Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect the information you provide directly when using Perapera:

• Email Address: Required to create an account and log in. Perapera does not use passwords — you log in with a one-time verification code sent to your email. When you log in for the first time, an account is created automatically for your email address.
• Learning and Display Settings: Your app language, target and subtitle languages, subtitle style (font size, focus mode, Japanese romaji/furigana/grammar analysis, Chinese pinyin, simplified/traditional characters), echo-mode toggles, and theme. We store these on our servers so your preferences follow you across devices.
• YouTube Video URLs: When you use the download features, the YouTube video URL (or video ID) you choose to download for audio or subtitles, or to look up metadata.
• Purchase Information: If you make an in-app purchase, the purchase data generated by Apple's App Store (transaction IDs, product, purchase and expiry dates) is provided to us by Apple to verify your purchase and grant access.
• Communications: Information you provide when contacting our support team.

1.2 Information We Generate or Process Automatically

To operate the service, we automatically generate or process the following data:

• Verification Records: The one-time codes we send to your email, together with the send time and count (used to prevent abuse). These records expire within minutes.
• Account Metadata: Your account creation date, subscription status and expiry dates, and remaining download quota.
• Downloaded Content: The audio of videos you request, stored so it can be delivered to your device, together with the video's public metadata (title, author, duration) needed to process your request.

1.3 What We Do Not Collect

To be clear about our practices:

• We do not store your saved vocabulary, translation history, bookmarks, or learning progress on our servers — these stay on your device.
• We do not collect device identifiers, usage analytics, crash reports, or location data.
• We do not collect or process text or audio for speech recognition or AI translation on our servers.
• We do not sell your personal information.

2. How We Use Your Information

We use the collected information for the following purposes:

• Authentication and Account Management: To email you verification codes, verify your identity at login, create and manage your account, and keep your session secure.
• Fulfill Your Requests: To process the YouTube videos you ask us to download or look up, deliver the audio and metadata to your device, and power the app's core learning features.
• Sync Your Preferences: To keep your language, subtitle, and display settings consistent across all your devices.
• Subscriptions and Purchases: To verify in-app purchases with Apple, manage your subscription and entitlement status, track your remaining download quota, and restore purchases on new devices.
• Support: To respond to your inquiries and resolve issues you report.
• Security and Abuse Prevention: To protect the service against unauthorized access, spam, and abuse (for example, by rate-limiting verification-code requests).
• Legal Compliance: To meet applicable laws, regulations, and legal processes.

We do not use your personal data to train AI models, and we do not use your data for advertising or profiling.

3. Data Storage and Security

3.1 Data Storage

Your account data is stored on secure, industry-standard servers. Downloaded audio is stored in encrypted cloud object storage (Tencent Cloud COS). We retain your information for as long as your account is active or as needed to provide the service. When you delete your account, we permanently delete your account data and de-identify purchase records, as described in Section 6, unless retention is required by law.

3.2 Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Regular security audits and vulnerability assessments.
• Access controls limiting data access to authorized personnel only.
• Secure software development practices, including code review and testing.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

• With Your Consent: When you explicitly direct us to share information with a third party.
• Service Providers: We share limited data with third-party vendors who help us operate the service, always for the specific purposes listed in Section 8 and never beyond what each action requires: RapidAPI (YouTube audio/video download and metadata), Tencent Cloud COS (storage of downloaded audio), Google (delivery of verification emails), and Apple (in-app purchase verification). Each transmission happens only when you perform the corresponding action — logging in, requesting a download, or making a purchase. These providers are contractually bound to protect your data, use it only for the services we engage them for, and provide a level of protection equivalent to or consistent with this Privacy Policy.
• Legal Requirements: When required by law, court order, or government regulation, or to protect the rights, property, or safety of Perapera, our users, or others.
• Business Transitions: In connection with a merger, acquisition, or sale of assets, we will notify you before your data is transferred and becomes subject to a different privacy policy.

5. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Restriction: Request restriction of processing your data in certain circumstances.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.
• Opt Out: Opt out of non-essential data collection or marketing communications.

To exercise any of these rights, contact us at the email address below. We will respond within the timeframe required by applicable law.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the service. Verification-code records expire within minutes of use. When you delete your account from the app, we permanently delete your account, settings, and entitlements; in-app purchase transaction records are retained in de-identified form (no longer linked to you) to comply with financial and audit requirements. Audio files you downloaded may be removed at any time — contact us if you want them deleted sooner.

7. Children's Privacy

Perapera is not directed at children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information. If you believe a child has provided us with personal data, please contact us immediately.

8. Third-Party Services and Data Recipients

Perapera relies on the following third-party services to provide its core features. For each service, we state what data is transmitted, when, and to whom:

• RapidAPI — YouTube downloading: When you request to download a YouTube video's audio or video, or to look up its metadata, the YouTube video URL/ID you submit is transmitted to RapidAPI's download services, which retrieve the content and its public metadata (title, author, duration, description). This happens only when you make such a request. See RapidAPI's Privacy Policy.
• Tencent Cloud COS — audio storage: The audio of videos you request is uploaded to Tencent Cloud COS object storage (default region: Tokyo) so it can be delivered to your device. See the Tencent Cloud Privacy Policy.
• Google (Gmail SMTP) — verification email: To send you login verification codes, your email address and the code are transmitted through Google's email service. See Google's Privacy Policy.
• Apple — purchases: To verify in-app purchases, your purchase transaction data is exchanged with Apple's App Store servers; Apple also sends us subscription lifecycle notifications (renewals, refunds, expiry) so your access stays accurate. See Apple's Privacy Policy.

All of the above services act as processors on our behalf. They are contractually bound to protect the data they receive, to use it only for the services we engage them for, and to provide a level of protection equivalent to or consistent with this Privacy Policy. They are required by contract not to use the data for their own purposes, including training their own models.

Your control: Data is transmitted to these providers only when you take the corresponding action — logging in (email delivery), requesting a download (YouTube URL), or making a purchase (Apple). You can avoid any of these transmissions simply by not using the related feature, and you can delete your account at any time to remove your data from our servers.

Perapera may also contain links to other third-party websites or services. These third parties have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, where data protection laws may differ. Our infrastructure and third-party services operate in several regions — for example, downloaded audio is stored on Tencent Cloud COS in Tokyo, verification emails are delivered through Google's global mail infrastructure, and RapidAPI's download services may process requests in various locations. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or reliance on adequacy decisions by relevant authorities, and we require each recipient to provide a level of protection equivalent to or consistent with this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you through the app, by email, or by posting a prominent notice. Your continued use of Perapera after the changes take effect constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@perapera.app
• Address: Perapera, Attn: Privacy, [Your Business Address]

We aim to respond to all inquiries within 5 business days.