Privacy Policy

1. Introduction

Welcome to Kazu Navi ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

Kazu Navi is operated by an individual developer based in Spain. By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when you:

• Create an Account: Email address and password (securely hashed)
• Make a Purchase: Payment information is processed by our payment provider (Creem.io) and we do not store your credit card details
• Contact Us: Any information you provide when reaching out for support

2.2 Automatically Collected Information

When you use our Service, we automatically collect certain information:

• Usage Data: Number of times each tool is used (counters for analytics purposes only - we do NOT store your actual input text)
• Device Information: Browser type, operating system, IP address, device identifiers
• Analytics Data: Pages visited, time spent, navigation patterns (via Google Analytics)
• Cookies: Small data files stored on your device (see Section 4)

2.3 Information We Do NOT Collect

Important: We do NOT store the Japanese text, sentences, or phrases you input into our AI-powered tools (Sentence Analyzer, Natural Translator, Sentence Corrector). We only record that these tools were used, not what was analyzed or translated.

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide and Maintain the Service: To operate and deliver the Japanese learning tools you request
• Account Management: To create and manage your user account, including authentication
• Process Payments: To handle subscriptions and billing through our payment processor
• AI Features: To process your Japanese text through Google Gemini AI for grammar analysis, translation, and correction (data is sent to Google but not stored by us)
• Improve Our Service: To understand how users interact with our tools and make improvements
• Analytics: To analyze usage patterns and optimize user experience
• Communicate: To send service-related updates, respond to inquiries, and provide customer support
• Legal Compliance: To comply with applicable laws and regulations

4. Cookies and Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files placed on your device to store data that can be recalled by a web server in the domain that placed the cookie.

4.2 Types of Cookies We Use

• Necessary Cookies: Required for authentication, security, and basic site functionality (e.g., keeping you logged in). These cannot be disabled.
• Analytics Cookies: Help us understand how visitors use our Service (Google Analytics). These are only activated if you consent via our cookie banner.
• Advertising Cookies (Future): We plan to implement Google AdSense, which would use cookies to serve relevant ads. You will be notified and asked for consent before this is implemented.

4.3 Your Cookie Choices

When you first visit Kazu Navi, you'll see a cookie consent banner where you can choose to:

• Accept all cookies (including analytics)
• Accept only necessary cookies
• Decline all non-essential cookies

You can also manage cookies through your browser settings. Note that disabling necessary cookies may affect your ability to use certain features of the Service.

5. Third-Party Services

We use the following third-party services that may collect, process, or store your information:

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure HTTPS encryption for all data transmission
• Password hashing using industry-standard algorithms
• Regular security updates and monitoring
• Secure cloud infrastructure (Supabase, Google Cloud)
• Limited access to personal data (only the developer has access for support purposes)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

7. Data Retention

We retain your personal information for as long as necessary to provide you with our Service and as described in this Privacy Policy:

• Active Accounts: We retain your account data for as long as your account is active
• Deleted Accounts: When you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes
• Usage Statistics: Aggregated, anonymized usage data (e.g., total number of analyses performed) may be retained indefinitely for analytics purposes
• Payment Records: Transaction records are retained as required by law and our payment processor

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

8.1 EU/EEA Users (GDPR Rights)

If you are located in the European Union or European Economic Area, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Rectification: Request correction of inaccurate or incomplete information
• Erasure: Request deletion of your personal information ("right to be forgotten")
• Restriction: Request restriction of processing in certain circumstances
• Data Portability: Request a copy of your data in a machine-readable format
• Object: Object to processing of your personal information
• Withdraw Consent: Withdraw your consent at any time (where processing is based on consent)

8.2 California Users (CCPA Rights)

If you are a California resident, you have the right to:

• Know what personal information is collected, used, shared, or sold
• Delete your personal information
• Opt-out of the sale of personal information (Note: We do not sell personal information)
• Non-discrimination for exercising your rights

8.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

You can also delete your account directly through your Account Settings.

9. Children's Privacy

Our Service is intended for users aged 16 years and older. We do not knowingly collect personal information from children under 16 (or under 13 in the United States).

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

10. International Data Transfers

Kazu Navi is operated from Spain, but our Service is accessible worldwide. Your personal information may be transferred to and processed in countries other than your country of residence, including:

• United States (Supabase, Google services)
• European Union (Spain - primary operations)

When we transfer personal information outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or relying on providers with adequate data protection certifications.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. When we make changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email if the changes are significant (if you have an account)
• Display a notice on our website

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

For EU/EEA users: If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.