Bright ("the App") is an English-learning app aligned with Japan's National Common Test for University Admissions. To create an account we store your email and password, and to keep your learning history available across sessions we store your answer logs and scores on the provider's server. The App contains no advertising networks, no analytics, and does not send any user data to third-party services.

1. Information We Collect

We collect only what is necessary to provide the service:

• Account information: email address, password (stored only as a one-way hash; we never store the plaintext), and an optional display name.
• Learning profile: CEFR level, learning goals (text and target date), and daily problem target.
• Answer logs: the choices you select in listening, reading, and timed-reading exercises, whether they were correct, and the time you spent.
• Security information: IP address, timestamp, and result of login attempts, and hashed refresh tokens. Used solely to detect and prevent unauthorized access.

2. Purpose of Use

• Providing the App and displaying your continuing learning progress
• Grading the correctness of your answers and generating study statistics
• Authentication, session continuity, and unauthorized-access detection
• Internal diagnostics for quality improvement

3. Disclosure and Sharing to Third Parties

The App does not sell, provide, or share any personal data collected from users with third parties. It contains no advertising networks, no analytics services (access analytics, crash analytics, etc.), and does not send user input data to any generative AI service. We may respond to lawful disclosure requests strictly within the scope of applicable law.

4. Listening Audio Materials

All audio played in listening exercises is pre-generated on the provider's side and served from files stored on our own server. Your interactions and personal data are not transmitted to any external speech-synthesis service.

5. Storage and Security

• Communication between the App and the provider's server is encrypted via HTTPS.
• Passwords are stored as bcrypt one-way hashes; no one — including the provider — can recover the plaintext.
• Server access is restricted by credentials and limited to personnel necessary for operating the service.

6. Retention and Account Deletion

When a user performs the in-app account-deletion action, their account information and the associated learning history are removed from the server. Note that some information may remain for up to 90 days for fraud-investigation or backup purposes. Deletion requests submitted via the contact form will also be honored.

7. Device Permissions

The App may request the following device permissions as needed. These are used only for the feature in question and not for any other purpose.

• Photo library: used only when you choose to set a profile avatar. The selected image is stored only on your device and is not transmitted to the server.

8. Children's Privacy

The App is not intended for standalone use by children under 13. If we become aware that personal information of a child under 13 has been provided without parental consent, we will delete it promptly.

9. Changes to This Policy

This policy may be revised for feature changes or legal compliance. In future updates, when we add features that rely on generative AI (such as writing and speaking scoring), this policy will be updated to reflect those changes. For significant changes, we will update the "Last updated" date on this page and post a notice in the App where appropriate.

10. Contact

For questions about this policy or the App, please contact us via the Prodivant contact form.