Privacy policy

Your device and your choices

Answers, results, favorites, personal notes, review schedules, reading and listening positions, and display preferences are saved on your device. The written preview does not require an account. Full learning access requires an online check after a cold launch; offline access can last up to 24 hours within that running session. The written preview contains no audio.

Record import and export contain your personal learning records, not question text, choices, answer keys, explanations, PDFs or audio. You choose the destination through the system share sheet. Exported files may contain personal notes; protect copies you share or store.

Account and access

Sign in with Apple is used for account-based services, protected media and content downloads. We keep an internal account identifier, a hashed Apple subject identifier, necessary encrypted Apple authorization credentials, hashed session credentials, and account creation and recent-activity times. The app does not request your Apple password or ask Apple for your name or email address.

We process network connection information, including IP addresses, to deliver content, enforce rate limits and protect the service. This is not used to infer your location or to target advertising. Short-lived access tokens authorize learning or media access; they are not learning records.

Optional learning sync

If you set up cloud sync, the app uploads your answers and result snapshots, progress, favorites, notes, review cards and events, reading/listening positions and permitted preferences. It does not upload question materials, choices, answer keys, explanations or media. Stable question and article identifiers associate your records with the corresponding material.

Accounts have separate local record contexts. On first setup, you choose to merge device records or use that account’s cloud records. Local safety copies and conflicting note versions are retained for review. Signing out stops that account’s synchronization; it does not itself delete previously synced records.

Who can read synced records

Authorized administrators can inspect account activity and explicitly open synced learning records, including personal notes, to investigate service problems and respond to support requests. Detailed record reads are recorded in an audit log. Access is restricted to authorized operators.

Synced payloads and sensitive credentials are encrypted on the server. This is not end-to-end encryption: the service can decrypt records for synchronization and authorized support. Do not place passwords, payment information or other sensitive secrets in learning notes.

Service diagnostics and use information

We keep request counts, recent account activity, request timing and technical error summaries to monitor availability, diagnose failures and support users. Account-level usage summaries can be associated with your account. They measure service requests, not total study time or every action you take on screen.

Hourly account usage is normally retained for 30 days, aggregate request metrics for 14 days, operational events for 90 days and administrator audit entries for 365 days. There are no advertising or third-party analytics SDKs in the app, and we do not use these records for cross-app tracking or advertising.

Service providers and support messages

Apple provides sign-in and StoreKit services. Cloudflare provides network protection, private content and backup storage, and support-email routing; our hosting provider runs the account and sync service. Necessary data is processed by these providers to deliver and secure the service, potentially outside your country of residence. We do not sell personal data.

If you email support, we receive your sender address and the message and attachments you choose to send. The project support address forwards to the operator’s support mailbox hosted by Google. These messages are used to handle your request and remain in the mailbox until deleted. You may request deletion of support correspondence, subject to necessary security, dispute or legal retention. Do not send passwords, verification codes, private keys or full payment-card information.

Purchase-related information

New purchases are not currently available. The app includes StoreKit restoration and verification paths that may process an existing eligible signed transaction if one is supplied by Apple. This policy does not mean that a paid service is currently offered.

Apple handles payment information. We do not receive your card or bank-account details. Where a transaction is processed, we keep transaction identifiers, product and environment, validity and refund/revocation status, and a minimal encrypted account-to-purchase binding to verify access and prevent misuse. Restoring access does not restore deleted learning records.

Deletion, retention and recovery

Use Profile → Account → Delete account and verify the same Apple identity again. This removes the account’s cloud learning records and sessions. Device records remain on the device. Managing local copies, exported files and system backups is separate from deleting a server account.

We retain the minimum deletion/revocation journal and purchase-binding information needed to prevent deleted data from returning after a backup restore, finish Apple authorization revocation and recognize a valid purchase. These journals are separate from ordinary backup expiry. Apple transaction-notification records are normally retained for 90 days.

Encrypted offsite database backups normally expire after 14 days; the latest verified recoverable backup is protected and may remain longer. A backup may contain data deleted since it was created. Recovery reapplies the deletion journal, clears old sessions and requires fresh Apple checks before restoring paid access. No payment is currently enabled.

Deleting the app account does not cancel an Apple subscription. If you have one, manage or cancel it in Apple’s subscription settings.

These public pages

The privacy and support pages can be read without signing in. They do not retrieve your learning records and contain no advertising or tracking SDK. Basic connection information is processed by the hosting network to serve and protect the pages.

Your requests and policy changes

Contact support@jlpt-odyssey.xmediafetchbot.win to request access to, correction of or deletion of personal data, or to ask about this policy. We may need to verify that you control the affected account before acting. Do not email Apple credentials or one-time codes.

We update this page when our practices change. The date shown identifies the current text. A change to paid features or data practices will be reflected in the relevant disclosures before that change is offered.