KotoPlanet隐私政策
生效日期：2026 年 7 月 30 日
KotoPlanet（下称「本应用」）是一款面向中文母语者的日语学习应用。我们把隐私处理写得尽量具体，方便你确认每一项数据的去向。
三句话概括：
- 不登录也能完整使用，此时所有学习数据只存在你的设备上，不上传任何服务器。
- 我们不投放广告、不做跨应用追踪、不接入任何第三方分析 SDK，也不出售任何数据。
- 你可以随时在应用内「我的 → 删除账号」一键彻底删除云端账号与全部数据。
一、我们收集哪些信息
1. 仅在你选择登录后才收集
| 类别 | 具体内容 | 用途 |
|---|---|---|
| 邮箱地址 | 你用于登录的邮箱 | 发送一次性登录验证码；标识你的云端数据归属 |
| 学习数据 | 学习进度、答题记录、错题本、每日学习时长、应用内设置、模拟考试记录 | 在你的多台设备之间同步学习进度，生成学习统计与复习计划 |
2. 使用在线功能时经过我们服务器转发的内容
以下内容仅在处理你当次请求的过程中经过我们的服务器，处理完毕即丢弃，我们不做任何留存：
| 内容 | 触发场景 | 转发给 |
|---|---|---|
| 语音录音 | 跟读发音评测 | Microsoft Azure 语音服务（用于打分） |
| 对话文本 | AI 情景对话 | Google Gemini（用于生成日语回复） |
| 待朗读的日语文本 | 朗读日语内容 | Google Cloud Text-to-Speech（用于合成语音） |
3. 技术性信息
- IP 地址：用于在线服务的用量限流与滥用防护。我们只按 IP 记录请求次数计数，不保存请求内容，也不将其与你的学习数据关联。
- 错误报告：应用发生异常时，会上报错误信息、发生位置、设备型号与系统版本，用于修复问题。错误报告不包含你的学习内容、对话内容或邮箱地址。
二、我们不收集哪些信息
本应用不收集也不请求：通讯录、位置信息、相册与照片、日历、健康数据、设备广告标识符（IDFA）、以及任何用于跨应用或跨网站追踪的数据。本应用不含广告，不含第三方分析或归因 SDK。
三、设备权限
| 权限 | 何时请求 | 用途 |
|---|---|---|
| 麦克风 | 首次使用跟读评测或对话语音输入时 | 录制你的日语发音 |
| 语音识别 | 首次使用对话语音输入时 | 把你说的日语转成文字 |
两项权限都可以拒绝，拒绝后仅对应功能不可用，不影响其余学习功能。
四、第三方服务
为提供服务，我们使用以下服务商。它们各自的隐私政策适用于其处理环节：
| 服务商 | 用途 | 接触到的数据 |
|---|---|---|
| Supabase | 账号认证与云端学习数据存储 | 邮箱地址、学习数据 |
| Cloudflare | API 网关、网页托管、限流计数、学习内容分发 | IP 地址、请求计数 |
| Google（Gemini） | AI 情景对话生成 | 对话文本 |
| Google Cloud TTS | 日语语音合成 | 待朗读的日语文本 |
| Microsoft Azure | 发音评测打分 | 语音录音片段 |
我们不向任何第三方出售、出租或交易你的个人信息，也不将其用于广告目的。
五、数据存储与保留
- 不登录时，学习数据仅保存在你的设备本地，卸载应用即随之删除。
- 登录后，学习数据同时保存在设备本地与云端（Supabase）。云端数据保留至你主动删除账号为止。
- 本应用未在中国大陆地区提供，云端数据存储于服务商位于中国大陆境外的数据中心。
六、你的权利与操作方式
| 你想做什么 | 怎么做 | 结果 |
|---|---|---|
| 导出我的数据 | 我的 → 数据备份 → 导出 | 得到一份包含全部学习数据的 JSON 文件 |
| 重置学习进度 | 我的 → 重置学习进度 | 清空学习记录，保留账号与偏好设置 |
| 删除账号 | 我的 → 删除账号 | 永久删除账号本身及云端全部数据，同时清空本机数据，不可恢复 |
| 不再使用云端 | 我的 → 退出登录 | 回到纯本地模式，云端数据保留 |
如需通过邮件行使访问、更正或删除权利，写信到下方联系邮箱，我们会在 30 天内回复。
七、儿童隐私
本应用不面向 13 岁以下儿童设计，我们不会有意收集 13 岁以下儿童的个人信息。若你认为有儿童向我们提供了个人信息，请联系我们，我们会尽快删除。
八、AI 生成内容说明
「情景对话」功能中的日语回复由 AI（Google Gemini）实时生成，不代表我们的观点，也可能出现不准确或不自然的表达。我们已启用服务商的内容安全过滤。若你遇到不当内容，可在对话界面内直接举报，或写信告知我们。
九、本政策的变更
本政策如有变更，我们会更新本页顶部的生效日期。涉及重大变更时，会在应用内显著位置提示。
十、联系我们
隐私相关问题请联系：hello@aouos.com
Privacy Policy
Effective date: July 30, 2026
KotoPlanet is a Japanese-learning app for native Chinese speakers. This policy describes exactly what data we handle and where it goes.
In short:
- The app is fully usable without signing in. In that mode all learning data stays on your device and is never uploaded.
- We serve no ads, do no cross-app tracking, embed no third-party analytics SDK, and sell no data.
- You can permanently delete your account and all cloud data at any time from Me → Delete Account inside the app.
1. Information we collect
1.1 Collected only if you choose to sign in
| Category | Details | Purpose |
|---|---|---|
| Email address | The address you sign in with | Deliver one-time sign-in codes; identify ownership of your cloud data |
| Learning data | Study progress, answer logs, mistake collection, daily study time, in-app settings, mock exam records | Sync your progress across your devices; produce statistics and review schedules |
1.2 Content relayed through our server when you use online features
The following passes through our server only while your request is being processed, and is discarded immediately afterwards. We retain none of it:
| Content | When | Relayed to |
|---|---|---|
| Voice recording | Pronunciation assessment | Microsoft Azure Speech (for scoring) |
| Conversation text | AI scenario dialogue | Google Gemini (to generate a Japanese reply) |
| Japanese text to be spoken | Reading Japanese content aloud | Google Cloud Text-to-Speech (for synthesis) |
1.3 Technical information
- IP address — used for rate limiting and abuse prevention on online features. We store only a request counter keyed by IP; we do not store request content and do not link it to your learning data.
- Error reports — when the app encounters an error, we report the error message, its location, your device model, and OS version so we can fix it. Error reports contain no learning content, no conversation content, and no email address.
2. What we do not collect
The app neither collects nor requests: contacts, location, photos, calendar, health data, the device advertising identifier (IDFA), or any data used for tracking across apps or websites. The app contains no advertising and no third-party analytics or attribution SDK.
3. Device permissions
| Permission | Requested when | Purpose |
|---|---|---|
| Microphone | First use of pronunciation assessment or dialogue voice input | Record your Japanese pronunciation |
| Speech Recognition | First use of dialogue voice input | Transcribe the Japanese you speak |
Both can be declined. Declining disables only the corresponding feature; all other learning features continue to work.
4. Third-party services
We rely on the following providers. Their own privacy policies govern their part of the processing:
| Provider | Purpose | Data they see |
|---|---|---|
| Supabase | Account authentication and cloud storage of learning data | Email address, learning data |
| Cloudflare | API gateway, web hosting, rate-limit counters, learning-content delivery | IP address, request counts |
| Google (Gemini) | AI scenario dialogue generation | Conversation text |
| Google Cloud TTS | Japanese speech synthesis | Japanese text to be spoken |
| Microsoft Azure | Pronunciation scoring | Voice recording clips |
We do not sell, rent, or trade your personal information to any third party, and we do not use it for advertising.
5. Storage and retention
- Signed out: learning data lives only on your device and is removed when you uninstall the app.
- Signed in: learning data is stored both on your device and in the cloud (Supabase). Cloud data is retained until you delete your account.
- The app is not offered in mainland China. Cloud data is stored in provider data centers located outside mainland China.
6. Your rights and how to exercise them
| What you want | How | Result |
|---|---|---|
| Export my data | Me → Data Backup → Export | A JSON file containing all of your learning data |
| Reset my progress | Me → Reset Progress | Clears learning records; keeps your account and preferences |
| Delete my account | Me → Delete Account | Permanently deletes the account itself and all cloud data, and wipes local data. Not recoverable. |
| Stop using the cloud | Me → Sign Out | Returns to local-only mode; cloud data is retained |
To exercise access, correction, or deletion rights by email, write to the address below. We respond within 30 days.
7. Children's privacy
The app is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.
8. AI-generated content
Japanese replies in the Scenario Dialogue feature are generated in real time by AI (Google Gemini). They do not represent our views and may be inaccurate or unnatural. Provider-side content safety filtering is enabled. If you encounter inappropriate content, you can report it directly from the conversation screen, or write to us.
9. Changes to this policy
If this policy changes, we will update the effective date at the top of this page. For material changes we will additionally notify you inside the app.
10. Contact
Privacy questions: hello@aouos.com