Privacy Policy

1. Who We Are

2. What Data We Collect

3. Purposes and Legal Basis for Processing

We process your personal data only when we have a lawful basis under GDPR. These include:

• Performance of a Contract: To create and manage your account, provide the Service you request, and process payments.
• Consent: When you sign up for our newsletter or marketing emails, you consent to receive communications. You can withdraw your consent at any time.
• Legitimate Interests: To improve our Service, conduct analytics, prevent fraud, and ensure network and information security.
• Legal Obligations: To comply with applicable laws, regulations, or court orders.

4. How We Use Your Data

We use the collected data for the following purposes:

• Account Management: Creating, administering, and maintaining your account.
• Service Provision: Enabling you to access and use our learning tools, functionalities, and interactive features.
• Customer Support: Responding to inquiries, troubleshooting issues, and providing technical assistance.
• Marketing & Promotions: Sending you newsletters, special offers, and other promotional materials (if you have opted in).
• Analytics & Improvement: Monitoring and analyzing usage trends to improve our Service and user experience.
• Legal Compliance: Fulfilling any legal or regulatory obligations.

5. Retention of Your Data

We retain your personal data only for as long as is necessary for the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Generally:

• Account Data: Retained as long as you maintain an active account.
• Communications: Retained for as long as necessary to address and resolve queries or issues.
• Legal Obligations: Certain information may be retained to comply with legal or accounting requirements (e.g., tax or fraud prevention).

After the applicable retention periods expire, we will securely delete or anonymize your personal data.

6. How We Share Your Data

We do not sell or rent your personal data. We may share your data with:

• Service Providers: Third-party vendors who perform services on our behalf (e.g., payment processors, hosting providers, email service providers). We ensure these parties only process your data under our instructions and in compliance with GDPR.
• Legal Requirements: If required by law or valid legal process, or to protect our rights or the rights of others (e.g., to respond to a court order or government request).
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity, subject to their commitment to use the data consistently with this Privacy Policy.

7. International Data Transfers

If your personal data is transferred outside the European Economic Area (EEA) or Spain to a country that does not provide an adequate level of data protection, we will ensure appropriate safeguards (e.g., Standard Contractual Clauses or other GDPR-approved mechanisms) are in place to protect your personal data and to ensure it is treated securely and in accordance with this Privacy Policy.

8. Your Rights Under GDPR

Under the GDPR and Spanish data protection laws, you have the following rights:

• Access: Request access to personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure ("Right to be Forgotten"): Request deletion of your personal data in certain circumstances.
• Restriction of Processing: Request that we limit processing of your personal data under specific conditions.
• Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format and have it transmitted to another controller, where technically feasible.
• Objection: Object to processing of your personal data based on our legitimate interests or for direct marketing purposes.
• Withdraw Consent: Where we rely on consent to process your personal data, you can withdraw your consent at any time.

To exercise these rights, please contact us at contact@kanjimaster.ai.

9. Cookies and Similar Technologies

KanjiMaster.ai uses cookies and similar technologies to enhance user experience, analyze trends, and administer the website. Cookies are small data files stored on your device.

Types of Cookies:

• Essential Cookies: Required for the operation of our website (e.g., login authentication).
• Analytics Cookies: Help us understand how users interact with our website, so we can improve functionality.
• Preference/Functional Cookies: Remember your settings and preferences.
• Marketing Cookies: Track user activity to show relevant ads (if applicable).

You can choose to disable or block cookies in your browser settings; however, doing so may limit certain functionalities of our Service.

10. Data Security

We implement and maintain reasonable administrative, technical, and physical safeguards to protect the personal data we collect and process. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our Service is intended only for individuals who are at least 18 years old. We do not knowingly collect personal data from minors. If you become aware that a minor has provided us with personal data, please contact us at contact@kanjimaster.ai, and we will take steps to delete such information.

12. Changes to This Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you via email (if you have provided your email address) or by posting a notice on our website. Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of its terms.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at:

Email: contact@kanjimaster.ai

We will respond to your request as soon as reasonably practicable and within the timeframe required by applicable data protection laws.