Privacy Policy

1. Information We Collect

• Email address (at registration)
• Display name (optional)
• Assessment results and learning progress
• Payment information (processed by Stripe; we do not store card details)

2. How We Use Your Information

• Account authentication and management
• Saving and displaying your learning progress
• Aggregated, non-identifiable analysis for service improvement

3. Cookies

We use cookies solely to maintain login sessions. We do not use tracking cookies for advertising purposes.

4. Third-Party Service Providers

We share data with the following providers solely to operate the Service. Each is contractually required to handle data securely.

• Stripe, Inc. (United States) — Payment processing. Only the information necessary to complete your transaction is shared.
• Supabase, Inc. (United States) — Database and authentication. Account information and learning data are stored on their servers.

Your data may be stored and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence. Where required, transfers are conducted under appropriate safeguards (such as standard contractual clauses).

We do not sell or share your personal information with any other third parties, except as required by law.

5. Children’s Privacy

The Service is designed for children aged 10–18 with parental guidance. We do not knowingly collect personal information from children under 16 without verifiable parental consent. If you believe a child under 16 has provided information without parental consent, please contact us and we will promptly delete the information.

6. Your Rights

You have the right to access, correct, or request deletion of your personal information. Depending on your country of residence, you may also have additional rights under applicable privacy laws (including the Australian Privacy Act, Canada’s PIPEDA, or Singapore’s PDPA).

To exercise any of these rights, please contact us at info-izanagi@namiflow.jp.

7. Data Retention

Data is retained while your account is active. Upon account deletion, personal information is removed within 30 days, except where retention is required by applicable law (e.g. payment records).