Privacy policy

Who we are

In short: veki is run from Denmark and follows the EU's data protection rules (GDPR).

veki ("we", "us") makes the veki app, the veki browser extension and the website veki.app (together, "veki"). We are the data controller for the personal data described here. You can reach us at privacy@veki.app.

What we collect

In short: your account details, the cards you make, and basic technical data.

Your account

• Email and password sign-in: your email address and a hashed password. We never store your password itself.
• Google or Facebook sign-in: your name, email address and profile picture, as that service shares them with us. We never see your Google or Facebook password.

Your learning data

• The cards you create: words, meanings, example sentences, tags and notes.
• Audio clips and pictures you capture or upload to your cards.
• Your review history (when you reviewed which card and how you answered) and your settings, such as shortcuts and timer quiz options.
• The words you mark as known or ignored.

Technical data

• Your IP address, browser or app version and the time of each request, kept in short-lived server logs for security and to fix errors.
• Crash reports from the app, if it crashes. These describe the error, not your cards.

Usage counts

• How many cards you made and reviews you did each day, and a few moments that matter for our prices: linking the desktop app, seeing the upgrade offer, opening the checkout, starting or ending a plan. We count these on our own servers from what the app already sends; there are no tracking cookies or third-party analytics. They're deleted with your account.

How we use it

In short: to run veki for you, keep it secure and talk to you about your account.

We don't use your cards, audio or review history for advertising, and we don't train AI models on them.

The desktop app and the extension

In short: what you hear and watch stays on your device unless you choose to save it.

Desktop app

• The app listens to your computer's sound only while you record: ★ R starts a recording and stops it. At any other time nothing is recorded.
• When you stop a recording, it's uploaded to your account. A screen picture (★ S) is taken only of the area you select.
• Keyboard shortcuts are recognised on your device. We don't record or send what you type.

Browser extension

• The extension works on YouTube, iQIYI and nijapanese.com, and on any other site only after you turn it on there yourself (the browser asks you for that one site). On those sites it reads the subtitles of the video you're watching and sends those lines to veki to split them into words, show readings and mark the words you know. It doesn't read other pages or your browsing history.
• We don't store those subtitle lines or your watch history. Only a line you save as a card is kept, together with the video's address if you choose to keep it as the source.
• When you look up a Japanese word, that word is sent to jisho.org for its meaning. When you press 🔊 to hear a word, that word is looked up on Wikimedia Commons for a recording, which is then played. Nothing else about you goes with these lookups. If there is no recording, your computer's own voice says the word.

Who helps us run veki

In short: a few trusted companies process data for us, under contract. We never sell it.

Some of these companies are based in the United States. Where data leaves the EU/EEA, the transfer is covered by the EU–US Data Privacy Framework or the EU's standard contractual clauses.

We may also share data if the law requires it, or with a buyer if veki is ever sold. The buyer would then have to follow this policy.

Cookies

In short: one cookie to keep you signed in. No tracking or advertising cookies.

veki uses a single necessary cookie that keeps you signed in. Your browser also remembers whether you chose light or dark mode. Neither needs consent, which is why there's no cookie banner. We don't use analytics, advertising or social media tracking cookies. If that ever changes, we'll update this policy and ask for your consent first.

How long we keep it

In short: as long as you have an account, and no longer.

• Your account and learning data are kept while your account exists.
• When you delete your account, everything is deleted within 30 days. Copies in our backups disappear within a further 30 days.
• Server logs are normally kept for no more than 30 days.
• Payment records are kept for as long as Danish bookkeeping law requires (currently five years).

Keeping it safe

In short: encrypted connections, hashed passwords and each account's data kept apart.

All traffic to veki is encrypted (HTTPS). Passwords are stored only as secure hashes. Each account's cards live in their own separate database, and your audio and pictures are private files that only your account can open. Only the people running veki can reach the systems behind it, and only when needed to run it. No system is perfectly secure, but if a breach ever affects your data, we'll tell you and the Danish Data Protection Agency as the law requires.

Your rights

In short: you can see, fix, download, limit or delete your data, and complain if we get it wrong.

Under the GDPR you have the right to:

• Access the data we hold about you.
• Correct data that's wrong.
• Delete your data.
• Download your data in a common format (data portability).
• Restrict or object to how we use it.
• Withdraw consent where we rely on it, for example for product news.

Most of this you can do yourself on your account page, including downloading all your cards and review history as one file. For anything else, write to privacy@veki.app and we'll reply within one month. If you're unhappy with how we handle your data, you can complain to the Danish Data Protection Agency (Datatilsynet) or the authority in your own country.

Deleting your data

In short: delete your account in the app, or email us. This includes data from Facebook sign-in.

• On veki.app: go to your account page and choose Delete account. We email you a link; following it deletes your account and everything in it (cards, reviews, audio, pictures) at once, and ends any paid plan. Backups that may still hold it are gone within 30 days.
• By email: write to privacy@veki.app from the address on your account and ask us to delete it.
• If you signed in with Facebook or Google, deleting your veki account also deletes what we received from them. You can also remove veki's access in your Facebook settings (Apps and websites) or your Google account (Third-party connections). That stops future sign-ins but doesn't delete your veki account by itself.

Age limit

In short: you must be at least 13 to use veki.

veki isn't meant for children under 13, and we don't knowingly collect their data. If you're under 18, ask a parent or guardian before signing up. If we learn that an account belongs to a child under 13, we'll delete it.

Changes

In short: if we change this policy in a way that matters, we'll tell you first.

The date at the top shows when this policy last changed. For important changes, we'll notify you by email or in the app before they take effect.

Contact

Questions about privacy: privacy@veki.app. Anything else: support@veki.app.