app privacy policy

last updated: 15 October 2026

yoji is operated by Apostol LLC. this policy covers the yoji app on iOS and Android. the yojishop.com store has its own policy.

what we collect

your email address, if you sign in with email. we use it to send your one-time sign-in code and to recognize you when you come back. nothing else.

an identifier from Apple, if you sign in with Apple. if you choose Hide My Email, we only ever see Apple's relay address, never your real one.

your Google account's email address and an identifier from Google, if you sign in with Google. we use them the same way as an email sign in: to recognize you when you come back, and to connect your account if you also sign in another way with the same address.

your quiz activity: which quizzes you opened, your scores, and when you submitted them. this is what makes streaks and stats work.

which questions you got wrong. when you miss a question on your first try at a daily quiz, we save the grammar point or word it tested and count how many times you have missed it. that builds your "grammar you keep missing" list. we also save the question itself, exactly as you saw it, so it can come back to you for review. for reading, we note the passages you missed so one can come back later for practice.

clearing an entry hides it from your list. it does not delete it. we keep the record so the count stays right if you miss it again. all of it is erased when you delete your account.

your time zone, so the daily quiz changes at midnight where you are instead of somewhere else.

your subscription status, if you subscribe.

anything you write in the feedback field, along with the level you were on and the version of the app, because a message without those is usually impossible to act on. nothing is collected unless you type it and tap send.

error reports when something breaks on our servers. these can include your account identifier, so we can tell whether a problem hit one person or everyone.

what we don't collect

we do not collect your name, location, contacts, photos, or anything from other apps. we do not use advertising identifiers. there is no analytics or tracking software in the app of any kind.

we do not track you across other companies' apps or websites, and we never sell or share your data with data brokers or advertisers.

what stays on your phone

downloaded quizzes, the word of the day and your reminder settings live on your device and are never uploaded. the app also keeps a copy of your account so it works without a connection: its identifier, the email or sign-in method it uses, your subscription status, and the dates of the quizzes you have taken, which is how your streak can update offline. it is a copy of what our servers already hold, nothing is added to it on the phone, and it is erased when you sign out. the list of every yoji is kept even after you sign out, because it is the same for everyone and says nothing about you. a quiz you answer without a connection waits on your phone until it can be sent, and then it is sent to your account like any other. if you sign out first, it keeps waiting, and it is sent when you sign back in to the same account. if a different account signs in on that phone, it is deleted without being sent. your sign-in token is held in the iOS Keychain or Android Keystore. daily reminders are scheduled by your phone, so we are not told whether you received one or opened it.

who else sees it

• Resend delivers sign-in code emails.
• Railway hosts our servers and database.
• RevenueCat, Apple and Google handle subscriptions, if you subscribe. we never see your payment details.

that is the complete list. we do not sell your data.

each one receives only what its job needs, and each is bound by its own published privacy terms to protect it at least as well as this policy does. none of them may use your data for their own purposes.

what that means in practice differs by service. Railway stores everything described above, because our database runs there. Resend receives your email address and the message being sent to you, and nothing about your quizzes. RevenueCat, Apple and Google receive your subscription status, and nothing about your quizzes.

deleting your account

you can delete your account from the account screen at any time. if you can't open the app, email support@yojishop.com from the address on your account and we will delete it for you. the steps are at yojishop.com/pages/delete-account.

deletion is reversible for 7 days. after that everything is erased for good: your email, your sign-in identifiers, your quiz history, your record of which questions you missed (including the questions themselves and anything you cleared), which quizzes you opened, and your account record. anything you sent us through the feedback field is kept, with your account removed from it, for the same reason error reports are: a note about a broken question is still worth fixing after the person who reported it has gone, and once your account is off it the note names nobody. if you had subscribed to our emails, that address is removed too rather than kept on a suppression list. nothing is kept in a form that can be traced back to you.

error reports are kept, because they are how we find bugs, but your account identifier is stripped out so they no longer point at anybody.

backups are the one exception, and they expire. we take encrypted backups so that a hardware failure or a mistake on our side cannot lose everybody's history. a backup taken before you deleted your account still contains it, and those are kept for up to 90 days before they expire on their own. we never open a backup to look something up. the only reason one is ever restored is to recover from a disaster, and if that happens we re-apply every deletion that was requested after the point we restored from, so nothing you asked us to erase comes back.

what survives is anonymous: counts of how often each answer option is chosen across everyone, with no link to any person. these cannot identify you and are not deleted.

deleting your account does not cancel a subscription. subscriptions are billed by Apple or Google and have to be cancelled in their settings.

how long we keep things

your account and your quiz history stay for as long as your account does. you delete them by deleting your account.

two things go on their own timer instead, because they are about how the app is working rather than about you: error reports, and the record of which quiz you opened on which day. both are deleted after 90 days, whether or not you ever ask.

what survives past that is anonymous: counts of how often each answer option is chosen across everyone, with no link to any person.

your rights

you can ask for a copy of your data, ask us to correct it, or delete it outright. deletion is in the app, or by email if you can't open it. for anything else, write to support@yojishop.com.

if you are in the EEA or UK, our lawful basis is performing our contract with you, which means running your account, and our legitimate interest in keeping the service working. if you are in California, we do not sell or share personal information as the CCPA defines those terms.

children

yoji is not directed at children under 13 and we do not knowingly collect their data.

changes

if this policy changes in a way that matters, we will say so in the app before the change takes effect.

contact

support@yojishop.com