KanumiPrivacy Policy
The short version. We collect what is needed to run an account and a learning history, and nothing else. There is no advertising SDK, no analytics SDK and no third-party tracker in the app. We do not sell or share your personal data. The scenario text you type is sent to Google to generate example sentences. If you subscribe, a pseudonymous account ID and purchase status are handled by Google Play and RevenueCat. Both are described below.
1. Who we are
Kanumi is an English-learning app operated by an independent developer.
For any privacy question, or to exercise any right described here, write to
support@hsiangya.com. We answer from
mail.hsiangya.com.
2. What we collect, and why
Account
| Data | Why |
|---|---|
| Email address | It identifies your account and receives security codes. |
| Password | Stored only as an argon2id hash. We never store, log or transmit your password in readable form, and we cannot recover it. |
| Google account identifier and verified email | To sign you in. We receive an identifier and your verified address from Google. We never receive your Google password. |
| Nickname and profile picture | Shown to you in the app. Both can be left empty or removed at any time. |
| Your chosen language | Decides the interface language and the language your word meanings are explained in. |
Sign-in security
- Session records — a one-way hash of each sign-in token, when it was issued, last used and revoked, and a short device label. Used to keep you signed in and to sign you out everywhere when you change your password.
- The IP address that requested a verification code, stored with that code record. This exists to detect and rate-limit abuse. It is deleted with the code record within 24 hours.
- The codes themselves are never stored. We keep only a keyed hash (HMAC-SHA256), so the code cannot be read back out of our database.
Email delivery
- Delivery logs — the recipient address, which kind of message it was, whether it was delivered, and any bounce or spam-complaint result. Kept for 90 days, then deleted automatically.
- Suppression list — addresses that hard-bounced or reported our mail as spam. We keep these so we stop mailing them. Ask us and we will remove an entry.
Learning content
- The scenario text you type ("a job interview for a nursing position"), the sentences generated for it, and which ones you chose to keep.
- Your review history — which items you have studied and when they are next due, so spaced repetition works.
- Counters of how much generation you have used (number of requests, sizes, timings). These contain no text and exist to enforce fair-use limits.
Subscription
- Your Kanumi account's random identifier, the product selected, purchase status, renewal status and expiry date. These let us unlock Pro and enforce its allowance.
- We do not receive or store your full card or bank details. Google Play processes payment using the payment method on your Google account.
3. What we do not collect
- No advertising identifiers, and no ads anywhere in the app.
- No analytics or crash-reporting SDK. The app bundles no third-party tracking library.
- No location, contacts, calendar, microphone, camera roll or phone number. (Choosing a profile picture opens the system picker; only the image you pick is uploaded.)
- No cross-app or cross-site tracking, and no advertising profile.
4. Who else sees your data
We use service providers for the narrow jobs below. We do not sell, rent or trade personal data, and no one receives it for their own marketing.
| Provider | What it receives | Why |
|---|---|---|
| Google (Gemini API) | The scenario text you type, and your chosen language. It is sent without your name, email or account identifier. | To generate the example sentences. This is the only place your content leaves our servers. Do not type anything private, personal or confidential into the scenario box. |
| Amazon Web Services (Simple Email Service) | Your email address and the message body. | To deliver verification and security email. |
| Google (Sign in with Google) | Only used if you choose that sign-in method. | To verify who you are without a password. |
| Google (Google Play) | Your Google Play account handles the payment. Kanumi receives the product and purchase status, not your full payment-card details. | To sell, renew, cancel and restore Android subscriptions. |
| RevenueCat | A random Kanumi account identifier, the selected product and Google Play purchase and renewal status. We do not send your email, nickname, scenario text or learning history. | To verify purchases and keep Pro access in sync across app and server. |
5. Where your data is held
Our application server and database run in Singapore. Email is sent through Amazon SES in the Asia Pacific (Singapore) region. Our providers may process data in other countries under their own terms. If you use the app from outside Singapore, your data is transferred there.
6. How long we keep it
| Data | Kept for |
|---|---|
| Verification codes and the IP that requested them | 24 hours |
| Email delivery logs | 90 days |
| Account, learning history, saved sentences and local subscription status | Until you ask us to delete the account |
| Subscription event IDs and usage counters | Until the account is deleted, for access control, fraud prevention and support |
| Sign-in sessions | Until they expire or you sign out |
| Suppression list entries | Until removed on request |
7. Deleting your account
You can have your account and its data deleted at any time. The request process is on the Delete account page. Deletion removes your account, your learning history and your saved sentences. Email delivery logs age out on their own 90-day schedule, and suppression entries are kept so we do not resume mailing an address that bounced.
8. Your rights
Write to support@hsiangya.com from the address on your account to ask for a copy of your data, to correct it, or to have it deleted. We aim to answer within 30 days. Depending on where you live you may also have the right to complain to your national data protection authority.
9. Children
Kanumi is for people aged 13 and over. It is not directed to children, and we do not knowingly collect data from anyone under 13. If you believe a child has created an account, write to us and we will delete it.
10. Security
- All traffic between the app and our servers uses HTTPS.
- Passwords are hashed with argon2id. Verification codes are stored as keyed hashes.
- Sign-in tokens are stored as one-way hashes; changing your password revokes every existing session.
- The database and cache are not reachable from the public internet.
11. Changes
If this policy changes in a way that affects you, we will update the date at the top and, for significant changes, show a notice in the app. Continuing to use Kanumi after a change means you accept the updated policy.