Skip to content
Log in

Privacy Policy

Last updated: October 8, 2026

This Privacy Policy explains what information Yomit.ai ("we", "us") collects when you use https://www.yomit.ai and its API (together, the "Service"), how we use it, who we share it with, and the choices you have. Yomit.ai is a Japanese dictionary and study toolkit; most of it can be used without an account, and we collect only what is needed to run the features you use.

The short version

Information we collect

Account information. When you register we collect your name, your e-mail address (which is also your username), and a password, which we store only as a salted hash. If you enable 2-factor authentication we store the secret that your authenticator app uses, encrypted. You can change your display name at any time on the My Account page.

Content you give us to process. Dictionary searches, text pasted into the Reading Assistant, Listening Practice, or Writing Practice, and pictures given to the Image Assistant are processed to produce the result you asked for. Searches and pasted text are not saved to your account. Uploaded, photographed, or pasted images are held in temporary storage only for as long as it takes to read the text in them and are then deleted; only the recognised text is returned to your browser. Audio generated by Listening Practice and PDF practice sheets are generated on request and are not kept in your account.

Content you store with us. On the Bunko and Sensei plans, the books, pages, and notes you create in My Notes, including notes attached to words, kanji, and grammar points, are stored in your account until you delete them or your account is deleted. Mock tests you generate on the JLPT Practice page, the answers you give, and your scores are stored so that you can resume a test, retake it, and see your progress over time. We also count the writing practice pages and mock tests you generate each billing period so that we can apply your plan's allowance.

Payment information. When you choose a paid plan, your card number, verification code, and expiry date are entered into a form provided by our payment processor, Stripe, and are sent directly from your browser to Stripe. We never see or store your full card number. We keep the card brand, the last four digits, the expiry month and year, your billing name and address, the amount and date of each payment, any promotional code you used, and a Stripe customer and payment identifier so that we can renew your plan each month, show you your payment history and receipts, and handle refunds, disputes, and failed payments. See our Security page for more about how payments are protected.

AI usage records. Each time an AI feature is used we record which feature it was, which plan you were on, which model was used, and how many tokens the request and response used, so that we can apply your monthly allowance and show you your usage on the My Account and Plans & Pricing pages. These records do not contain the text, image, or notes that were sent.

Messages you send us. If you contact us through the Contact Us form, the Login Trouble form, or by e-mail, we keep your message and our reply so that we can help you and refer back to the conversation.

Information collected automatically. Like most websites, our servers record the IP address, browser type, operating system, referring page, pages requested, and date and time of each request in log files, which we use for security, troubleshooting, and capacity planning. With your consent (see Cookies below) we also use Google Analytics to understand which features are used and how visitors find the site.

How we use your information

AI features and your content

The AI features (AI word and sentence explanations, AI vision in the Image Assistant, the natural AI voice in Listening Practice, and the AI tools in My Notes) are provided through the OpenAI API. They are only available on paid plans and only when you turn the AI switch in the header on. With the switch off, nothing is sent to an AI provider: the standard dictionary, text recognition engine, and voice all run on our own servers.

When you ask for an AI result we send our AI provider only what is needed to answer that request: the word and surrounding sentence for an explanation, the picture for AI vision, the text to be spoken for the AI voice, and the saved notes (up to a limit) plus your question for the My Notes AI tools. Your name, e-mail address, and account details are not included. Under our provider's API terms, data sent through the API is not used to train their models, and it is retained by them only for a limited period for abuse monitoring. We do not use your content to train AI models either.

The questions in JLPT mock tests are prepared in advance; your answers are scored on our servers and are not sent to an AI provider.

Who we share information with

We do not sell, rent, or trade your personal information. We share it only with the service providers we need to run the Service, each of which may use it only to provide their service to us:

We may also disclose information when the law requires it, to respond to a subpoena, court order, or other lawful request, to enforce our Terms of Service, or to protect the rights, property, or safety of Yomit.ai, our users, or others. If Yomit.ai is ever acquired or merged with another organisation, your information may be transferred to the new owner, who will remain bound by this policy until it is changed in the way described below.

Cookies and browser storage

When you first visit we ask which kinds of cookies you are happy for us to use, and your answer is remembered for a year. To change it, delete this site's cookies in your browser and you will be asked again on your next visit. The categories are:

Because we honour the choices you make in the cookie dialog, we do not separately respond to "Do Not Track" signals from your browser.

How long we keep information

Your rights and choices

You can see and change your name on the My Account page, change your password and manage 2-factor authentication on the Password & Security page, see your payment history on the Payment History page, and edit or delete any note, book, or page in My Notes. On the Sensei plan you can export any book to PDF, Word, or Excel at any time.

Wherever you live, you can ask us to:

To make a request, e-mail privacy@yomit.ai from the address on your account or use the Contact Us form. We will reply within 30 days. Deleting your account is permanent: your notes, mock tests, and account details are removed and cannot be recovered, so export anything you want to keep first. If you are on a paid plan, deleting your account also cancels it.

Yomit.ai is operated from Ontario, Canada, and handles personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). If you are in the European Economic Area or the United Kingdom, we process your information to perform our contract with you (to provide the Service and your plan), to pursue our legitimate interests in keeping the Service secure and improving it, to meet our legal obligations, and, for performance cookies, with your consent. You also have the right to complain to your local data protection authority.

Where your information is processed

Yomit.ai is operated from Canada, and our service providers, including Stripe, OpenAI, and Google, process information in the United States and other countries. Wherever your information is processed, it is protected by this policy and by the contractual safeguards we have in place with our providers, but it may also be subject to the laws of those countries.

Security

All traffic between your browser and the Service is encrypted with HTTPS. Passwords are stored as salted hashes, 2-factor authentication is available to every account, and changing your password signs out every other device. Card details are handled entirely by Stripe, a PCI DSS Level 1 certified provider; see our Security page. No method of transmission or storage is completely secure, so please choose a strong password, enable 2-factor authentication, and keep your API token private. If you believe your account has been accessed without your permission, change your password straight away and contact us at security@yomit.ai.

Children

The Service is intended for people aged 18 and over, or younger learners using it with the consent and supervision of a parent or guardian. We do not knowingly collect personal information from children under 13. If you believe a child has created an account without that consent, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time to reflect changes to the Service, our providers, or the law. The date at the top shows when it was last changed. If a change materially reduces your rights or expands what we do with your information, we will let you know by e-mail or with a notice on the site before it takes effect.

Contact us

If you have a question or complaint about this policy or about how we handle your information, e-mail privacy@yomit.ai or use our Contact Us form.