Privacy Policy

1. Introduction

This policy explains what data YomuKana collects, how we use it, and what your rights are. The data controller is YomuKana.

2. Data we collect

• Account: your email (for login) and, optionally, a display name.
• Study content: the decks, cards, and progress you create/sync.
• Technical data: IP address and logs generated when accessing the service (security and operation).
• Local storage: part of your study progress is kept in your browser (localStorage).

3. How and why we use it

We use your data only to operate the service:

• authenticate your access (email/OTP);
• save and sync your study content across devices;
• ensure security and prevent abuse/bots.

The legal basis is primarily performance of the contract (delivering the service you use) and our legitimate interest in keeping the service secure.

4. Who we share with

We share data only with providers necessary to operate the service (subprocessors):

• Supabase — database and authentication;
• Cloudflare Turnstile — bot protection at login;
• Vercel — hosting;
• Google — ad serving (Google AdSense).

We do not sell your data. When ads are enabled, we display advertising via Google AdSense, which may use cookies/identifiers (for example, for frequency capping and fraud prevention). For this purpose, Google may act as an independent controller, under Google's policies (policies.google.com/technologies/ads). Where required by law (for example, in the European Union), consent is collected through Google's own privacy message; you can also opt out of personalized advertising in Google Ads Settings.

5. Cookies and local storage

We use essential cookies/storage: a session cookie (login) and local storage of study progress. When ads are enabled, Google AdSense may also use cookies — subject to applicable consent, collected through Google's privacy message where required by law.

6. International transfer

Some providers may process data outside Brazil. We use established providers with appropriate safeguards.

7. Retention

We keep your data for as long as your account exists. When you delete your account, your associated data is removed.

8. Your rights

Under Brazil's LGPD (and equivalent rights elsewhere), you may request access, correction, deletion, and portability of your data. Account deletion is already available in the app.

9. Security

We adopt reasonable measures to protect your data. In the event of a relevant security incident, we will act as required by law, including the applicable notifications.

10. Children

YomuKana is intended for people aged 18 or older.

11. Changes

We may update this policy; the "last updated" date indicates the current version.