Privacy Policy

What we collect

When you create an account, we store your username and optionally an email address. We store the sessions you complete — including your answers, AI-generated scorecards, and flashcards derived from your gaps. We do not store raw audio. Voice answers are transcribed in your browser using the Web Speech API and only the text transcript is sent to our servers.

We log page views (path, timestamp, and — for signed-in users — your account identifier) for internal product analytics. This helps us understand feature usage and drop-off points. If you have given analytics consent, we also send anonymised usage events to Google Analytics (GA4) so we can understand which features are used and where people get stuck.

How we use it

• To operate the service — authenticating you, storing your sessions, generating your flashcards, and maintaining your streak.
• To send transactional emails — streak reminders and password reset links — only if you have added an email address and enabled notifications.
• To improve the product — understanding which topics, modes, and flows people use (via internal page-view data and, with consent, Google Analytics).

We do not sell your data. We do not use your answers to train any model. We do not run advertising of any kind.

Cookies

We use one essential cookie to keep you signed in (a session token stored as an HTTP-only cookie). No session cookie is set until you create an account and sign in.

If you click Accept all on the cookie banner, we set a Google Analytics cookie (_ga and related) that tracks anonymised page views and events. If you click Necessary only, no analytics cookies are set. You can change this at any time by clearing your browser's local storage for this site.

Third parties

• Anthropic — your answers are sent to Claude to generate scorecards. Anthropic's API usage policy applies. We do not send your username or email to Anthropic.
• Supabase / PostgreSQL — our database host. Data is stored in the EU (Frankfurt).
• Google Analytics — only active if you consent. Data is anonymised (IP addresses are not logged in full).
• Vercel — our hosting provider. Vercel may log request metadata (IP, user-agent) for infrastructure purposes.
• PayPal / Paystack — payment processors. Payment data (card details, billing address) is handled directly by these providers and is not stored on our servers. Their respective privacy policies apply.

A full list of sub-processors with their data location and purpose is available on our sub-processors page.

Retention and deletion

Your data is kept for as long as you have an active account. You can delete your account at any time from the Settings page — this permanently deletes your profile, all sessions, flashcards, and progress data. Email addresses are removed immediately on account deletion. Database backups are retained for 30 days, after which deleted data is purged from backups entirely.

Your rights

You have the right to access, correct, or delete the personal data we hold about you. To exercise these rights, or if you have any questions about this policy, email us at admin@japareality.com.

Changes to this policy

If we make material changes we will update the date at the top of this page. Continued use of My Next Hop after a change constitutes acceptance of the updated policy.