IT Passport Practice
Log inGet started
How we handle your personal data

Privacy Policy

Last updated: 2026-04-26
This is an informational English translation of the Japanese privacy policy. The Japanese version governs in case of any discrepancy.

1. Information we collect

In providing the Service we collect:

  • Account info: email, basic Google profile (name, picture) when using Google sign-in
  • Learning data: answer history, progress, chosen UI language
  • Technical info: IP, cookies, browser/OS info, anonymized page views and Web Vitals via Vercel Analytics
  • Payment info: card numbers etc. are processed directly by Stripe — we never store the card number itself, only the Stripe customer ID and subscription status.

2. How we use it

  • Operate the Service (save progress, generate AI explanations, manage Pro)
  • Respond to your inquiries
  • Improve quality and prevent abuse
  • Comply with legal requirements

3. Third parties

We share data only with the following operational service providers, only as needed:

  • Supabase (US / Tokyo region): database and authentication
  • Stripe (US / Japan): card payment processing
  • Vercel (US): hosting, Analytics, Speed Insights
  • Google AI Gateway / Google Gemini: AI explanation generation — question text and your answer letter are sent; no personally-identifying info is sent

We do not otherwise share personal data with third parties except where required by law or with your consent.

4. Cookies

The Service uses cookies to:

  • Maintain auth sessions (issued by Supabase)
  • Persist UI language preference (NEXT_LOCALE)
  • Provide anonymous analytics via Vercel Analytics

You may disable cookies in your browser; some Service features may stop working as a result.

5. Your rights

You may request, regarding your personal data:

  • Disclosure, correction, addition, or deletion
  • Stop of use or third-party transfer

Contact f.shera.09@gmail.com. After identity verification we will respond in a reasonable timeframe. You can also delete your account from the account page at any time.

6. Retention

Data is retained while your account is active or as required by law for the purposes stated. After an account deletion request we delete data within a reasonable time, except for backups required for operations.

7. Changes

This policy may be revised. Material changes will be announced on the Service.

8. Contact

Reach us at f.shera.09@gmail.com.