advertising in the free tier (with your consent where required);
• grant and manage in-app rewards, XP, badges, and credits;
• respond to support requests and handle question/abuse reports;
• measure, debug, secure, and improve the App;
• keep the App secure, prevent abuse, and comply with legal obligations.

Legal bases (EU/UK GDPR): we rely on performance of our contract with you (to provide the App), your consent (for personalized advertising and tracking), our legitimate interests (to secure and improve the service), and compliance with legal obligations.

4. Advertising and tracking

The free tier shows ads served by Google AdMob. AdMob may process data such as device identifiers, IP address, coarse location inferred from IP address, app activity, and ad interactions to serve ads, measure ads, prevent fraud, and, where you consent, personalize ads.

Where required by law (for example in the EEA, UK, and Switzerland), we use Google's consent mechanism (UMP) to ask whether you agree to personalized advertising. On iOS, we use Apple's App Tracking Transparency prompt before any cross-app tracking or access to the advertising identifier. If you decline or withdraw consent, you may still see contextual or non-personalized ads. You can change or withdraw consent through the in-app ad privacy choices where shown, your device settings, or other controls required in your region. Removing ads is also a benefit of a premium subscription.

5. Who we share data with

We do not sell your personal data for money. We share personal data only as needed to run, secure, monetize, and improve the App, including with:

• Google Firebase and Google Sign-In — authentication and hosting of the public legal pages;
• Google AdMob — advertising;
• Apple — app distribution, Sign in with Apple, StoreKit, App Store purchase processing, refunds, and subscription-status updates;
• Cloudflare — hosting, account and study-data storage (Workers, D1 database, KV, R2).

We may also disclose data where required by law or to protect our rights and the safety of users.

6. International transfers

Your data may be processed in countries other than where you live, including where our service providers operate. Where we transfer data internationally, we rely on appropriate safeguards (such as standard contractual clauses) as required by applicable law.

7. How long we keep data

We keep your personal data for as long as your account is active and as needed to provide the App. When you delete your account, we delete or de-identify your associated account and study data from active systems, except where we need to retain limited records for legal, tax, security, fraud-prevention, chargeback/refund, dispute-resolution, or compliance purposes. Retained records may include legal acceptance history, deletion-request audit records, subscription and transaction records, abuse/security logs, and backup copies until they are overwritten in the ordinary course. Where practical, retained records are minimized, hashed, or pseudonymized.

8. Your rights and choices

Depending on where you live, you may have the right to:

• access the data we hold about you and receive a copy (the App provides a self-service "Export my data" option);
• delete your account and associated data (self-service "Delete my account" option in the Privacy Center);
• correct inaccurate data;
• object to or restrict certain processing, and withdraw consent to advertising/tracking at any time;
• lodge a complaint with your local data-protection authority.

California residents (CCPA/CPRA): you have rights to know, delete, and correct your personal information, and to opt out of "sharing" for cross-context behavioral advertising. We do not sell your personal information for money. To the extent Google AdMob personalized advertising is considered "sharing" under California law, you can opt out through the in-app ad privacy choices where shown, your iOS tracking settings, or by contacting us. Exercise other rights using the in-app export/delete tools or by emailing us.

To exercise any right, use the in-app tools or email nihongoclubsakura@gmail.com. We will respond within the time required by applicable law and will not discriminate against you for exercising your rights.

9. Security

We use reasonable technical and organizational measures to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the version and "last updated" date and, where appropriate, ask you to review and accept the updated Policy in the App.

11. Contact

For any privacy question or request, email us at nihongoclubsakura@gmail.com.

Last updated: July 14, 2026 · Version 2026-07-14.3