Oni Dojo 鬼道場

Who is responsible

Oni Dojo is made by Tommy Slettvold (Norway), the data controller under the GDPR. Contact: tommy@slettvold.org.

Without an account

Everything — your progress, settings and recordings — stays on your device. Nothing about you is sent to us. There are no ads, no analytics and no tracking.

On Android phones

Microphone: used only while you press the microphone button, for speaking practice and conversations. Recordings for comparing your pronunciation stay on the phone and are discarded when you leave the screen.
Speech recognition: when you answer out loud, the phone's own speech recognition turns your voice into text. Where the phone supports it this runs on the device; otherwise the phone's recognition service (usually Google) processes the audio under its own privacy terms. Oni Dojo never receives or stores your voice.
Text-to-speech and the daily reminder are handled by the phone itself.
Backups: Android may include the app's local progress in your own Google device backup if you have backups turned on. We never see it.

New lessons on Windows (content updates)

Once a day the Windows app downloads a small, signed list of new lessons and voice clips from our storage at Supabase (Frankfurt, EU). These are plain downloads: no account, ID or progress is sent, only what every internet request carries (your IP address, kept briefly in the server logs for security). You can turn this off in Settings. Legal basis: our legitimate interest in keeping the app up to date (GDPR art. 6(1)(f)).

With an account (optional)

We store your email address, a securely hashed password, the optional name you enter, your access level (free or full) and, only if you turn on cloud sync, a copy of your progress. We use this only to sign you in, give you what you paid for or were given access to, and keep your progress safe. Legal basis: performing our contract with you (GDPR art. 6(1)(b)). We never sell or share it.

Premium (Google Play)

Purchases are made and paid through Google Play; we never see your card details. If you are signed in, the app sends the purchase's Google Play token to our server, which checks it with Google and stores the product, its state and when it ends, linked to your account, so Premium also works on the PC. Without an account, the app sends only the purchase's Google Play token to our server, once after buying and then about once a week, so the server can confirm with Google that the purchase is genuine; nothing is stored and nothing identifies you. Legal basis: performing our contract with you (GDPR art. 6(1)(b)). Cancel or manage a subscription in Google Play → Payments & subscriptions.

Emails we send

When you create an account or ask for a new password, we email you a code or a link. Nothing else: no newsletters and no marketing. These emails are delivered by our processor Resend from its EU region (Ireland), with open and click tracking turned off. Resend is a US company, so the EU Standard Contractual Clauses apply. Legal basis: performing our contract with you (GDPR art. 6(1)(b)).

Where it is stored

With our processor Supabase, in Frankfurt, Germany (EU). All connections are encrypted (HTTPS). Payments, when buying, are handled by the store's own payment provider (Google Play on Android); we never see your card details.

How long

Until you delete your account. Deleting it removes all of the above immediately and permanently.

Delete your account

In the app: Settings → Account → Manage → Delete my account. This deletes your account and everything stored with it at once. If you no longer have the app, email tommy@slettvold.org from the address you signed up with and write "Delete my Oni Dojo account"; it is done within 30 days and we confirm by email. Nothing is kept afterwards, apart from what the law requires for purchases (receipts are kept by the store).

Delete some of your data and keep the account. Email tommy@slettvold.org from the address you signed up with and say what to delete: your name, your online progress copy, or both. It is done within 30 days and we confirm by email. Your email address and access level stay as long as the account exists, because they are needed to sign you in and keep what you paid for.

Your rights

You can access, export, correct and delete your data at any time (Settings → Account → Manage → Delete my account; About → Export my data), and complain to your data protection authority (in Norway: Datatilsynet).

Children

Accounts are for people aged 13 or older. Without an account, the app can be used at any age.