Takarir Privacy Policy

1. Who looks after your data

Operator: JAEHO LEE (an individual, not a company), resident in Australia. Contact: takarir.app@gmail.com

In this policy, "we" means that operator. Send any question or request about your data to the email above.

2. What we keep

Only what the app needs to work:

• Your Google account: when you sign in with Google we keep your name and email address. Google also sends your profile photo, but we do not keep it. We never receive your Google password, and we do not ask for access to Gmail, Drive or your contacts.
• Google sign-in tokens: kept so you stay signed in, and revoked when you delete your account.
• What you study: the words, meanings, example sentences, notes and sources (such as a drama title) you save, and the decks and shadowing clips you create.
• Your study history: each answer when you review a card, when each card is due next, and a daily summary (cards, study time, streak).
• Settings: interface language, daily goals, reminder time and the other choices on the Settings page.
• Reminders: if you turn on notifications, your browser's push subscription address.
• Sign-in session: a cookie that marks you as signed in. It is the only cookie we use; there are no advertising or tracking cookies.

3. What stays on your device

• Shadowing recordings play back on your device and are never sent to our servers. A recording is discarded when you move to another line.
• If you lose your connection while studying, your answers are kept in the browser and sent when you are back online.
• Your browser also stores the app's files so Takarir opens faster, and a few small flags such as "this tip has been seen".

4. What the data is used for

• Showing you your words and scheduling when each one comes back.
• Working out your statistics and streak.
• Sending study reminders, only if you turn them on.
• Making automatic backups so your data is not lost (see section 8).
• Counting totals to improve the app, such as how many people finish the first step. These totals do not point to any one person.

We do not sell your data, show ads, or use third-party analytics or trackers. For visitors who are not signed in, we only count how many times a button is pressed each day — with no cookie, no ID, and without reading the IP address.

5. Why we may process it

We process your data on the basis of the consent you give when you sign in, and to provide the service you asked for, under Indonesia's Personal Data Protection Law (Law No. 27 of 2022, UU PDP).

You can withdraw your consent at any time by deleting your account (see section 9).

6. Who else processes the data

We use a few services to run Takarir. They process data only to provide their service to us:

• Vercel Inc. (United States): application servers and backup storage. The servers we chose are in Tokyo, Japan.
• Turso (United States): the database, stored in Tokyo, Japan.
• Google: signing in with your Google account. When you play a shadowing clip from YouTube, YouTube (Google) receives technical information such as your IP address. The player uses YouTube's privacy-enhanced mode (youtube-nocookie.com). If the natural voice is on for your account, the word or sentence being read is sent to Google Cloud Text-to-Speech to be voiced — never your name or email.
• Anthropic PBC (United States): the AI feature that fills in a word's meaning and examples. Only the word and text you ask it to complete are sent — never your name or email. For now the AI feature is switched on only for accounts the operator has allowed. See Anthropic's terms.
• Browser notification services (such as Google, Apple or Mozilla): only if you turn on reminders, to deliver them to your device.

Your data may therefore be processed outside Indonesia (Japan and the United States). This transfer is based on the consent you give when you sign in to Takarir (Article 56(4) UU PDP). You can withdraw that consent at any time by deleting your account.

7. Who can see your data

Your words and study history can only be seen from your own account. Other users cannot see them. The operator opens a particular account's data only if you ask (for example, to fix a problem) or if the law requires it.

8. How long we keep it

• While your account exists, we keep your data so your study schedule carries on.
• When you delete your account, its data is removed from the database straight away: the account, words, decks, cards, history, settings, notification subscriptions and sign-in sessions. Your Google tokens are revoked too.
• Automatic backups are made every night and kept for 14 days, then deleted automatically. A deleted account's backups are removed when the account is deleted; anything left behind is gone within 14 days.
• Backup copies the operator keeps on a personal computer are deleted automatically after 30 days.
• Technical server logs (such as IP address and request time) are kept briefly by our hosting provider under its own policy.
• Daily totals (such as "5 people pressed the sign-up button today") contain no personal data and are not deleted.

9. Your rights

Most of them you can use yourself, in the app:

• See and correct: every word, meaning and setting can be viewed and changed in the app.
• Download a copy: the Import & export page → download JSON (complete) or CSV.
• Delete your account and all its data: Settings → Delete account.
• Turn off reminders: Settings → Daily reminder.
• Revoke Google access: in your Google account settings (Security → Third-party apps).

For anything else — asking what data we hold, restricting processing, or objecting — email takarir.app@gmail.com. Requests to see (access) or correct your data are fulfilled within 3 × 24 hours of receiving them, as Articles 30 and 32 of UU PDP require. We answer other requests as soon as we can. We may ask you to write from your account's email address so we know the request is really yours.

If you believe your rights have been infringed, you can also complain to the competent data protection authority.

10. Children

Takarir is meant for people aged 13 and over. Anyone under 18 needs a parent's or guardian's consent before using it (Article 25 UU PDP). You are asked to confirm this once, the first time you sign in.

If we learn that an account belongs to a child under 13, we will delete it. Parents or guardians can contact us at takarir.app@gmail.com.

11. Security

Every connection is encrypted (HTTPS). Backups are stored privately, never as public links. Each account can read only its own data. No system is perfectly secure, but we do our best to protect your data.

If a data breach affects you, we will tell you in writing within 3 × 24 hours of finding out, as Article 46 of UU PDP requires.

12. Changes to this policy

If this policy changes, we update the date above. For important changes, we will tell you in the app before they take effect.

13. Contact

JAEHO LEE, operator of Takarir, Australia — takarir.app@gmail.com