Privacy Policy

1. Information We Collect

Information you provide directly

• Account data - name and email address when you register an account.
• Contact inquiries - name, email, and message content when you submit our contact form.
• Community content - posts, comments, and other content you create in community areas.

Information collected automatically

• Usage data - pages visited, study progress, practice test results, features used, and session duration.
• Device and browser data - browser type and version, operating system, screen resolution, and device type.
• Log data - IP address, access timestamps, referring URLs, and HTTP request information.
• Cookies and similar technologies - see our Cookie Policy for full details.

Information from third parties

• Google OAuth - if you choose to sign in with Google, we receive your name, email address, and profile picture from your Google account.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and operate the Platform - deliver JLPT study materials, track your learning progress, and maintain your account.
• Improve our services - analyze usage patterns to enhance content quality, fix issues, and develop new features.
• Communicate with you - respond to inquiries, send service-related notices, and (with your consent) share updates about new content or features.
• Ensure security - detect and prevent fraud, abuse, and unauthorized access.
• Display advertising - show relevant ads through Google AdSense on selected pages to support our free service.
• Comply with legal obligations - meet applicable laws, regulations, and legal processes.

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Consent - when you create an account, submit a contact form, or accept optional cookies.
• Legitimate interest - to operate, secure, and improve the Platform, and to display contextual advertising.
• Contract performance - to deliver the services you requested when you registered.
• Legal obligation - where required by applicable law.

4. Data Sharing and Third-Party Services

We do not sell your personal information. We share data only with the following service providers who assist us in operating the Platform:

Each provider operates under its own privacy policy. We encourage you to review their policies for details on how they handle data.

5. Cookies and Tracking Technologies

We use cookies and similar technologies for essential site functionality, analytics, and advertising. For a detailed breakdown of the cookies we use, their purposes, and how to manage them, please see our Cookie Policy.

6. Advertising

We use Google AdSense to display advertisements on selected pages. Google may use cookies to serve ads based on your prior visits to this or other websites. You can control personalized advertising through:

• Google Ad Settings - manage how Google personalizes ads for you.
• DAA Opt-Out - opt out of interest-based advertising from participating companies.
• Your Online Choices - manage advertising preferences (EU users).

Opting out of personalized ads does not remove advertising from the Platform; you will still see non-personalized ads.

7. Data Storage and Security

We protect your data through multiple layers of security:

• Encryption in transit - all data is transmitted over HTTPS/TLS.
• Encryption at rest - database records are encrypted using MongoDB Atlas encryption at rest.
• Access controls - database access is restricted to authorized services with role-based permissions.
• Password hashing - user passwords are salted and hashed using industry-standard algorithms; we never store plaintext passwords.
• Regular updates - dependencies and infrastructure are kept up to date to address known vulnerabilities.

While we take reasonable measures to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal data as follows:

• Account data - retained for as long as your account is active. Deleted within 30 days of account deletion request.
• Study progress - retained for as long as your account is active to provide continuity in your learning.
• Contact inquiries - retained for up to 12 months after resolution.
• Analytics data - aggregated and anonymized data may be retained indefinitely for trend analysis.
• Server logs - automatically deleted after 90 days.

9. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access - request a copy of the personal data we hold about you.
• Correction - request correction of inaccurate or incomplete data.
• Deletion - request deletion of your personal data and account.
• Data portability - request your data in a structured, machine-readable format.
• Withdraw consent - withdraw consent for optional data processing at any time.
• Object - object to processing based on legitimate interest.
• Restrict processing - request that we limit how we use your data.

To exercise any of these rights, please contact us through our contact page. We will respond to your request within 30 days.

10. Children's Privacy

GyanMirai welcomes learners of all ages, including children. Our Platform is an educational resource for Japanese language learning, and all study content - vocabulary lists, kanji guides, grammar explanations, practice tests, and interactive tools - is freely accessible to everyone.

We collect only minimal information necessary to provide our services (see Section 1). We do not collect any data beyond what is needed for the Platform to function and do not use children's data for advertising profiling.

11. International Data Transfers

Your data may be processed and stored in countries outside your country of residence, including the United States, where our hosting and database providers operate. These countries may have different data protection laws. By using the Platform, you consent to the transfer of your data to these countries. We ensure appropriate safeguards are in place through our service providers' security measures and compliance programs.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will update the "Effective date" at the top of this page and, where appropriate, notify you by email or through a notice on the Platform. Your continued use of the Platform after the changes take effect constitutes your acceptance of the revised policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out through our contact page.

Website: www.gyanmirai.com