Privacy Policy

Last updated: January 6, 2026

KanaPlay ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Japanese language learning application.

By using KanaPlay, you agree to the collection and use of information in accordance with this policy.

1. Data We Access

When you sign in with Google, we access the following information from your Google account:

Email Address

Used for account identification and communication

We do not access your Google contacts, calendar, photos, documents, or any other personal data beyond your email address.

2. How We Use Your Data

We use the information we collect for the following purposes:

AuthenticationTo create and manage your account, and verify your identity when you sign in.
Service DeliveryTo provide personalized learning experiences, track your progress, and save your study data.
CommunicationTo send important account notifications, such as subscription confirmations and password resets.
Subscription ManagementTo process and manage your KanaPlay Plus subscription and payment history.

3. Data Sharing with Third Parties

We share your data only with trusted third-party service providers essential to operating KanaPlay:

Supabase

Purpose: User authentication and secure data storage. Your email and learning progress are stored in Supabase's secure PostgreSQL database.

Midtrans

Purpose: Payment processing for KanaPlay Plus subscriptions. We do not store your payment card details; all payment data is processed securely by Midtrans.

Resend

Purpose: Sending transactional emails (subscription confirmations, password reset links, account notifications).

We do not sell, rent, or trade your personal information to any third parties for marketing or advertising purposes.

4. Data Storage & Protection

We implement industry-standard security measures to protect your data:

Encryption in Transit: All data transmitted between your browser and our servers uses HTTPS/TLS encryption.
Encryption at Rest: Data stored in our database is encrypted using AES-256 encryption.
Secure Authentication: We use JWT (JSON Web Tokens) for secure session management.
Access Controls: Only authorized personnel have access to user data, strictly on a need-to-know basis.

Our infrastructure is hosted on secure cloud platforms with SOC 2 compliance and regular security audits.

5. Data Retention & Deletion

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you stop using KanaPlay, your data will be retained for a maximum of 2 years before automatic deletion, unless legally required to retain it longer.

Requesting Data Deletion

You have the right to request the deletion of your personal data at any time. To delete your account and all associated data:

Go to your Account Settings page
Click on "Delete Account"
Confirm the deletion request

Alternatively, you can email us at support@kanaplay.web.id with the subject line "Data Deletion Request" and we will process your request within 30 days.

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: support@kanaplay.web.id

This privacy policy is effective as of January 6, 2026 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.