Last updated: March 19, 2026
KanjiCraft ("we", "our", "us") operates the KanjiCraft mobile application ("App"). This Privacy Policy describes how we collect, use, store, and protect your personal information, in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Brazil's Lei Geral de Proteção de Dados (LGPD).
1.1 Account data (optional)
If you create an account, we collect: email address, display name, and profile picture (when provided). When using social login (Google or Apple), we receive the data authorized by the provider.
1.2 Learning data
We store locally on your device: kanji progress, spaced repetition (SRS) cards, quiz results, writing scores, achievements, XP, and daily study streak.
1.3 User preferences
Japanese level, study goal, app language, theme, notification, haptic, and sound settings.
1.4 Technical data (automatic)
In the event of an app crash, Firebase Crashlytics collects: device type, OS version, error stack traces, and anonymous device identifiers.
1.5 Advertising data
Google AdMob may collect device advertising identifiers and ad interaction data. On iOS, we request your permission via App Tracking Transparency before any ad tracking.
Kanji meanings, mnemonics, and example vocabulary may have been generated or curated with the assistance of artificial intelligence tools. While we strive for accuracy, language learning content may contain errors. KanjiCraft is a supplementary study tool and should not be considered the sole reference for JLPT preparation or academic purposes. Handwriting recognition uses an on-device machine learning model.
Kanji handwriting recognition (ML) runs entirely on your device. No writing data is sent to external servers.
You may withdraw your consent at any time through the app or device settings.
5.1 Local storage (offline-first)
Your learning data is stored primarily on your device using ObjectBox. The app works fully offline.
5.2 Cloud storage (optional)
If you create an account, your data may be synced with Supabase (hosted PostgreSQL). Row-level security (RLS) policies ensure only you can access your own data.
5.3 Encryption
All communications use HTTPS/TLS. Auth tokens are stored in Keychain (iOS) and EncryptedSharedPreferences (Android).
5.4 Retention
We retain your data as long as your account is active. Data from deleted accounts is removed within 30 days.
We do not sell your personal data. We share data only with:
Under the GDPR, LGPD, and CCPA, you have the right to:
You can delete your account directly in the app settings or contact us.
You can use KanjiCraft without an account. No personally identifiable data is collected. All data is stored only on your device.
KanjiCraft is not directed at children under 13. We do not knowingly collect data from children under 13.
Your data may be transferred to servers outside your country. We ensure transfers are protected by appropriate safeguards (standard contractual clauses).
We may update this policy from time to time. We will notify you of significant changes through the app.
Email: admin@becaptainstudio.com
For users in the EU, you may lodge a complaint with your local DPA. For users in Brazil, contact the ANPD.