Privacy policy

Data controller

Minarai is an independent app. For any questions about your data or this policy, you can write to contacto@minaraiapp.com.

Your account

You need an account to use Minarai. To manage access we use Firebase Authentication, a Google service that processes this data on our behalf:

• If you sign up with email and password: your email address and password. The password is handled securely by Firebase; we never see it or store it in plain text.
• If you sign in with Google: the email address and name that Google gives us to identify you. We never see your Google account's password.
• The name and username you choose to show on your profile.
• Your profile photo, if you choose one: the image stays on your device and is not uploaded to any server; only its local path is saved so it can be displayed.

Your progress and preferences

Your study progress is stored on your device and also in our database (Google's Cloud Firestore), linked to your account, so you don't lose it when you reinstall the app or switch devices: studied cards and their state, streak, study history and statistics, completed chapters, daily study and review counts, active course, Premium status, app language and date of last use.

Other preferences, such as appearance (light or dark mode and colour style), sound, study reminders (time, frequency and days), whether you have already seen the guided tour and the date of the last new-version notice, are stored only on your device.

In handwriting practice, the strokes you draw are checked on your own device: they are not stored or sent to any server.

Email and push updates

You can turn on email updates and/or push notifications in Settings (bug fixes, new features and changes to these terms). Both are off by default and you can turn them off at any time in the same place.

• Email updates: we use your account email address. Emails are sent through Resend, an email delivery provider.
• Push updates: we store a notification identifier for your device (Expo token). Notifications are sent through Expo's notification service and the Apple or Google services for your device.

Study reminders are different: they are scheduled as local notifications on your own device and don't go through any server.

If you subscribe to Premium

Payments are processed by Google Play: we never see your card or payment details. To manage your subscription we use RevenueCat, a provider that validates purchases with Google Play on our behalf. The following data is processed with it:

• The internal identifier of your Minarai account (not your name or email).
• Purchase data provided by Google Play: plan, purchase, renewal and expiry dates, whether you are on a free trial, cancellations, payment issues, country and currency, and the purchase identifier.

We also store in your Firestore document whether you have Premium and a summary of your subscription (plan, whether it is a trial, renewal or expiry date, and whether there is a payment issue), so we can show it to you in the app.

Contact form

If you write to us from Settings → Contact us, we store your name, email address, reason, message, app version and operating system (iOS or Android), only so we can reply to you and improve the app.

Why we use your data and legal basis

• Managing your account and syncing your progress: necessary to provide the service you request when you sign up.
• Managing your Premium subscription: necessary to perform the subscription contract and, for purchase records, to meet our legal and tax obligations.
• Sending you email or push updates: your consent, which you give by turning them on and can withdraw at any time.
• Replying to your contact messages: your consent, given when you send the form.

What we don't do

• We don't use analytics or behavior-tracking tools.
• We don't show ads or share data with advertising networks.
• We don't sell or transfer your data to third parties.

Who we share data with

Only with the technical providers we need for the app to work, who process the data on our behalf:

• Google (Firebase Authentication, Cloud Firestore and Cloud Functions): accounts, synced progress, update preferences and contact messages. If you sign in with Google, Google also verifies your identity.
• Google Play: charging Premium subscriptions, only if you subscribe, and, on Android, checking whether a newer version of the app is available. That check is done by the Google Play app on your device using its own information about the installed app; no data reaches us.
• RevenueCat: validating and managing Premium subscriptions, only if you subscribe.
• Resend: sending email updates (only if you have turned them on) and forwarding the messages you send us from Settings → Contact us to our inbox.
• Cloudflare: forwarding the emails you send to contacto@minaraiapp.com to our Gmail inbox.
• Expo (and Apple or Google as notification systems): sending push notifications, only if you have turned them on.

Some of these providers may process data outside the European Economic Area; in that case they do so with the safeguards required by data protection law, such as the European Commission's standard contractual clauses.

How long we keep it

• Your account data and synced progress, for as long as you have an account. When you delete it, your account and your Firestore data are deleted.
• Premium purchase records, for as long as required by applicable legal and tax obligations.
• Your push token, for as long as push updates are turned on.
• Contact messages, for as long as needed to handle your request.

Your rights

You can access, correct or delete your data, object to or restrict its processing, or ask for a copy (portability):

• Progress and preferences stored on your device: Settings → Reset Japanese.
• Your account data and cloud progress: Settings → Edit profile → Delete account.
• Updates: turn them off in Settings → Notifications.

For any other request (for example, to ask for a copy of your data), write to us at contacto@minaraiapp.com. If you believe we haven't handled your data properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

Minors

• Using Minarai requires creating an account (with email and password or with any other sign-in method we offer), and creating an account requires being at least 14 years old.
• If you are under 14, you may only create an account with the consent of your parent or legal guardian.

If you are the parent or legal guardian of a minor who has created an account and want to review, correct or delete their data, write to us at contacto@minaraiapp.com and we will take care of it.

Changes to this policy

If this policy changes significantly, we will update the date shown above and, when the change warrants it, let you know within the app.