Privacy Policy

1. Introduction

This policy explains what data YomuKana collects, how we use it, and what your rights are. The data controller is YomuKana, reachable at yomukana@proton.me.

2. Data we collect

• Account: your email (for login) and, optionally, a display name.
• Study content: the decks, cards, and progress you create/sync.
• Purchases: a record of your Premium purchase (processed by Paddle).
• Technical data: IP address and logs generated when accessing the service (security and operation).
• Local storage: part of your study progress is kept in your browser (localStorage).

3. How and why we use it

We use your data only to operate the service:

• authenticate your access (email/OTP);
• save and sync your study content across devices;
• grant and maintain Premium access;
• ensure security and prevent abuse/bots.

The legal basis is primarily performance of the contract (delivering the service you use/purchased) and our legitimate interest in keeping the service secure.

4. Who we share with

We share data only with providers necessary to operate the service (subprocessors):

• Supabase — database and authentication;
• Paddle — payment processing (Merchant of Record);
• Cloudflare Turnstile — bot protection at login;
• Vercel — hosting.

We do not sell your data. We currently do not use advertising or analytics/tracking tools. If that changes in the future, this policy will be updated beforehand.

5. Cookies and local storage

We use only what is necessary to function: a session cookie (login) and local storage of study progress. We do not use tracking or advertising cookies.

6. International transfer

Some providers may process data outside Brazil. We use established providers with appropriate safeguards.

7. Retention

We keep your data for as long as your account exists. When you delete your account, your associated data is removed (purchase records may be retained for the period required by legal/accounting obligations, including by Paddle).

8. Your rights

Under Brazil's LGPD (and equivalent rights elsewhere), you may request access, correction, deletion, and portability of your data. Account deletion is already available in the app. For other requests, contact yomukana@proton.me.

9. Security

We adopt reasonable measures to protect your data. In the event of a relevant security incident, we will act as required by law, including the applicable notifications.

10. Children

YomuKana is intended for people aged 13 or older.

11. Changes

We may update this policy; the "last updated" date indicates the current version.

12. Contact

yomukana@proton.me