Onibaba · Learn Japanese letters
Privacy Policy
Who is responsible
Onibaba is made by Film Falanks Nikolai Baalsrud Lundh (sole proprietorship, org. no. 994 072 226), Oslo, Norway. Questions about privacy: onibaba.app@gmail.com.
Without an account
If you don't sign up, everything stays on your device: your progress, settings and the display name you choose. The only thing ever sent is an error report if the app breaks (see below).
With an account
Signing up is optional. It lets your progress follow you to another phone. If you sign up, we store:
- Account details: your email address, and if you sign in with Google or Apple, the basic profile they share (name and email). Apple lets you hide your real email; we then only see the private address Apple gives us. Passwords for email accounts are handled by Firebase Authentication; we never see them.
- Your progress: the same game data that is otherwise kept on your phone: chapters, XP, streaks, trophies, settings, your display name and your daily goal.
We use this only to run your account and sync your progress. We don't use it for advertising, and we don't sell or share it with anyone else. The legal basis is that it's needed to provide the account you sign up for (GDPR art. 6(1)(b)).
Error reports
If the app crashes or something goes wrong, it sends an error report to Firebase Crashlytics so we can fix it. A report contains what went wrong (technical details from the code), which screen you were on, the app version, and your phone's model and Android version, plus a random installation ID that lets us count how many devices an error affects. It does not contain your name, email address, account or progress. The legal basis is our legitimate interest in keeping the app working (GDPR art. 6(1)(f)). Reports are kept for up to 90 days.
Services we use
Accounts and synced progress are stored with Google Firebase (Firebase Authentication, Cloud Firestore and Crashlytics), which processes the data on our behalf. Google may store or process it outside the EU/EEA, including in the USA; such transfers are covered by the EU's Standard Contractual Clauses and the EU–US Data Privacy Framework. See Firebase's privacy information. Apart from the error reports above, the app contains no analytics, advertising or tracking tools. Fonts, pictures and sounds are built into the app, so using it doesn't contact any other service.
How long we keep it
We keep your account and synced progress until you delete your account. Data on your device stays until you delete it in the app or uninstall the app.
Deleting your account and data
You can delete your account at any time:
- In the app: open Settings and tap Delete. Your account and all synced progress are deleted right away.
- By email: write to onibaba.app@gmail.com from the address you signed up with and ask us to delete your account. We'll do it within 30 days and confirm by email.
Deleting removes your account details and all synced progress. We keep nothing afterwards. More on the account deletion page.
Your rights
You have the right to see, correct, delete and receive a copy of your data, and to object to how we use it. Email us and we'll help. If you think we handle your data wrongly, you can complain to the Norwegian Data Protection Authority (Datatilsynet) or the authority where you live.
Children
Onibaba is not made for children under 13, and we don't knowingly collect data from them. If you believe a child under 13 has created an account, contact us and we'll delete it.
Security
Data is sent encrypted (HTTPS) and stored by Google Firebase. Each account can only read and write its own progress.