Privacy notice

Supabase processes your account identifier, email address, authentication session, and related security metadata so you can open Isori, securely use account-gated AI features, and synchronize supported data. If you choose Continue with Google, Google confirms your identity. Resend delivers account email. Isori does not sell personal information.

Your SRS history, settings, imported learning state, and other study data are primarily stored in your browser using local storage and IndexedDB. While your account session is active, selected data is synchronized to Supabase so it can be restored or used across devices. Integration secrets are excluded from ordinary sync.

This local-first design lets already-downloaded study features keep working during connectivity loss. It does not create an anonymous mode: signing out locks the application on that device while retaining its account-owned cache for a later sign-in.

Books, transcripts, images, PDFs, audio, URLs, annotations, and generated study material may be stored locally. Content is sent to a remote service only when you choose a feature that requires upload, cloud storage, transcription, analysis, synchronization, or AI processing. Avoid importing content you lack permission to use.

Imported personal material and your voice recordings can be especially sensitive. They stay on the device during local use, but leave the device when you invoke remote AI, transcription, cloud sync, sharing, or another clearly networked feature.

When you explicitly mine a sentence or subtitle, Isori stores its text, source position, and linked vocabulary as private study data. The YouTube extension can also capture up to 15 seconds of audio rendered by your browser and one still image, but only after you separately enable media capture in Watch-along. If capture is unavailable, the card is saved without media.

The extension temporarily keeps unacknowledged captures on your device until the same signed-in Isori account durably imports them. Isori then stores media locally for playback and transfers it directly to private, per-account Cloudflare R2 storage using a short-lived authorized URL. Supabase authenticates the request and records account-level usage, but the media is not public, searchable, shared, or deduplicated with another user's copy.

When invoked, chat prompts, relevant excerpts, responses, generated content, audio transcription, and speech go through Isori's server and OpenRouter to the company behind the model in use (listed under Service providers). Chat uses the model you choose; grading, caption readings, speech and transcription use models Isori picks. Your OpenRouter key is sent to Isori's server, stored encrypted, and never returned to the browser. Provider credentials are not part of cloud study-data sync.

WaniKani and JPDB credentials are cached on the signed-in device because the browser calls those services directly, and can also be stored encrypted through Isori's credential service for use on your devices. AnkiConnect is contacted locally on your computer. Integration metadata such as enabled service names, sync times, item identifiers, and failures may be stored for sync and diagnostics.

The browser extension reads arbitrary active-page text only after you invoke Score or Open in reader; it runs automatically on YouTube and isori.space. Scoring and dictionary lookup are local. If you sign in, an extension session, compact vocabulary snapshot, private resume pointers, explicit word actions, and mined-card handoffs can use Supabase or the private media flow described above. Optional Community catalog contribution is off by default; if enabled, it sends a URL, title, and unordered vocabulary counts, not page or transcript text.

Isori Companion uses information handled through browser permissions only to provide or improve its single purpose: helping you assess and study Japanese content using your Isori learning state. It does not use or transfer that information for personalized advertising, retargeting, creditworthiness, or sale to data brokers.

Extension data is transferred only when needed to provide a feature you choose, to maintain security, to comply with law, or as part of a merger or acquisition subject to this notice. No person reads page text, captions, authentication data, or private study data except with your specific consent for support, when necessary for security, when required by law, or after the data has been aggregated and anonymized for internal operations.

• Cloudflare delivers the app and dictionary files and privately stores the media of cards you mine.
• Supabase runs sign-in, your account, synced study data and Isori’s server.
• Google confirms who you are when you choose Continue with Google.
• Resend sends sign-in and account email.
• OpenRouter passes AI requests, using your own key, to the company behind the model in use: Anthropic (Claude Haiku) for most grading, sentence building, grammar review and page reading; OpenAI for caption readings and transcription; and the maker of the model you choose for everything else.
• Sentry receives error reports with personal details removed.

Payments are off during the alpha.

When Sentry is enabled, Isori sends technical error, release, environment, browser, and coarse device information after filtering sensitive fields. Reports are designed not to contain credentials, email addresses, prompts, transcripts, imported text, audio, or study answers. Diagnostics copied by you are previewed and contain configuration state rather than study content or tokens.

Device data remains until you clear it, the browser removes it, or you uninstall the app. Cloud account data remains while the account exists and for limited backup, security, or legal periods after deletion. Private media that is no longer referenced by any synced mined card may be removed after a 30-day cleanup grace period. You can export study data from Data Management, including a mined-card bundle containing locally present media. Clearing device data is separate from permanently deleting an account. Account deletion removes account-linked database records and private mined media from Cloudflare R2, plus public contributions where safe; non-identifying shared catalog facts already incorporated into a canonical work or dictionary result may remain without your identity or private source material. Other devices can retain offline copies until opened or cleared.

You can leave optional Community contribution off, sign out of or uninstall the extension, export your study data, clear a device copy, and delete your cloud account. You may also contact support@isori.space to ask what account-linked personal information Isori holds, request a correction, withdraw consent for optional processing, or raise a privacy complaint. Isori cannot provide the application when processing required for authentication and account-gated services is unavailable.

If payments are later enabled, Stripe would process payment and billing details; Isori would not store full card numbers. Isori uses access controls, encryption in transit, and scoped server credentials, but no internet service can promise absolute security. Providers may process data in countries other than yours under their own safeguards.

Isori is operated by Brett Young, an independent developer in Canada, who is the controller of the personal data described above. Contact support@isori.space with privacy questions, access or export requests, or deletion problems. Material changes will update the revision date. This practical disclosure has not been represented as legal advice or as reviewed by counsel.