Privacy Policy

1. Who handles your information

This policy covers the DramaLingo apps for iOS and Android, the web app (app.dramalingo.ai) and this site (dramalingo.ai), together "the service". The service is operated by EASTCYBER LTD ("we", "us"). We decide why and how the personal information described here is processed, which makes us the data controller.

Operator

EASTCYBER LTD

Registered address

71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

Contact

hello@dramalingo.ai

2. What we collect

Account ID

The first time you open the app or the web app, an anonymous account is created for you with a random ID. You do not have to provide anything for this.

Sign-in details

Only if you choose to sign in. With an email code: your email address. With Google: the email address and account identifier Google provides, plus the name and profile photo link it sends along (we do not use the name or photo). With Apple: the email address Apple provides (a relay address if you choose to hide your email) and an account identifier. The first time you sign in with Apple, if you choose to share your name, we save it as your display name.

Learning data

Words you have met and learned, each review answer (right or wrong, time taken, rating), memory progress, kana practice, clips you liked or saved, which clips were recommended to you, your streak, and your level, review and reminder settings and interface language.

Activity

What you do in the app and when, such as playing, finishing or skipping a clip, tapping a word, marking it learned, liking, sharing and answering quizzes. These records contain no device model, IP address or other device details.

Time zone

Your device's time zone name (for example Asia/Tokyo), sent when the app starts. We use it to count reviews and streaks by your local date and to time your reminders.

AI lesson content

AI lessons are available to signed-in accounts only, and we ask for your consent before your first lesson. We keep the content generated for each lesson, the answers you type in it (up to 200 characters each) and the AI's marking of them.

AI lesson waitlist

Only if you join it: your account, when you joined, your platform and app language, used only to tell you when AI lessons launch. Deleted together with your account.

Push tokens

Only after you turn on reminders and allow notifications: the push token your device or browser creates for the app (in the web app, a push address and encryption keys plus the browser's user-agent string), used only to send you reminders.

Sharing

The share links created when you open the share screen, and how many times each link is opened, used for a download or brings in a new user.

Technical logs

When you use the service, our providers (section 5) record technical details such as IP address, time of access and browser or device type in their server logs, for security and troubleshooting.

We do not access your contacts, location, camera or microphone, and we do not collect advertising identifiers such as the IDFA. When you save a share card on iOS, the app only adds that image to your photo library and never reads the library.

3. How we use it

• To run the service: saving and syncing your progress so you can pick up where you left off after signing in on another device.
• To schedule reviews: working out when each word should come back. Once you have enough reviews, a nightly job on our server tunes your review settings for you automatically.
• To pick clips: matching your level, and not showing the same theme back to back.
• To make AI lessons: with your consent, sending the words in the lesson, your learning progress on those words and the answers you type to Anthropic, which writes the questions and marks your answers.
• To send reminders, if you allow them: review and streak reminders. Reminders sent from our server contain only numbers, such as how many words are due, not the words themselves.
• For sign-in and security: sending sign-in codes, and detecting and stopping abuse.
• To fix problems and improve content: for example, finding clips that fail to play and words people keep forgetting.

We do not use your information for advertising, we do not sell it, and we do not use it to track you across other companies' apps or websites.

4. Legal bases

Where the law requires us to state a legal basis (for example the EU General Data Protection Regulation or UK data protection law), we rely on:

• Contract: providing the features you use, such as saving progress, scheduling reviews, sign-in and AI lessons.
• Legitimate interests: keeping the service secure, fixing problems and improving content, within what you would reasonably expect.
• Consent: push notifications, and passing AI lesson content to Anthropic. You can turn these off or withdraw consent at any time in the app or in your system settings.
• Legal obligation: where the law requires us to keep or disclose information.

5. Who else handles it

We do not sell your personal information. To run the service we use the providers below, who receive the information listed:

Supabase

Database and sign-in. Your account and learning data are stored on Supabase servers in Tokyo, Japan.

Vercel

Hosting for this site and the web app.

Bunny.net

Delivery of clips, posters and pronunciation audio. Media addresses carry no account information.

Anthropic

With your consent, its Claude models write AI lesson questions and mark your answers. We send it the words in the lesson, your learning progress on those words, lines from the clip and the answers you type. We do not send your account ID or email address.

Google

Sign in with Google. Push notifications to phones are delivered through Google's Firebase Cloud Messaging, which sees the push token and the reminder text. This site loads fonts from Google Fonts, so your browser sends Google request details such as your IP address.

Apple

Sign in with Apple. Push notifications on iPhone are delivered through the Apple Push Notification service.

Resend

Sends sign-in code emails, so it handles your email address.

DigitalOcean

A server we rent in its Singapore data centre, where the nightly job tunes personal review settings. The review history it reads is keyed by account ID only, with no email address.

Browser push services

Reminders in the web app are delivered through the push service of your browser's maker (for example Google, Mozilla, Apple or Microsoft). The reminder content is encrypted, so the push service cannot read it.

Beyond this, we disclose information to law enforcement, regulators or courts only where the law requires it or where it is necessary to protect users, the public or our own legal rights. If our business is merged, acquired or its assets are transferred, your information may move with it, and the recipient must keep handling it under this policy.

6. Where it is processed

Your account and learning data are stored in Tokyo, Japan. Some information is processed in other countries to run the service: AI lesson content is processed by Anthropic, whose servers are mainly in the United States; personal review settings are tuned in Singapore; sign-in emails, push notifications and media delivery run on our providers' global networks. Data protection rules in those places may differ from where you live. We transfer information only as far as running the service requires.

7. How long we keep it

• Account and learning data: for as long as the account exists. When you delete your account, this data is deleted from our database right away. Automatic database backups rotate on a fixed cycle, and deleted data expires with the old backups.
• Anonymous accounts: these do not expire on their own. After you uninstall the app or clear your browser data you can no longer get back into the old anonymous account, but its data stays on our servers. If you do not plan to use it again, delete the account in the app first.
• Push: the daily send log is kept for 35 days. Push tokens that keep failing are removed automatically.
• Sharing: when you delete your account, the share links you created and their open records are deleted with it. Records of you opening other people's links stay in their statistics but no longer point to any account.
• Admin activity log: actions our staff take on an account in the admin tools are logged with the account ID only. After an account is deleted, these entries are kept for security auditing.
• Apple revocation records: when you delete an account that has signed in with Apple, we record the result of revoking the authorisation with Apple: the account ID, the account identifier Apple provides, the outcome and the time, but no tokens. After the account is deleted, this record is kept so we can check that the revocation went through.
• Technical logs: kept by each provider for a limited time under its own policy.

8. Your rights and choices

• Use it without signing in: you can use the service without signing in (a few features, such as AI lessons, need an account). If you do not sign in, we hold no email address or other identity details for you.
• Delete your account: in the app or the web app, go to Me → Settings → Delete account and confirm. Your account, learning data, review history, poster shelf, AI lesson records and push tokens are deleted together and cannot be recovered. Anonymous accounts can be deleted the same way. If you signed in with Apple, we also revoke the app's sign-in authorisation with Apple when you delete the account.
• Withdraw consent for AI lessons: at any time, go to Me → Settings in the app and turn off "AI lesson data sharing" under Privacy. After that, this device no longer sends your content to Anthropic, and the app asks you again before your next lesson. Consent is recorded per device, so a new device also asks before your first lesson.
• Access, correction and a copy: you can view and change your learning settings in the app. To get a copy of the information we hold about you, or to correct or delete something, email hello@dramalingo.ai. To protect your account we will first confirm it is you, for example by asking you to write from the email address you sign in with.
• Turn off reminders: switch them off under Me → Settings → Notifications, or turn off notifications for the app in your system settings.
• Other rights: if the law where you live gives you further rights (such as objecting to or restricting a particular use), you can use them through the same email address. We reply within the time the applicable law sets. You also have the right to complain to your local data protection authority.

9. Children

The service is not directed to children under 13, and we do not knowingly collect their personal information. Where the law sets a higher age, that age applies. If you believe a child has given us personal information without a parent or guardian knowing, contact us and we will delete it.

10. Security

All data travels over HTTPS. The database keeps accounts apart: each account can read and write only its own data. Our staff use the admin tools only as far as running the service requires, and only administrators can see user email addresses. No system can be guaranteed completely secure. If a security incident affects you, we will notify you as the applicable law requires.

11. Cookies and local storage

dl-lang

Set when you switch between 中文 and EN on this site, to remember your choice. Kept for one year.

dl_v

Set only on share link landing pages: a random ID used to count how many different people open a share link. Kept for one year. It contains no identity information, and open records store no IP address or device details.

App and web app

The app and the web app store your sign-in session, settings and a video cache on your device or in your browser, to keep you signed in and load faster. Clearing your browser data removes them from the web app.

We do not use advertising cookies or third-party analytics.

12. Changes to this policy

We may update this policy and will change the effective date at the top of this page when we do. For material changes we will let you know in the app or on this site before they take effect.

13. Contact us

For any question, request or complaint about this policy or your personal information, email hello@dramalingo.ai.