Okitori Studios

Privacy Policy

Effective date: July 17, 2026

This Privacy Policy applies to Kadojo and to all other applications and services developed by Okitori Studios (“we”, “our”, or “us”). We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and other applicable laws.

1. Who We Are

Okitori Studios EURL
200 Rue De La Croix Nivert
75015 PARIS, France
Email: contact@okitori.com

We are the data controller responsible for your personal data.

2. Data We Collect

Account

You sign in with Apple or Google. We receive a Firebase user ID — a random identifier — and this is the only account identifier we store. It is used as the key for your data.

We do not store your email address, your real name, or your profile photo. Your email is read from your sign-in provider only to display it to you on your own profile screen while the app is running; it is never written to our database. When you sign in with Apple, we request the name scope but never read or store the result.

Profile

Your display name is randomly generated when your account is created (for example, Guest123456). You can change it to anything you like. It is free text and it is stored, so please do not enter information you would rather we did not hold.

Learning data

Your progress, cards, review history, daily activity, and app preferences. This is the core of the service and the reason your account exists.

Purchases

If you subscribe, our payments provider records your subscription status against your Firebase user ID. We never receive or store your payment card details — the transaction happens entirely inside Apple's or Google's store.

Diagnostics

Crash reports and technical data (device model, operating system version, app version) so we can find and fix faults.

Bug reports

If you send a bug report from inside the app, we receive your Firebase user ID, platform, device, app version, the most recent error, and whatever description you write.

Usage analytics

Events describing how the app is used — screens opened, features used, where people stop. These are associated with your Firebase user ID. We collect these only if you consent, and you can turn analytics off at any time in the app's settings (see section 4).

Speech audio

Kadojo can read Japanese text aloud. This does not happen on your device: the text is sent to Google Cloud Text-to-Speech to generate the audio. The text sent is always Japanese study material from our own curriculum — never anything you have written. The request is authenticated, which means it can in principle be associated with your account, and the resulting audio file is cached and shared between all users studying the same material.

3. How We Use Your Data

We use your data to provide the app, save and sync your progress across your devices, deliver audio, provide any subscription you buy, fix crashes and bugs, and understand how the app is used so we can improve it.

We do not sell your data. We do not use it for advertising. We do not share it with advertisers or with unrelated third parties.

4. Legal Basis

Changing your mind. You can turn analytics on or off at any time in the app's settings. Withdrawing consent is as easy as giving it, and takes effect immediately.

Your right to object. Where we rely on legitimate interests — crash reporting and diagnostics — you have the right to object. Email contact@okitori.com and we will disable it for your account.

5. Who Processes Your Data

We use the following providers. They process data on our instructions, under contract.

6. Where Your Data Is Stored, and International Transfers

Your account, your learning data, and your cached audio are stored in the European Union. Our database and our backend both run in Belgium (europe-west1), and generated audio is stored in the EU.

Some processing nevertheless happens outside the European Economic Area. Sign-in, usage analytics, crash reporting, subscription management, and speech synthesis are operated by providers established outside the EU, and those services may process data outside the EEA. Where that happens, the transfer is covered by appropriate safeguards, in particular the European Commission's Standard Contractual Clauses.

7. Retention and Deletion

We keep your data for as long as your account exists. You can delete your account at any time from inside the app, or by emailing contact@okitori.com. Deletion removes your profile, your learning data, and your sign-in credentials, and it cannot be undone. Requests sent by email are handled within 30 days.

Two things deliberately survive account deletion, and you should know about them:

8. Your Rights

You have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable form, and withdraw consent where processing is based on consent. You also have the right to complain to a supervisory authority — in France, the CNIL.

To exercise any of these, email contact@okitori.com.

9. Security

We use technical and organizational measures including HTTPS in transit, authenticated access to our backend, database rules restricting each account's data to that account, and encrypted storage at rest by our providers.

10. Age

Kadojo is a general-audience app. It is not directed at children, and you must be at least 16 years old to use it. We do not verify age, and we do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, email contact@okitori.com and we will delete it.

11. Changes

We may update this Privacy Policy. Significant updates will be communicated in our apps or by email, and the effective date above will change.

12. Contact

Okitori Studios EURL
200 Rue De La Croix Nivert
75015 PARIS, France
Email: contact@okitori.com