Privacy policy

This policy covers the Kotsukotsu Nihongo app for Android and this website, including the pre-launch waitlist. It is written to be read, not skimmed past. Last updated: 11 November 2026.

Who is responsible

Infinity Wings ("we"), the publisher of Kotsukotsu Nihongo, registered with the Dutch Chamber of Commerce (KvK) under number 42197027, is the data controller. Contact: [email protected].

The short version

• You can learn without an account. Your learning progress then stays on your phone.
• If you sign in, we store what the social and sync features need, and nothing more.
• No advertising, no ad IDs, no selling or renting your data, no tracking cookies.
• You can delete your account from inside the app at any time. See Delete your account.

What the app collects, and why

• Account (only if you sign in). Your email address and name from Google or Apple sign-in, and an account ID. Purpose: your account, and syncing your climb across devices. Legal basis: contract (GDPR art. 6(1)(b)).
• Profile. The display name and avatar you choose, and your altitude on the mountain. Friends, leaderboards and other climbers can see these. Legal basis: contract.
• Learning progress (if you sign in). Lessons completed, streak, stamina, rewards, game results and challenges. Without an account this stays on your device. Legal basis: contract.
• Messages and friends. Chat messages you send, friend requests, gifts, and blocks and reports you make. Messages are visible to the people you send them to. Reports are used only to keep the community safe. Legal basis: contract, and our legitimate interest in moderation (art. 6(1)(f)).
• Location (optional, Nearby only). If you open Nearby and allow location access, your phone's position and its city are stored so other learners near you can find you. Location is never collected in the background or by any other screen. Legal basis: your consent (art. 6(1)(a)), given in the Android permission prompt. You can withdraw it in Android settings.
• Notifications. A push token for your device, so we can send the reminders and messages you turn on. Legal basis: consent.
• Purchases. If you subscribe or buy something, Google Play processes the payment. We receive a purchase receipt and an anonymous customer ID through RevenueCat, to unlock what you bought. We never see your card details. Legal basis: contract.

What stays on your phone

• Microphone. Pronunciation and pitch practice analyse your voice on your phone; we never receive or store recordings. Some speaking exercises use your phone's built-in speech recognition (on most Android phones, provided by Google), which may process the audio under Google's own privacy terms.
• Calendar. If you book study appointments, the app writes them to your phone's calendar. We never receive your calendar.
• Focus mode. If you turn it on, the app checks which app is open so it can pause your loudest apps until you have studied. This uses Android's usage access, happens only on your phone, and is never sent to us.
• Alarms and the goodnight broadcast run on your phone and send nothing to us.

The website waitlist

If you join the waitlist we store your email address, signup time, language, referral code and campaign tags (UTM parameters), only to tell you when the app launches and who referred whom. Legal basis: your consent, given by ticking the checkbox. We delete waitlist data no later than 12 months after launch, or promptly if you unsubscribe. No tracking cookies are set. Website visits are counted with Cloudflare Web Analytics, which uses no cookies and no personal profiles.

Who processes data for us

We use these service providers, each bound by a data processing agreement:

• Supabase: database and sign-in.
• RevenueCat: subscription and purchase management.
• Google: Google sign-in, Google Play billing, and push delivery (Firebase Cloud Messaging).
• Apple: Sign in with Apple, if you choose it.
• Expo: delivery of push notifications.
• Cloudflare: website hosting and cookieless visit statistics.

Some of these providers process data outside the European Economic Area, including in the United States. Where they do, the transfer is protected by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. We do not sell your data or share it for advertising.

How long we keep it

Account data is kept until you delete your account. When you delete it, we delete your account and the data linked to it straight away, except purchase records, which tax law requires us and our providers to keep (7 years in the Netherlands). Deleted data can remain in routine backups for a limited time until they are overwritten. Data that only lives on your phone is removed when you uninstall the app.

Security

All data travels over encrypted connections (HTTPS). Database access is restricted per user, so you can only read and change your own data.

Children

Kotsukotsu Nihongo is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has created an account, email us and we will delete it.

Your rights

You have the right to access, correct, delete and export your data, to object to processing, and to withdraw consent at any time. Delete your account in the app (how), or email [email protected] from the address in question and it will be handled, no forms, no friction. You also have the right to complain to a data protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens.

Changes

If this policy changes, the date above changes with it, and material changes will be announced in the app.

© 2026 Infinity Wings · KvK 42197027