Privacy

Short version: what you learn stays on your phone. We count finished sessions and crashes, and you can switch both off.

The app

Momo is a Japanese-learning app. Everything you do in it — the kana you learn, your review history, your streak — is stored in a local database on your device. It never leaves your phone, and we can't see it.

• No account is required, and none is created.
• No ads, ever.
• Nothing you learn is collected, sold, or shared — not the kana you study, not your answers, not anything you type.

Two things do leave your phone, and we'd rather spell them out than bury them:

• Session counts. When you finish a review session we record that it happened, which module it was, roughly how well it went as a band (not a score), and milestones like a continued streak. That's how we find out whether the lessons actually land.
• Crash reports. When the app breaks, a technical report of where it broke. No learning data.

Both are on by default and both can be switched off in Settings, under Sharing. Turning off crash reports takes effect the next time you open the app — the reporter is installed at launch and can't be removed mid-session.

• Legal basis. Our legitimate interest in keeping the app working and understanding whether it teaches well, under Article 6(1)(f). We're relying on that rather than consent because the data is not tied to an identity and is never combined with anything else — and you can object at any time with the switches in Settings.
• Not linked to you. There's no account, so there's no name or email attached. The app generates a random ID for itself, so sessions from one install can be told apart from another. That ID is the only handle we have on you.
• Who processes it. PostHog, on their EU servers, under the same data processing agreement described below.
• How long. 12 months, then it's deleted.
• Deleting it. Settings → Sharing → "Copy my ID", then email it to us and we'll erase what's tied to it. Switching the toggles off stops new data; it doesn't remove what was already sent.

No tracking across other apps or websites happens, so iOS won't ask you about tracking — there's nothing to ask about.

This website

Different story, and we'd rather say it plainly. If you accept analytics in the banner, we count things like which page you landed on and whether you tapped through to the beta. It tells us whether this page is doing its job. If you decline, nothing loads and nothing is sent — the banner isn't decoration.

• Who's responsible. Momo is a one-person project. The developer is the data controller, reachable at the email below.
• What's collected. Pages viewed, how far down you scrolled, and which "join the beta" link you tapped — plus the usual technical bits your browser sends, like rough country-level location, device type, and the site you came from.
• Legal basis. Your consent. You give it in the banner, and you can take it back whenever you like.
• Who processes it. PostHog, on their EU servers, acting on our instructions under a data processing agreement. Some of their subprocessors operate outside the EU under standard contractual clauses.
• How long we keep it. 12 months, then it's deleted.
• Taking it back. Reopen the banner from the footer link and decline. That stops collection from that moment — it doesn't erase what was already sent, so email us if you'd like that too.

What Apple handles

During the beta, the app is distributed through Apple's TestFlight. Apple may collect crash reports and basic usage statistics under Apple's privacy policy and shares crash logs with us so we can fix bugs. Those logs contain technical details about the crash, not your learning data.

Your rights

If you're in the EU or UK, you can ask for a copy of what we hold, ask us to correct or delete it, or object to how we use it. Email us and we'll sort it out — there's no form to fill in. You can also complain to your local data protection authority if we've handled something badly.

If the app changes

If a future version adds accounts, sync, or collects anything beyond what's listed above, this policy will change before that version ships, and we'll spell out exactly what changed and how to turn it off.

Questions

Email [email protected] — a human reads it.

Last updated: 22 July 2026