Legal

Privacy Policy

Last updated: June 17, 2026

Introduction

Ranggo ("we", "our", or "us") operates the Ranggo website and web application. This Privacy Policy explains how we collect, use, share, and protect your information when you use our service.

We do not sell or rent your personal information.

By using Ranggo, you agree to the collection and use of information as described in this policy.

When you create an account, sign in, or connect a sign-in method, we collect information such as your name, email address, password hash, profile photo, and authentication provider details. If you use Google sign-in, we may also receive the profile information returned by Firebase Authentication, such as your display name, email verification status, and provider identifiers.

Learning and progress data

We store learning data so the app can sync your experience across sessions and devices. This includes:

Challenge history, session results, scores, and timestamps
Progress, mastery, streak, and heatmap data
JLPT level selections, completion state, and session metadata
Connected account records and last-login timestamps

Anonymous sessions and attribution

If you start a challenge before signing in, we may create or store an anonymous session so your progress can be restored later. We may also store attribution values such as session IDs and UTM parameters in your browser until you sign in or clear them.

Support, feedback, and account actions

When you contact us, submit challenge feedback, update your profile, change your password, unlink a connected account, or request account deletion, we collect the information you choose to provide and the records needed to process that request.

Subscription and billing data

If you subscribe to a paid plan, we may receive subscription status, tier information, and provider or transaction identifiers from the relevant payment or billing provider. We do not store full payment card details on our servers.

Device and log data

Our servers automatically receive information such as your IP address, approximate country, request path, status code, and limited request and response body snippets for debugging, security, and service reliability.

How We Use Your Information

To create and maintain your account and sign-in methods
To keep you signed in and secure your session
To save and sync your progress, history, mastery, and streak data
To link anonymous sessions to your account when you sign up or sign in
To respond to support requests and challenge feedback
To send transactional emails such as password resets, account changes, and deletion confirmations
To manage subscriptions, billing, and entitlement checks
To monitor reliability, debug issues, prevent abuse, and improve the service

We do not sell your personal information. We share information only when needed to run the service or when the law requires it.

Authentication providers to support sign-in, such as Firebase Authentication and Google sign-in
Email providers to send transactional messages such as password resets and account notices
Error monitoring and logs to help us detect and fix reliability or security issues
Feedback routing if you submit challenge feedback, which may be forwarded to our internal support channels
Payment or billing providers if you purchase a subscription or if subscription handling is offered through an external checkout flow

We may also disclose information if required to comply with law, respond to lawful requests, protect our users, enforce our terms, or complete a business transfer.

Cookies and Storage

We use session cookies and similar technologies to keep you signed in and to maintain your session. We also use browser storage for anonymous challenge sessions and attribution values such as session IDs and UTM parameters.

You can clear or block cookies and browser storage in your browser settings, but parts of the service may stop working if you do.

Data Retention

We keep account data, progress data, and connected account records while your account is active and for as long as needed to provide the service.

If you delete your account, we deactivate it and may retain some information for legal, security, fraud-prevention, tax, or audit reasons. We may also keep backup copies and logs for a limited time.

Anonymous session data stored in your browser remains there until you clear it or it is replaced by new browser data.

Data Security

We use HTTPS/TLS in transit, access controls on the backend, and token-based authentication to protect your account and data.

No system is perfectly secure. If we learn of a security issue that affects your data, we will investigate and respond as appropriate.

Your Rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Withdraw consent where processing is based on consent
Manage cookies and browser storage through your browser settings
Unlink connected sign-in methods once your account has a password

To exercise these rights, contact us at contact@ranggo.app. We may need to verify your request before we can respond.

Children's Privacy

Ranggo is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will review the request.

Data Processing Location

Our production infrastructure is hosted in Singapore, so your information is generally processed and stored there. If limited access or processing occurs outside Singapore for support, maintenance, or service delivery, we use safeguards intended to protect your information under applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this website or inside the service. Your continued use of Ranggo after changes are posted means you accept the updated policy.

Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:

contact@ranggo.app