Privacy Policy
Last updated 2026-07-07
What data we collect
To operate your account and synchronise your learning progress across devices, Origa stores the following data on its server:
| Category | Details |
|---|---|
| Account | Email address, username, and a server-assigned identifier. |
| Authentication | Email and password (passwords are hashed server-side and never stored in plain text), or sign-in via Google or Yandex OAuth. |
| Learning progress | Your study cards (vocabulary, kanji, grammar, phrases), spaced-repetition state, review history, JLPT progress, known-vocabulary index, and current Japanese level. |
| Settings | Interface language and daily study-load preference. |
| Imported sets | Identifiers of content sets you imported (the set contents themselves are public catalog data). |
| Optional profile | A Telegram user identifier, only if you choose to link a Telegram account. |
Origa does not collect analytics, crash reports, advertising identifiers, or precise device information. The on-device machine-learning models (OCR for camera text recognition, Whisper for speech recognition) run entirely on your device; camera frames and audio are processed locally and are never uploaded.
How data is used
- To authenticate you and keep your account secure.
- To synchronise your learning progress between your devices.
- To display your progress, level and review schedule inside the app.
The email received from an OAuth provider is used solely to identify your account and to synchronise progress; it is not sold or transferred to third parties.
Where data is stored
- Account and progress data: the TrailBase server at
app.origa.uwuwu.net, hosted in Singapore. - Static assets (dictionaries, machine-learning models, phrase audio): the CDN at
s3.origa.uwuwu.net. These are public catalog content, not user data. - OAuth sign-in is handled by Google and Yandex according to their respective privacy policies.
Data retention
We retain your data until you request deletion. Origa does not erase accounts automatically after a period of inactivity. You can delete your account at any time from the in-app profile screen, or by contacting us.
Your rights
- Access — request a copy of the data we hold about you.
- Rectification — correct inaccurate account or profile data.
- Erasure — delete your account and associated data.
- Portability — receive your progress data in a machine-readable form.
To exercise any of these rights, use the in-app account-deletion function or contact us at the address below. If you are located in the European Union (GDPR) or the Russian Federation (Federal Law No. 152-FZ), these rights are reflected in the controls described above.
Children's privacy
Origa is a general-purpose language-learning tool and is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact us so we can delete it.
Third-party services
- Google OAuth (accounts.google.com) — optional sign-in provider.
- Yandex OAuth (oauth.yandex.ru) — optional sign-in provider.
- Static CDN (s3.origa.uwuwu.net) — public catalog content.
Origa does not include advertising SDKs, analytics SDKs, or cross-device tracking SDKs.
Changes to this policy
If this policy changes, the updated version will be published on this page.
Contact
Questions about this policy can be sent to yurvon@ya.ru.