Privacy Policy

Data controller: Akaisora. For any privacy question or request: [TO BE FILLED IN].

• Account: your e-mail address, whether it is verified, your Google account id if you sign in with Google, a one-way hash of your password if you sign up with e-mail (Argon2id; the password itself is never stored), your credit balance and sign-up date.
• Pages you send for translation: the images of the chapter you open in the in-app browser, the translated images and the text of the bubbles.
• Series data: series title, language settings, the characters-and-terms glossary, short summaries of earlier pages and any instructions you write for the series.
• Credit transactions: credits given, spent and refunded; the Google Play order number once purchases exist.
• Feedback and page reports: the text you write, the category or reason you pick, the app version, device model and Android version.
• Technical logs: the IP address, path, time, result and app/device information of each request to our server.
• Abuse-prevention records: the e-mail address of failed sign-in attempts; the IP address and time of sign-up and code e-mail requests.
• Verification codes: a keyed hash of the codes we e-mail you (the code itself is never stored).

We do not collect location, contacts, photo gallery, microphone or camera data; the app asks for no media or storage permission. No advertising id is used.

• Creating your account, managing your session and verifying you: performance of the contract.
• Translating chapters, showing the result and saving it on your device; keeping names consistent across a series: performance of the contract.
• Recording credits, refunds and purchases: performance of the contract and legal obligations.
• Keeping the service secure, preventing abuse and fraud, finding bugs: legitimate interest.
• Reviewing your feedback and page reports: legitimate interest.

The data is collected electronically, from what you enter and what the app sends while you use it.

Your data is never sold and never used for advertising. It goes only to these service providers, to run the service:

• Google (Gemini, Vertex AI): the page images to translate and the series context (glossary, summaries, instructions), under paid-service terms.
• Vercel AI Gateway and the models reached through it: in "Fast" quality, if the first model does not answer, the same data goes to backup models.
• Amazon Web Services: server, database and logs (Sweden, Stockholm region; access logs in a US region) and sending verification e-mails (Amazon SES).
• Sign in with Google: if you use it, the e-mail address Google verified and your account id.
• Authorities, only where the law requires it.

These providers' servers are outside Türkiye, so your data is transferred abroad. Sites you open in the in-app browser (such as Naver Webtoon) connect to your browser directly; their own privacy policies apply.

• Chapter pages and translated images: on the server for at most 24 hours; 6 hours once the app has saved the chapter on your device. Then they are deleted. Single-page translation stores no image.
• Account, series data, feedback and page reports: until your account is deleted.
• Credit transactions: also after the account is deleted, as accounting records that can't be linked to you (no e-mail or id).
• Technical logs: at most 30 days. Abuse-prevention records: 1 day. Verification codes: valid for 10 minutes, deleted with the account.
• Unverified sign-ups: deleted if the e-mail address isn't verified within 7 days.
• A keyed one-way hash of a deleted account's e-mail address: 1 year (so the same address gets no second sign-up bonus).
• Server disk backups: 7 days.

Translated chapters are kept in the app's own storage or a folder you pick, until you delete them or the size limit you set is reached. Your session token is stored encrypted with a key in the device's secure key store. Uninstalling the app deletes the data in its own storage; chapters in a folder you picked stay.

Every connection between the app and the server is encrypted with HTTPS. Passwords and codes are stored only as one-way hashes. The server disk is encrypted, the database is reachable only from inside the server, and access is limited to authorised people. Failed sign-ins and bulk sign-ups are rate limited.

You can ask whether we process your data and get information about it, learn the purpose and whether the data is used for it, learn who receives it in Türkiye or abroad, have it corrected, have it deleted and those recipients told, object to a result against you that comes only from automated analysis, and claim compensation for damage from unlawful processing. Depending on where you live, you may also have the right to data portability, to restrict processing and to complain to your data protection authority.

Send requests to [TO BE FILLED IN] from your account's e-mail address. We answer within 30 days.

Delete your account in the app (Account → Delete account) or on the web page. The account closes at once and is deleted for good, with its data, after 7 days; signing in and confirming within that time cancels it. What remains is listed in section 5.

If this policy changes, the new version is published at this address with a new date. Important changes are also announced in the app or by e-mail.