Privacy Policy

1. Scope and Who We Are

This Privacy Policy explains how Moji ("Moji", "we", "us", or "our") collects, uses, discloses, and protects information when you use the Moji iOS app, Android app, website, or related support services.

Moji is currently operated by Kai Kameyama, who is the controller of personal data described in this policy. You can contact us at the address in Section 15.

The iOS and Android apps do not use data in exactly the same way. The current iOS app does not offer sign-in and normally stores new learning progress on the device. The Android app offers optional Moji accounts and cloud progress sync through Supabase. The platform-specific details are explained below.

2. Information We Collect

3. How Each Platform Uses Supabase

4. How We Use Information

• Provide kanji lessons, spaced-repetition reviews, progress tracking, widgets, reminders, and cloud sync where available
• Create, authenticate, secure, support, and delete optional Android accounts
• Perform the limited legacy iOS progress transition described above
• Process purchases, determine entitlement status, restore purchases, and prevent subscription fraud
• Understand app performance and feature use, troubleshoot problems, and improve Moji
• Measure basic iOS app installs and activations through Meta, and use the advertising identifier or additional tutorial, funnel, trial, and subscription attribution only when Apple tracking permission has been granted
• Respond to support, privacy, and account-deletion requests
• Complete and verify the Android launch communications requested through the former waitlist
• Protect Moji, enforce our terms, comply with law, and establish or defend legal claims

5. Legal Bases for Processing

Where applicable law requires a legal basis, we rely on one or more of the following:

• Contract: Processing needed to provide the app, account, cloud sync, support, and subscription features you request
• Legitimate interests: Securing, maintaining, analyzing, and improving Moji, including basic app install and activation measurement where permitted by law, provided those interests are not overridden by your rights
• Consent: Processing the iOS advertising identifier and additional advertising attribution, and basic activation measurement where applicable law requires consent; you may withdraw consent through the relevant device setting
• Legal obligations: Processing needed for accounting, tax, consumer protection, privacy, security, and other legal requirements

6. Service Providers and Disclosures

We disclose information only as needed for the purposes described in this policy, at your direction, or where required or permitted by law. Our main service providers are:

We may also disclose information to professional advisers, authorities, courts, or other parties when reasonably necessary to comply with law, protect users or Moji, investigate abuse, or establish and defend legal claims.

7. Business Transfers and Change of Control

If Moji, its business, or relevant assets are involved in a proposed or completed financing, reorganization, merger, acquisition, or sale, information may be reviewed by advisers and prospective acquirers and may be transferred to a successor where permitted by law. Any pre-completion disclosure will be limited to information reasonably necessary to evaluate or complete the transaction and will be subject to appropriate confidentiality and security restrictions. We will use aggregated or de-identified information for diligence where reasonably possible.

A successor may use transferred personal information only for purposes consistent with this policy and the purposes for which the information was originally collected, unless another lawful basis applies. This section does not authorize an acquirer to use personal information for a materially incompatible purpose. We or the successor will provide notice, and obtain consent where required, before any materially different use.

8. Retention

• Android accounts and cloud learning: Retained while the account is active and then deleted or de-identified after a verified deletion request, subject to limited backup, fraud-prevention, security, and legal records
• Current iOS learning: Stored on the device until the app or its data is deleted; legacy cloud records remain until deleted or no longer reasonably needed
• Subscriptions and transactions: Retained as needed for entitlement, accounting, tax, fraud prevention, dispute resolution, and other legal obligations
• Analytics: Retained according to our provider settings and for as long as reasonably needed for product analysis, security, and troubleshooting, after which it is deleted or de-identified
• Support and privacy requests: Retained as needed to resolve the request and document compliance
• Former Android waitlist: The waitlist is closed following the August 19, 2026 Android launch. Existing records are used only to complete or verify the requested launch communications, handle removals, and prevent duplicate sends. They will be deleted or de-identified no later than November 17, 2026 unless a longer period is required by law.

Protected backup copies may remain until normal backup rotation completes. We may retain de-identified or aggregated information that can no longer reasonably identify a person.

9. Your Choices and Rights

Depending on where you live, you may have rights to:

• Ask whether we process your personal data and request access to it
• Correct inaccurate or incomplete personal data
• Request deletion or restriction of processing
• Receive certain data in a portable format
• Object to processing based on legitimate interests
• Withdraw consent without affecting processing that occurred before withdrawal
• Lodge a complaint with your local data-protection authority

We do not sell personal information for money. Some laws may define advertising attribution as "sharing" even when no money is exchanged. When iOS App Tracking Transparency permission is denied or revoked, Moji stops new matching-identifier collection and custom tutorial or funnel events, clears the Meta anonymous identifier from RevenueCat where the SDK supports clearing it, and reports the current ATT state. Meta Conversions API delivery is gated by the current ATT state together with the Meta server integration settings. These steps do not stop the basic Meta activation data described in Section 6 or delete data previously received by RevenueCat or Meta. You may also contact us to exercise applicable privacy rights.

To exercise a privacy right, contact us using Section 15. We may need to verify your identity before completing a request.

Deleting an account does not cancel an Apple App Store or Google Play subscription. Cancel the subscription separately in the store that processed it. Account deletion also does not erase learning data stored only on a device; delete the app or clear its local data on that device.

10. Security

• HTTPS/TLS encryption for data transmitted to our service providers
• Supabase Row Level Security and access controls for account and cloud learning data
• No public read access to former Android waitlist records
• Access limited to people and service providers who need it for the purposes in this policy

No system is completely secure. We cannot guarantee absolute security, but we use reasonable technical and organizational safeguards appropriate to the information we process.

11. International Data Transfers

Moji and its service providers may process information in countries other than the country where you live. Where required, we use contractual, organizational, or other safeguards intended to provide an appropriate level of protection for transferred personal data.

12. Notifications

Moji may ask for permission to send local learning reminders, streak alerts, and milestone notifications. These notifications are optional and can be disabled in the app or device settings. Moji does not use learning reminders for third-party advertising.

13. Children

Moji accounts and cloud-sync services are not directed to children under 13 or the applicable minimum age for independent consent in their country. If we learn that we collected personal data from a child without valid authorization, we will take reasonable steps to delete it. A parent or guardian can contact us using Section 15.

14. Changes to This Policy

We may update this policy as Moji, its ownership, or legal requirements change. We will post the updated policy here and revise the date above. If a change materially affects how we use personal data, we will provide additional notice or request consent where required. We will not treat a new policy as retroactive permission for an incompatible use of data collected under an earlier notice.

15. Contact Us

For privacy questions, requests, or complaints, contact:

• Controller: Kai Kameyama, operator of Moji
• Email: moji.app.help@gmail.com
• Service: Moji: Learn Japanese on Your Lock Screen

Please include enough information for us to understand and verify your request. We will respond within the period required by applicable law.