Privacy policy

Application: KanjiQuizz (Android)
Website: kanjiquizz.camille-lupo.fr
Effective: 6 August 2026 · Last updated: 18 October 2026
This is a translation provided for convenience. In case of discrepancy, the French version prevails.

In short

KanjiQuizz is a Japanese-learning application developed by one person. To keep your progress in sync across devices, the app needs an account: an email address, a password — or signing in with your Google account —, the language to write to you in, and how far you have got in your lessons.

That is all. There is no advertising, no tracker, no analytics, no embedded social network, and your data is neither sold nor shared for commercial purposes. You can delete your account and all of your data at any time, from the app, in a few seconds.

1. Who is responsible for your data

The data controller is:

There is no data protection officer: the activity does not require one. Your requests are handled directly by the person who develops the app.

2. Data stored on the server

When you create an account, the following information is stored on a server so that your progress follows you from one device to the next. The account is optional: without one, nothing personal is sent to the server.

Your account

• Your email address. It is your login identifier and lets us check that the account is really yours.
• Your password, stored as a hash. It is never stored in clear text and cannot be read back by anyone.
• Only if you choose to sign in with Google: the identifier of your Google account and the email address Google passes on. This way of signing in is optional; if you do not use it, none of it is stored (see section 7).
• A username, if you choose one.
• Your preferred language (French, English or Japanese), taken from the app's display language. It is used solely to send you the account emails (address verification, forgotten password) in that language.
• The account's creation date and the date you last used it. The latter is used solely to apply the inactive-account deletion described in section 8.
• A flag stating whether the account has access to the full version (see section 14).
• Only if you buy the full version: a purchase token and an order number. The token is a technical code provided by Google, distinct from the order number, used to check with Google that the purchase is genuine. Without a purchase, neither of them exists.

Your progress

For every kanji, kana, vocabulary word and example sentence you work on:

• how many times it has been shown to you;
• how many correct and how many wrong answers you gave;
• your level in the spaced-repetition system;
• the date of your last review and of the next one.

Your quiz sessions

For every completed session: the JLPT level, your score, the number of questions and the date.

Your experience points, level, rank and daily streak are not stored: they are recomputed from this session history every time they are displayed. Erasing the sessions makes them disappear too.

3. What stays on your phone and is never sent

These items are kept only in the app's storage, on your device:

• your settings: language, theme, kanji font, sound, daily goal. The one exception: if you have an account, the language is also stored on the server so we can write to you in it (see section 2);
• your quiz preferences: selected levels, modes, session length;
• your favourites;
• content cached to reduce network round-trips.

If you uninstall the app, these items disappear with it. However, uninstalling the app does not delete your account: see section 10.

4. This website

The website kanjiquizz.camille-lupo.fr presents the app. It sets no cookie, uses no analytics tool and contains no form. Its fonts are hosted on the same server: nothing is loaded from a third-party service, and your visit is reported to no one. The server does not record visitors' IP addresses.

5. What KanjiQuizz does not do

These points have been checked in the code of the app and of the server. No such tool is installed.

• No advertising of any kind.
• No analytics: no Google Analytics, no Firebase Analytics, nothing equivalent.
• No automatic crash reporting: no Crashlytics, nothing equivalent.
• No social sharing component: nothing publishes or shares your activity, and there is no Facebook, X or TikTok component. The "Sign in with Google" button is only there to identify you, it is not a social component (section 7).
• The Google sign-in and purchase (Play Billing) components are indeed present in the app and talk to Google, but only when you sign in with Google or when you buy the full version (sections 7 and 14). Neither of them is an advertising or audience-measurement tool.
• No advertising cookie, no tracker, no advertising identifier.
• No access log: the server does not record the IP addresses of the people using the app.
• No sale, no rental, no sharing of your data for commercial or marketing purposes.
• No automated decision with legal effects on you, no advertising profiling.
• Japanese audio playback uses the text-to-speech voice installed on your phone. Nothing is sent to a server for it.
• The app asks for neither your location, nor your contacts, nor your microphone, nor your camera.

6. Why this data, and on what legal basis

No processing relies on your consent, because there is no advertising, no usage statistics and no newsletter. Should that change, this policy will be amended before the change takes effect, and your consent will be asked.

7. Who else sees your data

Your data may pass through two kinds of recipient, and the difference between them matters.

The first kind are technical providers: they carry out one specific task for us, on our instructions only, and may not use your data for their own purposes. The second is Google, for two clearly bounded operations: signing in with a Google account, and buying the full version. For those, Google receives certain data and uses it under its own rules, which are not ours to decide.

Here is what each of them receives, and why.

PulseHeberg — server hosting

The server holding your account and your progress is hosted by PulseHeberg, in a data centre located in Paris, France. This website is hosted on the same server.

Mailjet — account emails

Two emails may be sent to you through Mailjet, a French company: the one that verifies your address when the account is created, and the one that lets you choose a new password if you have forgotten it — the latter only when you request it from the app.

Only your email address is passed to Mailjet, together with the relevant link. Mailjet receives neither your password, nor your progress, nor any other data. No other email is ever sent to you: there is no newsletter and no promotional message.

These emails contain no tracking pixel and no redirect link: open and click tracking, on by default at Mailjet, is turned off message by message. We therefore do not know whether you opened them.

Microsoft — inbox for your requests

The contact address above is an Outlook mailbox. If you write to exercise your rights, the content of your message passes through Microsoft, like any email. That is this provider's only role.

Google — Google account sign-in and purchase

Signing in with Google is optional. It only concerns you if you use the "Sign in with Google" button rather than an email address and a password. In that case, Google passes the app your name, your email address and your profile picture, together with an identifier Google assigns to your account for KanjiQuizz: that identifier means nothing to anyone else, but Google itself can of course link it back to your Google account. Your Google password is never disclosed to us. On our server, only that identifier and your email address are stored (section 2). On its side, Google records the fact that you linked your Google account to KanjiQuizz; it publicly states that it does not use this information for advertising, nor for any other of its services.

The purchase is optional too. It only concerns you if you decide to unlock the full version. The seller is then Google Commerce Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google handles the payment end to end: it takes the money, sends you the receipt and deals with refund requests itself. The app receives only a purchase token and an order number, together with the reference of the product bought and its state. Neither your card number, nor your billing name, nor your billing address reaches the app.

For these two operations, Google does not act on our instructions: what it does with the data it holds on its side is for Google to decide, and it is Google's own privacy policy that applies, not this one. In Europe, the entity concerned is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Its policy can be read here: policies.google.com/privacy

Nobody else

Apart from the recipients described above, no other company, partner or advertiser receives your data. It can only be handed to an authority on a lawful judicial request, in the cases provided for by law.

8. How long your data is kept

Deleting your account does not make you lose your purchase: it stays attached to your Google account, at Google, and not to your KanjiQuizz account.

When you delete your account yourself, deletion is immediate: it does not depend on any of these periods.

No backup of your personal data is kept on our systems. What is deleted therefore no longer exists on our servers, nor in any archive of ours. This does not cover the information Google keeps on its own side for Google account sign-in and for the purchase, described in section 7.

9. Where your data is stored

Your data is stored on a server located in Paris, France, hence in the European Union. It does not leave it.

Three exceptions, limited to what section 7 describes: the email address passed to Mailjet to send verification and reset messages, the content of the emails you send us, received in a Microsoft mailbox, and the data Google receives if you sign in with a Google account or if you buy the full version.

In that last case, Google's European entity is established in Ireland, hence also in the European Union. But once Google holds that data for those two operations, it is Google's own policy that applies, including its own rules when it moves data outside the European Union. That is not up to us.

Exchanges between the app and the server are encrypted (HTTPS).

10. Deleting your account

You can delete your account at any time, without having to justify it and without contacting us.

In the app: Profile tab → your profile card at the top of the screen → Account screen → Danger zone section → Delete my account.

Deletion is immediate and permanent. The following is erased: your email address, your password, the identifier of your Google account, your username, the full-version flag, the purchase token and the order number, all your progress, your review schedule and your quiz session history. Nothing is kept "just in case"; there is no recycle bin and no cooling-off period.

The only thing left is one line in a deletion register: the date and time of the deletion, the former internal account number and how the deletion was confirmed (password or Google). It is used only to count deletions and to check that they went through. It contains neither your email, nor your username, nor the identifier of your Google account: once the account is deleted, nothing on our servers links that number to you any more.

The dedicated page, reachable without installing the app, describes the procedure in detail — including if you have uninstalled the app or lost your password: kanjiquizz.camille-lupo.fr/en/suppression-compte

11. Your rights

The GDPR gives you rights over your data. All of them are exercised at the same address: help.kanjiquizzapp@outlook.fr

• Right of access — obtain a copy of the data about you.
• Right to rectification — correct inaccurate information. Your username and password can be changed directly in the app's Account screen.
• Right to erasure — have your account and data deleted. The fastest way is to do it yourself in the app; it is immediate.
• Right to data portability — receive your data in a machine-readable format. This request is handled manually, by email.
• Right to object — object to processing based on legitimate interest, on grounds relating to your situation.
• Right to restriction — ask for a processing to be temporarily frozen while a dispute is examined.

How it works

Write to the address above from your account's email address. You will get an answer within one month at most. That period may be extended by two months for a complex request; in that case you are told before the end of the first month, with the reason.

If there is serious doubt about your identity, additional proof may be requested. It is destroyed as soon as the request has been handled.

If you are not satisfied with the answer

You can lodge a complaint, free of charge, with the French data protection authority, the CNIL:

• online at www.cnil.fr/plaintes
• by post: CNIL — 3 place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07, France

You may also contact the supervisory authority of your own EU country.

12. Security

• Passwords are hashed, never stored in clear text.
• Exchanges between the app and the server use an encrypted connection (HTTPS).
• The database is reachable only from the server itself: it is not exposed on the internet.
• Administrative access is limited to one person.
• The email address is verified at sign-up.
• Account deletion requires your password and is protected against repeated attempts by a third party.

No system is infallible. In the event of a data breach posing a risk to your rights, you will be informed, and the CNIL will be notified within 72 hours, as the law requires.

You have a part to play too: choose a password you use nowhere else.

13. Minimum age

The app is not intended for children under 15 and asks them for no specific data. If you are a parent and find that an account has been created by your child under 15, write to us: the account will be deleted.

In France, Google likewise requires you to be 15 to hold your own Google account. Below that age, the account is created and supervised by a parent through Family Link, and every Google Play purchase then has to be approved by that parent.

In some European Union countries, Google accepts an account from the age of 13 or 14. That changes nothing here: KanjiQuizz remains an app that is not intended for under-15s.

14. Purchases

KanjiQuizz may offer a full unlock, paid for once. It is not a subscription: there is no recurring charge, no automatic renewal and nothing to cancel.

If you buy this unlock, the seller is Google Commerce Limited and the payment is handled end to end by Google: Google takes the money, sends you the receipt, and is the one a refund request must be addressed to. Your card number, your billing name and your billing address never pass through the app: it receives only a purchase token and an order number, used to verify the purchase and restore it to you if you change device.

This processing is described in this policy as of now: section 6 gives its legal basis, section 7 Google's exact role, and section 8 the retention period.

15. Changes to this policy

In the event of a significant change — new data collected, new provider, new purpose — you will be informed in the app before the change takes effect. The date of the last update appears at the top of this page.