NIHONGO TRAVELER
Privacy Policy
Last updated: July 9, 2026
This Privacy Policy explains how the Nihongo Traveler mobile application ("the App") handles your data. We designed the App to work primarily on your device and to collect the minimum data needed to provide the features described below. We do not show ads, and we do not use third-party advertising or analytics trackers.
1. Who is responsible for your data (Data Controller)
The data controller responsible for your personal data is Enrique Garcia Rosales (an individual developer based in Mexico), reachable at info@myjapantraveler.com. For the purposes of the EU/UK GDPR, this is the controller; for other regions, this is the business responsible for the App.
2. What we collect, why, and our legal basis
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Email address, display name, salted password hash (never your actual password) | Create your optional account and sign you in | Performance of a contract (providing the account you requested) |
| Learning progress (selected track, spaced-repetition state, daily XP and streak) | Make the App work and sync your progress across your devices when you are signed in | Performance of a contract |
| Subscription tier and store transaction identifier | Unlock the features you purchased | Performance of a contract; our legitimate interest in preventing abuse |
| Widget interaction history | Show you what you tapped on the widget | Stored only on your device; never uploaded |
An account is optional. Without one, the App stores everything locally and no personal data reaches our servers.
3. Payments
All payments are processed entirely by Apple (App Store) or Google (Google Play). We never see or store your card details. We record only the subscription tier, product identifier, and store transaction identifier needed to unlock your features. See Apple's and Google's respective privacy policies for how they process your payment data.
4. What we do NOT do
- We do not show advertising, and we do not use ad or analytics SDKs.
- We do not sell or "share" your personal data (as those terms are defined under U.S. state privacy laws).
- We do not track you across other apps or websites.
- We do not collect your location, contacts, photos, or microphone data.
5. Where your data is stored and international transfers
Local data stays in the App's private storage on your device. If you create an account, your account and progress data are stored on Amazon Web Services (AWS) servers in the United States (region us-east-1), encrypted in transit (HTTPS) and at rest. If you are located in the European Economic Area, the United Kingdom, or Japan, your data will be transferred to and processed in the United States. Where required, such transfers rely on appropriate safeguards (e.g., the European Commission's Standard Contractual Clauses). By creating an account you understand your data will be processed in the United States.
6. How long we keep it
We keep account and progress data for as long as your account exists. When you delete your account (see below), all associated server data is erased immediately. Local data is removed when you uninstall the App.
7. Your rights
Depending on where you live, you have some or all of the following rights. We honor these rights for all users regardless of location.
- Access & portability: your data is visible in the App; contact us for a copy in a portable format.
- Correction: update your track and progress at any time in the App.
- Deletion ("right to be forgotten"): use Settings → Delete Account to permanently erase your account and all associated server data immediately, or email us and we will delete it within 30 days.
- Object / restrict / withdraw consent: stop using an account at any time; delete it to remove all server data.
- EEA/UK (GDPR): you may lodge a complaint with your local data protection authority.
- California (CCPA/CPRA): you have the right to know, delete, and correct your personal information, and the right not to be discriminated against for exercising these rights. We do not sell or share your personal information, so no opt-out is required. Categories collected: identifiers (email, name) and internet/app activity (learning progress).
- Japan (APPI): you may request disclosure, correction, or cessation of use of your personal information via the contact below.
To exercise any right, email info@myjapantraveler.com.
8. Children
The App is not directed at children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect personal data from them. If you believe a child provided us data, contact us and we will delete it.
9. Security
Passwords are stored only as salted PBKDF2 hashes. Data is encrypted in transit and at rest. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.
10. Changes
We will post any changes to this policy on this page and update the date above. Material changes will be highlighted in the App.
11. Contact
Enrique Garcia Rosales — info@myjapantraveler.com