Short version: the app doesn’t know who you are.

Effective August 17, 2026 · consent version v2 · contact hello@wakanai.app

The Wakanai app

There are no accounts. The app never learns your name, email, or anything that identifies you as a person, and it never uses advertising identifiers. Your voice and your learning history stay on your iPhone. What leaves the device is limited to three things: content downloads, anonymous usage statistics, and crash reports.

• Lesson downloads come from our content server (illustrations, subtitles, word audio we generate). Episode audio streams from the podcast's own public feed, the same way any podcast app plays it. Like every download on the internet, these requests carry your IP address to the server involved. Neither we nor the podcast host receive any account or identity, because none exist.
• Your voice never leaves your iPhone. Speech recognition (Japanese and English) runs entirely on-device using Apple's speech frameworks. Recordings are processed locally for grading, overwritten by the next attempt, and are not uploaded anywhere, by anyone, ever.
• Your learning history stays local. Review schedules, scores, and progress live in the app's private on-device database. Deleting the app deletes them.
• Anonymous usage statistics go to PostHog, hosted in the EU. These are event counts, such as "a session was completed", "a download failed", and "a word-test answer was correct", together with the device model, iOS version, and a random per-device identifier (Apple's vendor ID, which resets if you delete the app). Download and playback events note which episode was involved, so we can spot a broken one. They never include which words you studied, anything you said or typed, or an advertising ID, and they are never sold or used to track you across other apps.
• Crash reports go to Sentry, hosted in the EU. If the app crashes or a download breaks, a technical report is sent: the error, device model, iOS version, the same random device identifier, and the recent in-app steps that led there (the same anonymous events as above). No screenshots, no recordings, no content of what you were studying.
• Conversations (paid feature, when enabled): your transcribed words and your known-word list are sent to our server to generate Toro's replies; your audio never leaves the iPhone. To give Toro his voice, the text of his replies (never your words, never any audio of you) is sent to our speech-synthesis provider (Aivis Cloud, hosted in Japan), and common reply clips are cached on our servers. Conversation text is retained for up to 30 days, tied to a hashed subscription identifier (not your name or Apple ID), for two purposes only: investigating abuse and violations of the terms of use, and reviewing conversation quality to improve how Toro replies. It is then deleted automatically. It is never used for advertising, never sold, and never used to train AI models. To request earlier deletion, email hello@wakanai.app.

The beta waitlist form (this website)The signup form (this website)

If you join the waitlist, we store exactly what the form discloses, in our own database, and use it for one purpose: running the beta.If you use the Android-interest form, we store exactly what the form discloses, in our own database, and use it for one purpose: telling you if Wakanai comes to Android.

• Purpose: sending your TestFlight invite, prioritizing invite waves, and understanding where signups come from.one email if Wakanai ever comes to Android, and understanding where signups come from. Nothing else.
• Storage: a private Postgres database (Neon) behind our signup API (Cloudflare). Access is limited to the developer.
• No selling, no sharing: your data is never sold, rented, or shared with third parties. It is not used for advertising.
• Retention & deletion: kept only while the beta program runs.kept only while the signup list is live. Email hello@wakanai.app (or reply to any of our emails) and we'll delete your row promptly.
• Cookies: none. The page briefly remembers campaign parameters in your browser's sessionStorage (cleared when the tab closes) so a signup at the bottom of the page still credits the right campaign; that data goes nowhere unless you submit the form.

Changes

If what we collect ever changes, the form's disclosure and this page change with it, and the consent version is bumped. Signups are always tagged with the disclosure in force when they were made.