I Love KanjiPrivacy policy
Last updated: 9 October 2026
In short: we keep what the app needs to work – your email, your study progress and the status of your subscription. There are no ads or tracking cookies, and we don’t sell data. Card payments are handled by Stripe.
Who is responsible
I Love Kanji (https://www.ilovekanji.com), run from Norway, is the data controller. Contact: duborg@bedrift2.no.
What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Email address and password (stored only as a secure hash) | Your account and signing in | Contract |
| Study data: profile name, decks, words, progress, settings and your own example sentences | Running the app and syncing it between your devices (only when you are signed in) | Contract |
| Subscription data: Stripe customer ID, plan, status and renewal date | Knowing whether you have access, and handling billing | Contract |
| Payment records (amounts, dates, receipts) | Bookkeeping | Legal obligation |
| Technical logs (IP address, browser, time of request) | Security, preventing abuse and fixing errors | Legitimate interest |
Without an account, the app keeps everything on your device only (in your browser’s storage). The app uses browser storage to work – for example to remember your progress, settings and sign-in – but no advertising or tracking cookies.
Who processes data for us
- Supabase – database and sign-in. Data is stored in the EU (Ireland).
- Stripe – payments and subscriptions. Stripe receives your email and payment details and is also responsible for its own processing under its privacy policy.
- Vercel – hosting of the website and its servers, including technical logs.
- OpenCode (AI model provider) – generates practice sentences. It receives the words being practised, not your name or email.
- Google Fonts – the app loads fonts from Google, so your browser connects to Google’s servers, which see your IP address.
- jisho.org and kanjiapi.dev – word and kanji lookups go through our server, so they see the search term but not your IP address or identity.
Some of these providers are based in the USA. Transfers rely on the EU–US Data Privacy Framework or the EU Standard Contractual Clauses. We don’t sell your data or use it for advertising.
How long we keep it
- Account and study data: until you delete your account.
- Payment records: 5 years, as Norwegian bookkeeping law requires.
- Technical logs: kept for a short time by our hosting provider.
Your rights
You can ask for a copy of your data, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format. To delete your account and its synced data, email duborg@bedrift2.no from the address on the account – an active subscription should be cancelled first. You can also clear the data on a device from the app’s settings.
If you think we handle your data wrongly, you can complain to the Norwegian Data Protection Authority (Datatilsynet) or the authority where you live – but please contact us first so we can fix it.
Children
I Love Kanji is not meant for children under 13, and we don’t knowingly collect their data.
Changes
If we change this policy in a way that matters, we update the date above and tell signed-in users by email. See also the terms of service.