Privacy policy

kotomori is operated by Daichi (sole proprietor, Japan), the developer of the kotomori family of apps available at https://kotomori.app and on the Apple App Store.

Contact: daichi1783@gmail.com.

Account data: email, name (if provided), Apple/Google sign-in identifier, language preferences.

Learning data: progress per character, attempt logs, streaks, XP. Used to power the practice tree and personal dashboard.

Purchase data: which packs/licenses you own (entitlements). Payment card details are processed by Paddle (our payment provider) and never reach our servers.

User-generated content: drawings, characters, scenes, stories, comments — only what you choose to save or post.

Technical data: anonymous, aggregated usage signals (which screens were viewed, did the app crash). No advertising or behavioural tracking.

Primary database and storage: Supabase (Postgres + Object Storage) hosted in the AWS Tokyo (ap-northeast-1) region. Encrypted at rest and in transit.

Hosting and edge cache: Vercel (Tokyo and global edge regions).

Domain and DNS: Cloudflare.

Generated assets and shared media: Cloudflare R2.

Paddle.com Market Limited — payment processing and Merchant of Record for global tax handling.

Apple Inc. — Sign in with Apple identifiers and App Store in-app purchase records.

Google LLC — Google sign-in identifiers (where used).

Anthropic, OpenAI, Google (Gemini) — only invoked when you provide your own API key (BYO) for AI features. Your prompts are sent to the provider you choose; we do not store them server-side.

VOICEVOX (Hiroshiba Kazuyuki) — speech audio is generated locally; no user audio is sent.

We use only first-party cookies that are strictly necessary: session/auth cookies, locale preference (NEXT_LOCALE), and CSRF protection.

We do not use third-party advertising cookies, marketing pixels, or cross-site tracking.

We retain your account data for as long as your account exists. Aggregated, non-identifying analytics may be retained longer for product improvement.

You can delete your account at any time from My Account → "Delete account". We delete all personal data within 30 days, except where retention is required by law (e.g. tax records of past purchases for 7 years under Japanese law).

Under the Japanese Act on the Protection of Personal Information (APPI), the EU GDPR, and the California CCPA, you have the right to access, correct, delete, and export your personal data, and to object to certain processing.

To exercise these rights, write to daichi1783@gmail.com. We will respond within 30 days.

Most kotomori apps are designed for parents and adult learners. The おえかきアニメ (OekakiAnime) app is intended for parent–child use and clearly states "this is an app for adults to use with their children".

We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

Your data may be processed in Japan (primary), the United States, the European Union, and other regions through our sub-processors. We rely on the recipients' standard contractual clauses or equivalent safeguards.

Material changes will be announced in-app and on https://kotomori.app at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.