Privacy policy
This policy explains how Joseph Tan (the operator of Suwa, “we” or “us”) handles information when you use the Suwa iPhone and iPad app and these Suwa support pages. Contact j.tan2231@gmail.com with privacy questions or requests.
Information we handle
- Account and sign-in information. Sign in with Apple provides an Apple account identifier and may provide your name and email address, including a private relay address if you choose Hide My Email. Suwa creates its own account identifier and stores account dates, sign-in status, session records, and the protected Apple authorization information needed to manage sign-in and account deletion.
- Submitted study content. For Suwa Plus translation feedback, we store your submitted English translation, its associated daily challenge, submission dates and status, and generated scores and explanations, linked to your Suwa account.
- Subscription information. Apple provides transaction identifiers, product identifiers, subscription status, renewal and expiration information, and an account association token. We use these to verify access and process subscription updates. Suwa does not receive your full payment card details.
- Support correspondence. If you email us, we receive your email address, message, and any attachments or other information you choose to include. We use that information to respond and resolve your request.
- Operational information. Railway’s HTTP logs may include your IP address, User-Agent, request path, request ID, timestamp, HTTP status, and response timing. These logs and service-error records are used to operate, secure, and troubleshoot Suwa. Railway manages their retention under its provider practices; see Railway’s logging documentation. Submission-grading logs omit your attempted translation and feedback; diagnostics for shared daily answer keys may include the shared Japanese sentence and generated reference material.
Information kept on your device
Free translation completions, vocabulary quiz answers and progress, and Notepad dictionary entries are stored locally on your device. Completing a free translation does not send that answer to Suwa’s grading service. If you upgrade and submit that answer for Plus feedback, it becomes a server submission as described above. Dictionary lookups send the selected Japanese lookup terms to Suwa’s server.
Suwa stores its session credentials in Apple’s Keychain. Local study records are not a cloud synchronization or backup service.
How we use information
We use information to sign you in, provide daily study activities and translation feedback, save submitted results, verify subscriptions, respond to support and privacy requests, secure the service, and carry out account deletion. Suwa has no advertising or analytics SDKs and does not use your information for cross-app advertising tracking.
AI processing by OpenAI
When you submit a translation for Suwa Plus feedback, Suwa sends your attempted English translation, the Japanese source sentence, and the shared answer key to OpenAI’s API. The response supplies rubric scores, explanations, and a summary. Suwa also uses OpenAI to prepare shared reference material. AI output can contain errors.
Your permission comes first. The Allow OpenAI feedback control starts off for each account on a device. Suwa asks you to enable it before uploading a translation for feedback. Permission also covers today’s saved translation when you gain Plus access and allow it to be submitted. You can turn permission off in Account → AI feedback to stop future uploads from that device. Turning it off does not recall requests already sent, stop processing already queued on the server, or delete previously saved feedback.
Suwa does not append your name, email address, Apple credentials, Suwa account identifier, or session token to grading requests. Anything you type into a translation can still be included, so avoid entering unrelated personal or sensitive information.
Requests disable saved API response storage. This does not eliminate all provider retention: OpenAI’s published API controls describe abuse-monitoring logs, caching, and other exceptions. Its default policy does not use API data for model training unless the API customer opts in. See OpenAI’s API data controls.
You can use free daily activities without submitting an answer for AI grading.
Services that process information
- Apple provides Sign in with Apple, App Store purchases, subscription management, and device security services. See Apple’s privacy information.
- Railway hosts Suwa’s backend and database. Account records, submitted translations and feedback, and subscription records are processed there. See Railway’s privacy policy.
- OpenAI processes the grading and reference-material requests described above.
- GitHub Pages hosts these public web pages and processes website connection and request information. These Suwa pages contain no analytics scripts, advertising scripts, sign-in forms, or cookies set by Suwa. See GitHub’s privacy statement.
- Email services process support correspondence when you contact us by email.
We do not sell your personal information or share it for targeted advertising. We may disclose information when required by law or when necessary to protect the service, its users, or others against fraud, abuse, or security threats.
Retention and account deletion
Account information and submitted translations are kept while your account exists. To start deletion, open Account → Delete account in Suwa and confirm. If you cannot access your account, contact support.
- When deletion begins, Suwa invalidates sessions, disables account access, and clears your name and email address from the active account records.
- After Apple authorization is revoked, Suwa removes the account, Apple identity and authorization records, and submitted translations and feedback from its live database. If revocation is temporarily unavailable, the account stays inaccessible and the server retries cleanup.
- A security record remains temporarily: a hash of the Apple account identifier and revocation time is scheduled for removal after 30 days to prevent stale sign-in authorizations from recreating a deleted account.
- Subscription records remain after deletion: transaction identifiers, subscription state and dates, the account association token, and billing notification records are retained to process purchase updates and prevent purchases from being reassigned incorrectly. The link to the deleted account record is removed. These billing records currently have no automatic expiry.
Deleting your Suwa account does not cancel an Apple subscription. Cancel separately in Apple’s subscription settings if you do not want renewal.
Account deletion removes local saved translation attempts and vocabulary quiz records on the device making the request. Notepad entries are device-local and can be removed individually; account deletion does not erase every local note or records on other devices.
Deletion from the live database does not guarantee immediate erasure from hosting backups, operational logs, email systems, or copies held by providers. Those systems follow their applicable retention practices. We do not promise a specific backup or log deletion deadline. Provider retention may also apply to AI requests already sent before deletion.
We keep support correspondence needed to handle the request and related follow-up. Contact us if you want to request deletion of correspondence or other information.
Your choices and requests
You can choose Apple’s Hide My Email option, use free study activities without AI grading, turn off Allow OpenAI feedback in Account, manage or cancel subscriptions through Apple, and delete your Suwa account in the app. You may also email j.tan2231@gmail.com to request access, correction, a copy, or deletion of personal information. We may verify ownership before acting and will handle requests subject to applicable requirements and permitted exceptions.
Parents and guardians with questions about a child’s information can use the same contact address.
Security
Suwa uses HTTPS for app-to-server communication, protected sign-in tokens, and device Keychain storage for session credentials. No method of transmission or storage is completely secure.
Changes and contact
We will update this page when our practices change and revise the date above. For questions about this policy, contact Joseph Tan at j.tan2231@gmail.com.