Privacy Policy

Last updated: July 16, 2026

This policy describes how the Tori mobile app (“Tori”, “we”, “us”) handles your data. Tori is built and operated by Lehi Thomas as an individual developer.

1. What we collect

You create an account by signing in with Apple or Google. We store:

• The email address shared by your Apple or Google account.
• Your name, if the provider shares one.

We never see or store a password — authentication is handled entirely by Apple or Google.

When you use Tori without signing up, the app still creates an anonymous account on our backend so your practice content syncs across app launches. That account is identified only by a random ID; we don’t collect a name or email for it.

While you use the app, we store:

• The Japanese practice content you create or accept into your bank: islands, sentences, vocabulary, spaced-repetition cards, and drill session history (which days you practiced, for how long, and a few per-card stats).
• Your in-app preferences: target Japanese level, mode, preferred inference backend, daily goal minutes, notification preferences.

When you record audio for transcription or pronunciation feedback, we process the audio as described in the next section.

2. Voice and cloud inference

Tori has two inference backends:

• On-device. When selected, all audio and translation runs locally on your phone using bundled AI models. Nothing leaves the device.

• Cloud (default for new accounts). When selected, the app sends the audio bytes to our Supabase edge function, which forwards them to Google Gemini for transcription and to Google Gemini (and Anthropic Claude as a silent backup when Gemini errors) for chat responses.

  Along with your message we send a little context so the tutor can personalize the conversation: your level and mode, your first name (if your Apple/Google account shared one), and up to 8 recently studied words from your bank. We also send up to 5 recent corrections from your past sessions — these are your own past mistakes and how they were corrected, which the tutor uses to reinforce the right form when the moment fits.

  Our edge function does not store the audio. Google’s and Anthropic’s upstream data-use policies apply to the bytes once they reach those services — see Google Gemini’s data policy and Anthropic’s privacy policy.

You can switch backends any time from Settings → Inference engine. The on-device backend requires a one-time ~2.9 GB model download.

3. Third parties

We rely on these services to operate Tori:

• Supabase — authentication, database hosting, and the cloud inference edge function.
• Google Gemini API — cloud transcription and chat inference.
• Anthropic API — fallback chat inference when Gemini errors.
• Expo / Expo Application Services (EAS) — app build, update delivery, and crash-free runtime infrastructure.
• Apple App Store / Google Play Store — distribution.
• RevenueCat — in-app purchase and subscription processing. Sees a random app-user ID and purchase receipts, never your practice content.
• Sentry — crash reports and error telemetry, used to diagnose and fix bugs.

We do not currently use any analytics or advertising SDKs and do not share your practice content with third parties for marketing.

4. Children

Tori is not intended for children under 13 and we don’t knowingly collect personal data from them. Signup requires you to confirm that you are at least 13 years old. If you believe a child under 13 has created an account, email us and we will delete it.

5. How long we keep your data

Your account and content stay in our systems until you delete them.

• Anonymous accounts — automatically deleted 30 days after the account last opened the app, along with all attached practice content.
• Permanent accounts — kept until you delete the account from Settings → Account → Delete account, which permanently removes your auth row and all attached data via cascading deletes.

6. Your rights

• Delete your account. Available in-app under Settings → Account → Delete account. Irreversible. Removes your auth record and all practice content. The local copy on your device is wiped as part of the same action.
• Export your data. Email lehithomas25@gmail.com from the address tied to your account. We will respond with a machine-readable export within 30 days.
• Correct your data. Same email; we will correct or remove the flagged data within 30 days.

If you are in the EU or UK, GDPR also gives you a right to lodge a complaint with your local supervisory authority.

7. Changes to this policy

We may update this policy from time to time. When the update is material, we will notify you in the app on next launch. The “Last updated” date at the top of this page always reflects the current version.

8. Contact

Lehi Thomas lehithomas25@gmail.com