Privacy Policy
Last updated 2026-08-20
What data we collect
To operate your account and synchronise your learning progress across devices, Origa stores the following data on its server:
| Category | Details |
|---|---|
| Account | Email address, username, and a server-assigned identifier. |
| Authentication | Email and password (passwords are hashed server-side and never stored in plain text), or sign-in via Google, Yandex, or Apple OAuth. |
| Learning progress | Your study cards (vocabulary, kanji, grammar, phrases), spaced-repetition state, review history, JLPT progress, known-vocabulary index, and current Japanese level. |
| Settings | Interface language and daily study-load preference. |
| Imported sets | Identifiers of content sets you imported (the set contents themselves are public catalog data). |
| Optional profile | A Telegram user identifier, only if you choose to link a Telegram account. |
| Diagnostics | Crash reports, performance traces, and technical logs, sent to Sentry (sentry.io), a third-party error-monitoring service. They include the app version, operating system version, and device model, and an anonymous installation identifier, a random UUID generated on first launch and used to count installations. These records are not linked to your account, email, or learning progress. |
| Web analytics | Aggregated pageview statistics for this website and the web app (pages visited, referrer, approximate country, browser and operating system), sent to Umami Cloud (cloud.umami.is), a privacy-focused analytics service. The tracker sets no cookies, uses no cross-site identifiers, does not store IP addresses, and is not linked to your account or the diagnostics identifier. If your browser sends a Do Not Track signal, pageviews are not recorded. |
Origa does not collect advertising identifiers, precise location, contacts, or your browsing activity outside Origa services; pageview statistics inside Origa services are aggregated and anonymous, as described above. The on-device machine-learning models (OCR for camera text recognition, Whisper for speech recognition) run entirely on your device; camera frames and audio are processed locally and are never uploaded.
How data is used
- To authenticate you and keep your account secure.
- To synchronise your learning progress between your devices.
- To display your progress, level and review schedule inside the app.
- To diagnose crashes and performance problems, so they can be fixed.
- To measure installations and launches in aggregate, through the anonymous installation identifier sent to Sentry.
- To understand, in aggregate, which pages and features visitors use, through anonymous web analytics.
The email received from an OAuth provider is used solely to identify your account and to synchronise progress; it is not sold or transferred to third parties. Diagnostic records sent to Sentry serve no advertising purpose and are not combined with data from other services.
Where data is stored
- Account and progress data: the TrailBase server at
app.origa.uwuwu.net, hosted in Singapore. - Crash reports, performance traces and technical logs: Sentry (sentry.io), hosted in the USA. These records are not linked to your account.
- Aggregated web-analytics statistics: Umami Cloud (cloud.umami.is), operated by Umami. Anonymous records, not linked to your account.
- Static assets (dictionaries, machine-learning models, phrase audio): the CDN at
s3.origa.uwuwu.net. These are public catalog content, not user data. - OAuth sign-in is handled by Google, Yandex, and Apple according to their respective privacy policies.
Data retention
We retain your data until you request deletion. Origa does not erase accounts automatically after a period of inactivity. You can delete your account at any time from the in-app profile screen, or by contacting us.
Your rights
- Access — request a copy of the data we hold about you.
- Rectification — correct inaccurate account or profile data.
- Erasure — delete your account and associated data.
- Portability — receive your progress data in a machine-readable form.
To exercise any of these rights, use the in-app account-deletion function or contact us at the address below. If you are located in the European Union (GDPR) or the Russian Federation (Federal Law No. 152-FZ), these rights are reflected in the controls described above.
Children's privacy
Origa is a general-purpose language-learning tool and is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact us so we can delete it.
Third-party services
- Google OAuth (accounts.google.com) — optional sign-in provider.
- Yandex OAuth (oauth.yandex.ru) — optional sign-in provider.
- Apple OAuth (appleid.apple.com) — optional sign-in provider.
- Sentry (sentry.io) — crash reporting and error monitoring; receives crash reports, performance traces and technical logs, not linked to your account.
- Umami Cloud (cloud.umami.is) — privacy-focused web analytics; receives anonymous, cookieless pageview statistics, not linked to your account.
- Static CDN (s3.origa.uwuwu.net) — public catalog content.
Origa does not include advertising SDKs or cross-device tracking SDKs, and the data listed above is not used for advertising and is not transferred to data brokers.
Changes to this policy
If this policy changes, the updated version will be published on this page.
Contact
Questions about this policy can be sent to yurvon@ya.ru.